last executing test programs: 29m35.813337726s ago: executing program 32 (id=24): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0xc, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mkdir(0x0, 0x28e08a7aa33ba155) memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc) 29m25.144014867s ago: executing program 33 (id=38): r0 = syz_open_dev$media(&(0x7f00000007c0), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000e80)={{}, {0x80000000, 0x0, 0x0, [0x3, 0x80]}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) syz_open_procfs(0x0, 0x0) r7 = socket$inet6(0xa, 0x6, 0x14) getsockopt$inet6_buf(r7, 0x29, 0x30, &(0x7f0000000180)=""/214, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 26m3.82659309s ago: executing program 34 (id=438): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4040, &(0x7f0000000a80)=ANY=[@ANYBLOB='force,decompose,nls=cp857,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f626172726965722c706172743d3078303030303030303030303030303030342c0029da224046557ecb65ded5c50ad3a6a30bc9ff1a3ebc851290177bba8d57fc514869fde9ff0cd99031aef2250bd32f6fe7dffcc4d843c5398f85b2162d81bd51c7ad5d6c6ec22b4391379123720a07da3c987a8779b03b21db3c6542040ee5b3167521a1f384b80673a5e56ff56bf5523200000000079a42c04c9e8f94e57cdc0e3adfa978c6d4d7f05fa88ead40f3ec2bf6239d4c40d4496fb2ded06d4900"/206], 0x20, 0x6fe, &(0x7f0000002100)="$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") chdir(0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 24m27.7795592s ago: executing program 35 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002880)='./file0\x00', 0x20240d7, 0x0, 0xfe, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) close(r0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r2, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 10m43.989943658s ago: executing program 36 (id=3753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000540)="ff0f000000000000b47380c988cafb", 0xf}, {&(0x7f00000006c0)="493d72f4b067b4d738686977534332", 0xf}], 0x2) 10m9.265890789s ago: executing program 37 (id=3871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000019080)={0x2, 0x4e22, @empty}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000024c0)={@local, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x3, 0x28, 0x68, 0x0, 0x2, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x1, 0x0, 0x6}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004bc0), 0xffffffffffffffff) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9m47.420667612s ago: executing program 38 (id=4016): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 9m27.236438631s ago: executing program 39 (id=4210): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 9m7.136394069s ago: executing program 40 (id=4326): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x94) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = dup(r1) close(0xffffffffffffffff) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r6, 0x0, r1, 0x0, 0xffff, 0x2) 8m11.966697861s ago: executing program 41 (id=4714): socket$unix(0x1, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') read$FUSE(r0, 0x0, 0x0) 8m6.519949593s ago: executing program 42 (id=4759): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000001c0)=""/49, 0x31}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8m1.772213532s ago: executing program 43 (id=4779): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) 7m50.37447033s ago: executing program 44 (id=4825): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) futex(0x0, 0x9, 0x1, &(0x7f00000001c0)={0x77359400}, 0x0, 0x0) 7m46.271895122s ago: executing program 45 (id=4843): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x15, 0x7, 0x8, 0x4b7}]}, 0x10) 7m17.070956408s ago: executing program 46 (id=4971): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x297, &(0x7f0000000480)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) 7m15.275019931s ago: executing program 47 (id=4896): r0 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) move_pages(r0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) 6m28.71347214s ago: executing program 3 (id=5288): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xe6, {[@generic={0x8, 0xc, "57f04e74f13b070d0830"}]}}}}}}}, 0x0) 6m26.894574768s ago: executing program 3 (id=5292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 6m26.614563918s ago: executing program 3 (id=5296): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0xb, 0x0, &(0x7f0000000000), 0xfffffffffffffffe) 6m22.168683229s ago: executing program 3 (id=5310): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000, {r0}}, 0x20) 6m21.897296724s ago: executing program 3 (id=5314): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0xa, 0x3, "3205c5460400000000000000022c1e1ed1bf40070700000265e5c9b19424f214", 0x4c314356}) 6m19.668456025s ago: executing program 3 (id=5320): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xe6, {[@generic={0x8, 0xc, "57f04e74f13b070d0830"}]}}}}}}}, 0x0) 6m18.895262751s ago: executing program 48 (id=5320): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xe6, {[@generic={0x8, 0xc, "57f04e74f13b070d0830"}]}}}}}}}, 0x0) 3m26.09029068s ago: executing program 4 (id=5702): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0x1}]) splice(r1, 0x0, r0, 0x0, 0x7fffefff, 0xc) 3m25.798148249s ago: executing program 4 (id=5705): symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x123) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @loopback, 0x6}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x23}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) 3m25.576687867s ago: executing program 4 (id=5707): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xc}, 0x94) 3m18.895636915s ago: executing program 5 (id=5710): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x1, 0xd9, 0x1, &(0x7f0000000040)={0xa, "810556c721393f4084cc9efc7ddb01702fb9a7f77d040b00"}}) 3m18.548579926s ago: executing program 4 (id=5714): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000009500deffffff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) close(0xffffffffffffffff) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xc89f, 0x1000, 0x0, 0x20002fa}) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 3m18.088196894s ago: executing program 7 (id=5717): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000340)=0x8006) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000140), 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000100)=0x40049, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) lsm_get_self_attr(0x0, 0x0, 0x0, 0x0) 3m18.087688477s ago: executing program 5 (id=5718): symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x123) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @loopback, 0x6}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x23}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) 3m17.225495147s ago: executing program 5 (id=5720): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) umount2(0x0, 0x0) 3m15.984322755s ago: executing program 7 (id=5722): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20060100000036e1c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000007c0)={&(0x7f00000019c0)=[{0x3, 0x1001, 0x73, &(0x7f0000000800)="fb4ff93d4ab1189e4393aeb2fb10255cf963bc70defc1423f73a53e71f2c4ee80baf8494426fb6413026b54eeee86f5c7f916793045aeaf4f1c46de34d1ae3417346b5f857a39160f4e40fb90197067f98910fb9b20d66993c38793062318522e94f8e1610551042e48eb27d95907cd876c107"}, {0xff, 0x8010, 0x0, &(0x7f0000000900)}, {0x3, 0x201, 0x43, &(0x7f0000001900)="009087b22622c68f8223716b7568cbfa1df76e12d178f7b6025ce98a0c57142a1e44c563db46ee134356da867b3e59ff06e24db744b0fd22089a01967e997551207d4a"}, {0xa, 0x8200, 0x18, &(0x7f0000001980)="1dffd3acdbb5335d68060a9fdf78554515aa61719bf0e089"}], 0x4}) 3m13.296378404s ago: executing program 5 (id=5725): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[]) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 3m12.826050003s ago: executing program 5 (id=5726): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xc}, 0x94) 3m10.616598563s ago: executing program 7 (id=5728): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='auxv\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/24, 0x18}], 0x1}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 3m9.656883896s ago: executing program 4 (id=5730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r3, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 3m9.487062776s ago: executing program 7 (id=5731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 3m9.300234742s ago: executing program 4 (id=5732): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x2c}}, 0x20000000) 3m9.15745474s ago: executing program 7 (id=5733): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000340)=0x8006) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000140), 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000100)=0x40049, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) lsm_get_self_attr(0x0, 0x0, 0x0, 0x0) 3m9.15237413s ago: executing program 5 (id=5734): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m8.370709313s ago: executing program 7 (id=5736): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) syz_open_procfs$userns(0x0, &(0x7f0000000580)) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 2m53.696071266s ago: executing program 49 (id=5734): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m53.412970774s ago: executing program 50 (id=5732): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x2c}}, 0x20000000) 2m52.430451954s ago: executing program 51 (id=5736): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) syz_open_procfs$userns(0x0, &(0x7f0000000580)) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 44.624491764s ago: executing program 1 (id=6014): syz_emit_ethernet(0x4c, &(0x7f0000000880)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0xb}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "d2cd7169d357"}}}}}}}, 0x0) 43.785794207s ago: executing program 1 (id=6018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r4, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 42.329398891s ago: executing program 1 (id=6022): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r0, &(0x7f0000001300), 0x0) 39.032781373s ago: executing program 1 (id=6030): syz_emit_ethernet(0x4c, &(0x7f0000000880)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0xb}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "d2cd7169d357"}}}}}}}, 0x0) 38.647374031s ago: executing program 1 (id=6036): r0 = io_uring_setup(0x66a1, &(0x7f0000002140)={0x0, 0xaf14, 0x800, 0x2, 0x392}) close(r0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x20000805) listen(r1, 0x0) accept(r1, 0x0, 0x0) 37.220588035s ago: executing program 1 (id=6040): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) 21.945712637s ago: executing program 52 (id=6040): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) 9.160328888s ago: executing program 8 (id=6127): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x13) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r2 = open(&(0x7f0000000480)='./bus\x00', 0xea000, 0x718bb647156ec3be) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x1400) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000000)='./file0\x00') 8.932536192s ago: executing program 9 (id=6129): syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0x62, &(0x7f0000000100)=@string={0x62, 0x3, "6fbe9689380ce1f74463c03ec1566a9a4576bf4761ddb006a150bebdbb221d511abd6ab0ee07bc8394531b2cea182382a2f3958d8a31f0d90fd54668a9bed15194a68b2825ab6a25114b3783c9748c940a9e33ee533c4dbab007620d7f98a911"}}, {0x0, 0x0}]}) 8.869250081s ago: executing program 2 (id=6130): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) 8.684879315s ago: executing program 8 (id=6132): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 6.261801034s ago: executing program 9 (id=6140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x32, &(0x7f00000002c0)="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", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x19) 5.993756139s ago: executing program 9 (id=6141): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20060100000036e1c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000007c0)={&(0x7f00000019c0)=[{0x3, 0x1001, 0x73, &(0x7f0000000800)="fb4ff93d4ab1189e4393aeb2fb10255cf963bc70defc1423f73a53e71f2c4ee80baf8494426fb6413026b54eeee86f5c7f916793045aeaf4f1c46de34d1ae3417346b5f857a39160f4e40fb90197067f98910fb9b20d66993c38793062318522e94f8e1610551042e48eb27d95907cd876c107"}, {0xff, 0x8010, 0x0, &(0x7f0000000900)}, {0x3, 0x201, 0x43, &(0x7f0000001900)="009087b22622c68f8223716b7568cbfa1df76e12d178f7b6025ce98a0c57142a1e44c563db46ee134356da867b3e59ff06e24db744b0fd22089a01967e997551207d4a"}, {0xa, 0x8200, 0x18, &(0x7f0000001980)="1dffd3acdbb5335d68060a9fdf78554515aa61719bf0e089"}], 0x4}) 5.948727319s ago: executing program 6 (id=6142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r4, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 5.786467937s ago: executing program 6 (id=6143): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x13) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r2 = open(&(0x7f0000000480)='./bus\x00', 0xea000, 0x718bb647156ec3be) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x1400) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000000)='./file0\x00') 5.608808418s ago: executing program 6 (id=6144): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000300002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000009500deffffff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) close(0xffffffffffffffff) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 5.602159754s ago: executing program 2 (id=6145): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000340)=0x8006) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x40049, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 5.296483084s ago: executing program 2 (id=6146): pipe2$9p(&(0x7f0000000240), 0x0) timerfd_create(0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xb1, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x404) setresuid(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x4008af83, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000380)={0xf0f003, 0x4}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4000804) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x804) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 5.052654027s ago: executing program 8 (id=6147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.999336455s ago: executing program 2 (id=6148): r0 = syz_open_dev$video4linux(&(0x7f0000000780), 0x5, 0x0) mkdir(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) read$FUSE(r4, &(0x7f0000002500)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x0, {0x0, 0x2, 0x4, 0xc09}}) 4.76422597s ago: executing program 0 (id=6149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xa, 0x3, 0xff) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 4.761968758s ago: executing program 8 (id=6150): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x34, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x10000004) 4.416904227s ago: executing program 6 (id=6151): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() fallocate(0xffffffffffffffff, 0x6c, 0x5, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x34, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x10000004) 3.594053475s ago: executing program 0 (id=6152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x32, &(0x7f00000002c0)="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", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x19) 3.3042789s ago: executing program 0 (id=6153): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)}], 0x1) 2.874131347s ago: executing program 2 (id=6154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r4, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 2.687028729s ago: executing program 9 (id=6155): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x13) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r2 = open(&(0x7f0000000480)='./bus\x00', 0xea000, 0x718bb647156ec3be) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x1400) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000000)='./file0\x00') 2.318721996s ago: executing program 2 (id=6156): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x8000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x9464}, 0x0, 0x0) 2.083757097s ago: executing program 6 (id=6157): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000340)=0x8006) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x40049, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 1.942310656s ago: executing program 9 (id=6158): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 1.708164922s ago: executing program 0 (id=6159): pipe2$9p(&(0x7f0000000240), 0x0) timerfd_create(0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xb1, 0x0, &(0x7f0000000280)) socket$packet(0x11, 0x3, 0x300) modify_ldt$write(0x1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x404) setresuid(0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x4008af83, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000380)={0xf0f003, 0x4}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x4000804) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x804) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 1.671127545s ago: executing program 9 (id=6160): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0xd9, 0x1, &(0x7f0000000040)={0xa, "810556c721393f4084cc9efc7ddb01702fb9a7f77d040b00"}}) 1.154808483s ago: executing program 6 (id=6161): r0 = socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000080), 0x1003) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) setreuid(0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r2, 0x5411, 0xffefff1f00000000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) getpid() open(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) r5 = socket$caif_stream(0x25, 0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000007ca010"], 0x1c}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/253, 0xfd}], 0x1, &(0x7f000001b240)=""/4096, 0x1000}, 0x452}], 0x1, 0x40000000, &(0x7f0000000280)={0x0, 0x989680}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x20000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume_offset', 0x100, 0x2) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="120110030000001041f61c0904005e0103010108092180000401223401090581030004c02bc77f050203000408050800"/63], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 997.003523ms ago: executing program 0 (id=6162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a310000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 252.423396ms ago: executing program 0 (id=6163): pipe2$9p(&(0x7f0000000000), 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 202.934144ms ago: executing program 8 (id=6164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x32, &(0x7f00000002c0)="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", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x19) 0s ago: executing program 8 (id=6165): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000001380)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) getdents(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): new high-speed USB device number 3 using dummy_hcd [ 1564.439657][T24081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1565.170769][ T8873] usb 6-1: Using ep0 maxpacket: 8 [ 1565.211730][ T8873] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1565.229787][ T8873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.237822][ T8873] usb 6-1: Product: syz [ 1565.284209][ T8873] usb 6-1: Manufacturer: syz [ 1565.308911][ T8873] usb 6-1: SerialNumber: syz [ 1565.325487][ T8873] usb 6-1: config 0 descriptor?? [ 1565.334091][T24081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1565.455932][T24328] befs: (nullb0): invalid magic header [ 1565.905767][ T8873] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1566.107821][ T8873] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1567.524163][T24081] team0: Port device team_slave_0 added [ 1568.289464][T24057] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1569.045659][T24081] team0: Port device team_slave_1 added [ 1570.750543][T17926] usb 6-1: USB disconnect, device number 3 [ 1572.354267][T24081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1572.366866][T24081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.479249][T24371] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5395'. [ 1572.489401][T24081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1572.523608][T24081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1572.559373][T24081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.944490][ T5146] Bluetooth: hci5: command 0x0406 tx timeout [ 1573.645141][T24081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1573.872219][T24385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5401'. [ 1573.923756][T24081] hsr_slave_0: entered promiscuous mode [ 1573.954009][T24081] hsr_slave_1: entered promiscuous mode [ 1573.989517][T24081] debugfs: 'hsr0' already exists in 'hsr' [ 1574.003631][T24081] Cannot create hsr debugfs directory [ 1574.315268][T24399] befs: (nullb0): invalid magic header [ 1575.562505][T24404] netlink: 'syz.7.5405': attribute type 12 has an invalid length. [ 1575.574616][T24404] netlink: 'syz.7.5405': attribute type 29 has an invalid length. [ 1575.584700][T24404] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5405'. [ 1575.596999][T24404] netlink: 'syz.7.5405': attribute type 1 has an invalid length. [ 1575.819217][T24404] netlink: 'syz.7.5405': attribute type 2 has an invalid length. [ 1575.857920][T24404] netlink: 31 bytes leftover after parsing attributes in process `syz.7.5405'. [ 1578.252988][T24433] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 1578.259652][T24433] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1578.267831][T24433] vhci_hcd vhci_hcd.0: Device attached [ 1578.609136][T24436] vhci_hcd: connection closed [ 1578.677241][ T5996] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 1578.736929][ T3562] vhci_hcd vhci_hcd.5: stop threads [ 1578.813597][ T3562] vhci_hcd vhci_hcd.5: release socket [ 1578.878110][ T3562] vhci_hcd vhci_hcd.5: disconnect device [ 1580.845980][T24081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.536957][ T5996] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1585.121268][T24081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.557580][T24466] ALSA: mixer_oss: invalid OSS volume '' [ 1586.526151][T24081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.230730][T24081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.291735][T24498] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5428'. [ 1587.303041][T24498] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5428'. [ 1587.695583][T24081] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1587.749070][T24081] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1588.124725][T24511] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1588.131471][T24511] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1588.139431][T24511] vhci_hcd vhci_hcd.0: Device attached [ 1588.508443][T24081] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1588.751064][T24513] vhci_hcd: connection closed [ 1588.798909][ T3836] vhci_hcd vhci_hcd.0: stop threads [ 1589.138441][ T3836] vhci_hcd vhci_hcd.0: release socket [ 1589.240593][ T1205] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1589.251511][ T3836] vhci_hcd vhci_hcd.0: disconnect device [ 1589.267684][T24081] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1589.492403][ T1205] usb 33-1: enqueue for inactive port 0 [ 1589.780746][ T1205] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1590.302810][T24518] loop6: detected capacity change from 0 to 524287999 [ 1590.675892][T24523] misc userio: No port type given on /dev/userio [ 1591.024561][T24528] Dev loop6: unable to read RDB block 8 [ 1593.029662][T24528] loop6: unable to read partition table [ 1593.061114][T24528] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1597.202375][ T6388] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.295629][T24542] Set syz1 is full, maxelem 65536 reached [ 1608.041623][ T6388] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.232508][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1608.245438][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1608.255805][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1608.264455][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1608.273527][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1609.933817][ T5146] Bluetooth: hci6: command 0x0405 tx timeout [ 1609.945664][ T6388] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.374007][T10085] Bluetooth: hci4: command tx timeout [ 1610.941794][ T6388] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.630860][T24625] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5457'. [ 1612.451708][T10085] Bluetooth: hci4: command tx timeout [ 1612.971908][T24641] hpfs: hpfs_map_sector(): read error [ 1613.990384][ T6388] bridge_slave_1: left allmulticast mode [ 1613.996079][ T6388] bridge_slave_1: left promiscuous mode [ 1614.033032][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.988660][T10085] Bluetooth: hci4: command tx timeout [ 1616.005615][ T6388] bridge_slave_0: left allmulticast mode [ 1616.059859][ T6388] bridge_slave_0: left promiscuous mode [ 1616.065701][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.940012][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.878261][T24686] dlm: no local IP address has been set [ 1617.884628][T24686] dlm: cannot start dlm midcomms -107 [ 1618.499686][T10085] Bluetooth: hci4: command tx timeout [ 1618.731669][ T7593] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1619.890861][ T7593] usb 1-1: Using ep0 maxpacket: 16 [ 1619.978971][ T7593] usb 1-1: config 4 has an invalid interface number: 194 but max is 0 [ 1619.991498][ T7593] usb 1-1: config 4 has no interface number 0 [ 1619.997763][ T7593] usb 1-1: config 4 interface 194 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1620.008254][ T7593] usb 1-1: config 4 interface 194 has no altsetting 0 [ 1620.018328][ T7593] usb 1-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice=1c.bf [ 1620.027620][ T7593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.035797][ T7593] usb 1-1: Product: syz [ 1620.066343][ T7593] usb 1-1: Manufacturer: syz [ 1620.072733][ T7593] usb 1-1: SerialNumber: syz [ 1620.085423][T24686] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1620.106419][ T7593] em28xx 1-1:4.194: New device syz syz @ 480 Mbps (2040:6500, interface 194, class 194) [ 1620.127358][ T7593] em28xx 1-1:4.194: Video interface 194 found: bulk [ 1620.968235][ T6388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.167889][ T6388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.217791][ T6388] bond0 (unregistering): Released all slaves [ 1621.503662][ T7593] em28xx 1-1:4.194: unknown em28xx chip ID (0) [ 1621.617215][ T7593] em28xx 1-1:4.194: reading from i2c device at 0xa0 failed (error=-5) [ 1621.664419][ T7593] em28xx 1-1:4.194: board has no eeprom [ 1621.747193][T24706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5474'. [ 1621.757306][ T7593] em28xx 1-1:4.194: Identified as Hauppauge WinTV HVR 900 (card=10) [ 1621.914937][ T7593] em28xx 1-1:4.194: analog set to bulk mode. [ 1621.930400][T24584] em28xx 1-1:4.194: Registering V4L2 extension [ 1622.021909][ T7593] usb 1-1: USB disconnect, device number 15 [ 1622.063274][ T7593] em28xx 1-1:4.194: Disconnecting em28xx [ 1622.182759][T24598] chnl_net:caif_netlink_parms(): no params data found [ 1622.254824][T24706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5474'. [ 1622.719178][T24584] em28xx 1-1:4.194: Config register raw data: 0xffffffed [ 1622.854161][T24584] em28xx 1-1:4.194: AC97 chip type couldn't be determined [ 1623.228204][T24584] em28xx 1-1:4.194: No AC97 audio processor [ 1623.609489][T24584] em28xx 1-1:4.194: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 1623.629812][T24584] em28xx 1-1:4.194: Binding DVB extension [ 1623.659492][T24584] em28xx 1-1:4.194: no endpoint for DVB mode and transfer type 0 [ 1623.667263][T24584] em28xx 1-1:4.194: failed to pre-allocate USB transfer buffers for DVB. [ 1623.683523][T24584] em28xx 1-1:4.194: Registering input extension [ 1623.693775][ T7593] em28xx 1-1:4.194: Closing input extension [ 1624.050581][ T9602] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1624.104492][ T7593] em28xx 1-1:4.194: Freeing device [ 1624.584243][T24735] befs: (nullb0): invalid magic header [ 1624.659566][ T9602] usb 8-1: Using ep0 maxpacket: 32 [ 1624.667330][ T9602] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1624.678626][ T9602] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.860705][ T9602] usb 8-1: config 0 descriptor?? [ 1624.907334][ T6388] hsr_slave_0: left promiscuous mode [ 1624.942096][ T6388] hsr_slave_1: left promiscuous mode [ 1624.948341][ T6388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1625.021768][ T6388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1625.055503][ T6388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1625.094165][ T6388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1625.133057][ T9602] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1625.194977][ T9602] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1625.219679][ T6388] veth1_macvtap: left promiscuous mode [ 1625.247110][ T6388] veth0_macvtap: left promiscuous mode [ 1625.266244][ T6388] veth1_vlan: left promiscuous mode [ 1625.272999][ T9602] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1625.289893][ T6388] veth0_vlan: left promiscuous mode [ 1625.564160][ T9602] usb 8-1: media controller created [ 1625.691566][ T9602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1625.963196][ T9602] az6027: usb out operation failed. (-71) [ 1626.986008][ T9602] az6027: usb out operation failed. (-71) [ 1627.259933][ T9602] stb0899_attach: Driver disabled by Kconfig [ 1627.266369][ T9602] az6027: no front-end attached [ 1627.266369][ T9602] [ 1627.325894][ T9602] az6027: usb out operation failed. (-71) [ 1627.376212][ T9602] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1627.484904][ T9602] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input43 [ 1628.144023][ T9602] dvb-usb: schedule remote query interval to 400 msecs. [ 1628.329181][T24769] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5489'. [ 1628.364725][ T9602] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1628.443578][ T9602] usb 8-1: USB disconnect, device number 15 [ 1628.705726][ T9602] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1629.795029][ T6388] team0 (unregistering): Port device team_slave_1 removed [ 1630.054765][T24782] Cannot find set identified by id 0 to match [ 1630.158791][ T6388] team0 (unregistering): Port device team_slave_0 removed [ 1631.064039][T24769] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5489'. [ 1631.280062][T24537] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1631.302736][T24598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.313350][T24598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.350255][T24598] bridge_slave_0: entered allmulticast mode [ 1631.407325][T24598] bridge_slave_0: entered promiscuous mode [ 1631.460092][T24598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.497946][T24598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.548291][T24598] bridge_slave_1: entered allmulticast mode [ 1631.610710][T24598] bridge_slave_1: entered promiscuous mode [ 1631.671567][T24537] usb 8-1: Using ep0 maxpacket: 32 [ 1631.799060][T24537] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1631.977199][T24537] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1632.060769][T24537] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.133225][T24537] usb 8-1: Product: syz [ 1632.579400][T24537] usb 8-1: Manufacturer: syz [ 1632.753446][T24810] dlm: no local IP address has been set [ 1632.760291][T24810] dlm: cannot start dlm midcomms -107 [ 1633.145744][T24537] usb 8-1: SerialNumber: syz [ 1633.336525][T24537] usb 8-1: config 0 descriptor?? [ 1633.422044][T24598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.428378][T24792] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1633.477792][T24598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1633.505793][T24537] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input44 [ 1634.838432][T24537] usb 8-1: USB disconnect, device number 16 [ 1634.844583][ C1] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1638.181526][T24598] team0: Port device team_slave_0 added [ 1638.205892][T24598] team0: Port device team_slave_1 added [ 1638.830393][T24598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1638.837364][T24598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1639.183841][T24598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1639.253978][T24598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1639.340097][T24598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1639.815916][T24598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.515995][T24874] dlm: no local IP address has been set [ 1640.534926][T24874] dlm: cannot start dlm midcomms -107 [ 1643.855793][T10085] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1643.866428][T10085] CPU: 1 UID: 0 PID: 10085 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1643.866486][T10085] Tainted: [L]=SOFTLOCKUP [ 1643.866500][T10085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1643.866524][T10085] Workqueue: hci6 hci_rx_work [ 1643.866574][T10085] Call Trace: [ 1643.866586][T10085] [ 1643.866600][T10085] dump_stack_lvl+0x16c/0x1f0 [ 1643.866660][T10085] sysfs_warn_dup+0x7f/0xa0 [ 1643.866696][T10085] sysfs_create_dir_ns+0x24b/0x2b0 [ 1643.866734][T10085] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1643.866769][T10085] ? find_held_lock+0x2b/0x80 [ 1643.866837][T10085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1643.866879][T10085] ? do_raw_spin_unlock+0x172/0x230 [ 1643.866930][T10085] kobject_add_internal+0x2c4/0x9d0 [ 1643.866974][T10085] kobject_add+0x16e/0x240 [ 1643.867007][T10085] ? __pfx_kobject_add+0x10/0x10 [ 1643.867043][T10085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1643.867095][T10085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1643.867138][T10085] ? kobject_put+0xaf/0x6f0 [ 1643.867190][T10085] ? _raw_spin_unlock+0x28/0x50 [ 1643.867240][T10085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1643.867291][T10085] device_add+0x288/0x1980 [ 1643.867339][T10085] ? __pfx_dev_set_name+0x10/0x10 [ 1643.867392][T10085] ? __pfx_device_add+0x10/0x10 [ 1643.867438][T10085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1643.867479][T10085] ? mgmt_send_event_skb+0x2fb/0x460 [ 1643.867538][T10085] hci_conn_add_sysfs+0x1a8/0x260 [ 1643.867594][T10085] le_conn_complete_evt+0x11ed/0x1fa0 [ 1643.867651][T10085] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1643.867702][T10085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1643.867750][T10085] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1643.867807][T10085] hci_le_meta_evt+0x357/0x610 [ 1643.867857][T10085] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1643.867910][T10085] hci_event_packet+0x685/0x1210 [ 1643.867957][T10085] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1643.868009][T10085] ? __pfx_hci_event_packet+0x10/0x10 [ 1643.868055][T10085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1643.868106][T10085] ? kcov_remote_start+0x399/0x680 [ 1643.868144][T10085] ? lockdep_hardirqs_on+0x7c/0x110 [ 1643.868196][T10085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1643.868248][T10085] hci_rx_work+0x2c9/0x1020 [ 1643.868291][T10085] ? __entry_text_end+0x1020b5/0x1020b9 [ 1643.868341][T10085] process_one_work+0x9ba/0x1b20 [ 1643.868403][T10085] ? __pfx_process_one_work+0x10/0x10 [ 1643.868450][T10085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1643.868501][T10085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1643.868542][T10085] ? assign_work+0x1a0/0x250 [ 1643.868588][T10085] worker_thread+0x6c8/0xf10 [ 1643.868653][T10085] ? __pfx_worker_thread+0x10/0x10 [ 1643.868698][T10085] kthread+0x3c5/0x780 [ 1643.868741][T10085] ? __pfx_kthread+0x10/0x10 [ 1643.868784][T10085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1643.868825][T10085] ? rcu_is_watching+0x12/0xc0 [ 1643.868859][T10085] ? __pfx_kthread+0x10/0x10 [ 1643.868903][T10085] ret_from_fork+0x983/0xb10 [ 1643.868942][T10085] ? __pfx_ret_from_fork+0x10/0x10 [ 1643.868984][T10085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1643.869025][T10085] ? __switch_to+0x7af/0x10d0 [ 1643.869071][T10085] ? __pfx_kthread+0x10/0x10 [ 1643.869120][T10085] ret_from_fork_asm+0x1a/0x30 [ 1643.869195][T10085] [ 1643.869242][T10085] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1644.302999][T10085] Bluetooth: hci6: failed to register connection device [ 1644.544509][T24598] hsr_slave_0: entered promiscuous mode [ 1644.581019][T24598] hsr_slave_1: entered promiscuous mode [ 1644.596776][T24598] debugfs: 'hsr0' already exists in 'hsr' [ 1644.616297][T24598] Cannot create hsr debugfs directory [ 1645.976930][ T6388] bridge_slave_1: left allmulticast mode [ 1646.003770][ T6388] bridge_slave_1: left promiscuous mode [ 1646.045584][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.168948][ T6388] bridge_slave_0: left allmulticast mode [ 1646.191064][ T6388] bridge_slave_0: left promiscuous mode [ 1646.196837][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.604062][ T6388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1649.672953][ T6388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1649.764699][ T6388] bond0 (unregistering): Released all slaves [ 1649.809938][ T31] audit: type=1326 audit(1765871370.891:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24936 comm="syz.6.5530" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d5a78f749 code=0x0 [ 1650.059489][T24057] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1650.138829][ T6388] hsr_slave_0: left promiscuous mode [ 1650.214391][ T6388] hsr_slave_1: left promiscuous mode [ 1650.231735][T24057] usb 8-1: Using ep0 maxpacket: 8 [ 1650.249496][T24057] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1650.253970][ T6388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1650.278117][T24057] usb 8-1: config 179 has no interface number 0 [ 1650.305136][T24057] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1650.339796][T24057] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1650.379471][T24057] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1650.411864][T24057] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1650.439031][T24057] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1650.471272][T24057] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1650.485982][T24057] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.506738][T24938] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1650.765362][T24057] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input45 [ 1650.957622][T24938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.043502][T24938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.355818][T19510] usb 8-1: USB disconnect, device number 17 [ 1651.355894][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1651.370117][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1651.794511][ T6388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1651.860039][T24537] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1652.071882][T24537] usb 1-1: Using ep0 maxpacket: 16 [ 1652.104942][T24537] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1652.142244][T24537] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1652.160670][T24537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.168692][T24537] usb 1-1: Product: syz [ 1652.184293][T24537] usb 1-1: Manufacturer: syz [ 1652.188936][T24537] usb 1-1: SerialNumber: syz [ 1652.244886][T24537] usb 1-1: config 0 descriptor?? [ 1652.293052][T24537] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1652.310152][T24537] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1652.486101][ T6388] team0 (unregistering): Port device team_slave_1 removed [ 1652.529497][ T8873] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1652.544877][ T6388] team0 (unregistering): Port device team_slave_0 removed [ 1652.701889][ T8873] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1652.718506][ T8873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.763576][ T8873] usb 5-1: config 0 descriptor?? [ 1652.888820][T24537] em28xx 1-1:0.0: chip ID is em2765 [ 1654.623494][T24537] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1654.631589][T24537] em28xx 1-1:0.0: board has no eeprom [ 1655.517507][T24537] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1655.531339][ T8873] usbhid 5-1:0.0: can't add hid device: -71 [ 1655.537371][ T8873] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1655.538899][T24537] em28xx 1-1:0.0: dvb set to bulk mode. [ 1655.552288][T19510] em28xx 1-1:0.0: Binding DVB extension [ 1655.636101][T24537] usb 1-1: USB disconnect, device number 16 [ 1655.658076][T24537] em28xx 1-1:0.0: Disconnecting em28xx [ 1655.669428][ T8873] usb 5-1: USB disconnect, device number 7 [ 1656.129149][T19510] em28xx 1-1:0.0: Registering input extension [ 1656.814723][T24537] em28xx 1-1:0.0: Closing input extension [ 1657.217544][T24537] em28xx 1-1:0.0: Freeing device [ 1657.713034][T24598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1657.806834][T24598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1657.876588][T24598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1657.992663][T24598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1658.395178][T24598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1658.491249][T24598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.512421][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.519679][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1659.207048][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.214627][ T6323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1659.263167][T25005] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1659.529449][T25005] usb 1-1: Using ep0 maxpacket: 16 [ 1659.541445][T25005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1659.567448][T25005] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1659.619213][T25005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.659432][T25005] usb 1-1: Product: syz [ 1659.677353][T25005] usb 1-1: Manufacturer: syz [ 1659.699869][T25005] usb 1-1: SerialNumber: syz [ 1659.735475][T25005] usb 1-1: config 0 descriptor?? [ 1659.768272][T25005] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1659.828508][T25005] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1660.661269][T25084] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 1660.872612][T25005] em28xx 1-1:0.0: chip ID is em2765 [ 1661.234732][T24598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1662.035760][T25005] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1662.089488][T25005] em28xx 1-1:0.0: board has no eeprom [ 1662.179445][T25005] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1662.187327][T25005] em28xx 1-1:0.0: dvb set to bulk mode. [ 1662.478962][ T8873] em28xx 1-1:0.0: Binding DVB extension [ 1662.499834][T25005] usb 1-1: USB disconnect, device number 17 [ 1662.510781][T25005] em28xx 1-1:0.0: Disconnecting em28xx [ 1662.536748][T25117] befs: (nullb0): invalid magic header [ 1663.165163][ T8873] em28xx 1-1:0.0: Registering input extension [ 1663.209279][T25005] em28xx 1-1:0.0: Closing input extension [ 1663.977445][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1663.994778][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1664.005100][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1664.016193][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1664.025466][T25005] em28xx 1-1:0.0: Freeing device [ 1664.031260][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1666.161813][ T5146] Bluetooth: hci2: command tx timeout [ 1666.932268][T25152] tipc: Enabling of bearer rejected, failed to enable media [ 1668.397133][T10085] Bluetooth: hci2: command tx timeout [ 1669.052853][ T8873] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1669.235123][ T8873] usb 7-1: Using ep0 maxpacket: 16 [ 1670.201532][ T8873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1670.216624][ T8873] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1670.226313][ T8873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.234649][ T8873] usb 7-1: Product: syz [ 1670.241119][ T8873] usb 7-1: Manufacturer: syz [ 1670.245729][ T8873] usb 7-1: SerialNumber: syz [ 1670.439533][T10085] Bluetooth: hci2: command tx timeout [ 1671.052711][ T8873] usb 7-1: config 0 descriptor?? [ 1671.069461][ T8873] usb 7-1: can't set config #0, error -71 [ 1671.076991][ T8873] usb 7-1: USB disconnect, device number 9 [ 1672.858279][T10085] Bluetooth: hci2: command tx timeout [ 1674.009870][T23935] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1674.399422][T23935] usb 6-1: Using ep0 maxpacket: 32 [ 1674.417329][T25215] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5609'. [ 1674.447439][T23935] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1674.489867][T23935] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1674.524641][T23935] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1674.565642][T23935] usb 6-1: config 1 has no interface number 0 [ 1674.575516][T23935] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1674.619829][T23935] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1674.683598][T23935] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1674.702978][T23935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.990413][T23935] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1675.852602][T23935] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1676.299992][T24674] usb 6-1: USB disconnect, device number 4 [ 1676.374207][T24674] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1676.389470][ T6029] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1676.496309][T25130] chnl_net:caif_netlink_parms(): no params data found [ 1677.469698][ T4529] bridge_slave_1: left allmulticast mode [ 1677.487818][ T4529] bridge_slave_1: left promiscuous mode [ 1677.495163][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.367077][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.436029][ T4529] bridge_slave_0: left allmulticast mode [ 1678.506497][ T4529] bridge_slave_0: left promiscuous mode [ 1678.540725][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.849957][ T6029] usb 5-1: Using ep0 maxpacket: 16 [ 1678.879022][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1678.907999][ T6029] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1678.929582][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.128507][ T6029] usb 5-1: Product: syz [ 1679.149544][T24674] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1679.186084][ T6029] usb 5-1: Manufacturer: syz [ 1679.213986][ T6029] usb 5-1: SerialNumber: syz [ 1679.279287][ T6029] usb 5-1: config 0 descriptor?? [ 1679.396449][ T6029] usb 5-1: can't set config #0, error -71 [ 1679.847204][T24674] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1679.857965][ T6029] usb 5-1: USB disconnect, device number 8 [ 1679.898163][T25266] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5624'. [ 1679.933438][T24674] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.985636][T24674] usb 6-1: Product: syz [ 1680.024252][T24674] usb 6-1: Manufacturer: syz [ 1680.030055][T24674] usb 6-1: SerialNumber: syz [ 1681.269739][T24674] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1682.269466][T24674] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1683.368189][T24674] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1683.491434][T25302] befs: (nullb0): invalid magic header [ 1683.929788][T24674] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1683.955405][T24674] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1684.030520][T24674] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1684.121556][T24674] usb 6-1: USB disconnect, device number 5 [ 1684.175667][T25311] binder: 25309:25311 ioctl c0306201 0 returned -14 [ 1684.244542][T25313] 9p: Bad value for 'rfdno' [ 1684.289902][ T8873] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1684.452704][ T8873] usb 1-1: Using ep0 maxpacket: 16 [ 1684.464834][ T8873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1684.498267][ T8873] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1684.512638][ T4529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1684.521924][ T8873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.532275][ T8873] usb 1-1: Product: syz [ 1684.543340][ T8873] usb 1-1: Manufacturer: syz [ 1684.554041][ T4529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1684.563505][ T8873] usb 1-1: SerialNumber: syz [ 1684.583329][ T4529] bond0 (unregistering): Released all slaves [ 1684.592725][ T8873] usb 1-1: config 0 descriptor?? [ 1684.615197][ T8873] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1684.640250][ T8873] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1684.831878][ T4529] hsr_slave_0: left promiscuous mode [ 1684.838738][ T4529] hsr_slave_1: left promiscuous mode [ 1684.845073][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1684.857060][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1686.134912][ T8873] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1687.257988][ T8873] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1687.829676][ T8873] em28xx 1-1:0.0: board has no eeprom [ 1687.949423][ T8873] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1687.984263][ T8873] em28xx 1-1:0.0: dvb set to bulk mode. [ 1688.005053][ T10] em28xx 1-1:0.0: Binding DVB extension [ 1688.033772][ T8873] usb 1-1: USB disconnect, device number 18 [ 1688.085646][ T8873] em28xx 1-1:0.0: Disconnecting em28xx [ 1688.401466][ T10] em28xx 1-1:0.0: Registering input extension [ 1688.409971][ T8873] em28xx 1-1:0.0: Closing input extension [ 1688.488621][ T8873] em28xx 1-1:0.0: Freeing device [ 1688.929503][ T8873] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1688.999435][ T4529] team0 (unregistering): Port device team_slave_1 removed [ 1689.089280][ T4529] team0 (unregistering): Port device team_slave_0 removed [ 1689.091459][ T8873] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1689.112270][ T8873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.127375][ T8873] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1689.138174][ T8873] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1689.147431][ T8873] usb 1-1: Manufacturer: syz [ 1689.155399][ T8873] usb 1-1: config 0 descriptor?? [ 1689.261827][ T8873] rc_core: IR keymap rc-hauppauge not found [ 1689.281541][ T8873] Registered IR keymap rc-empty [ 1689.330278][ T8873] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1689.374971][ T8873] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input49 [ 1689.414136][ T8873] usb 1-1: USB disconnect, device number 19 [ 1689.783124][T25371] 9p: Bad value for 'rfdno' [ 1690.939663][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1691.247669][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1691.309466][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1691.352175][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1691.377278][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.386428][ T10] usb 7-1: Product: syz [ 1691.396714][T25130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.409713][ T10] usb 7-1: Manufacturer: syz [ 1691.414374][ T10] usb 7-1: SerialNumber: syz [ 1691.448707][T25130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.456895][T25130] bridge_slave_0: entered allmulticast mode [ 1691.460852][ T10] usb 7-1: config 0 descriptor?? [ 1691.488421][T25130] bridge_slave_0: entered promiscuous mode [ 1691.492071][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1691.504449][ T10] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1691.555359][T25130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.591203][T25130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.608844][T25130] bridge_slave_1: entered allmulticast mode [ 1691.617921][T25130] bridge_slave_1: entered promiscuous mode [ 1693.079717][ T10] em28xx 7-1:0.0: chip ID is em2765 [ 1693.537270][T25130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.642394][ T10] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1694.692440][T25130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.707401][ T10] em28xx 7-1:0.0: board has no eeprom [ 1694.859425][ T10] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1695.091952][ T10] em28xx 7-1:0.0: dvb set to bulk mode. [ 1695.097675][T24674] em28xx 7-1:0.0: Binding DVB extension [ 1695.109094][T25412] 9p: Bad value for 'rfdno' [ 1695.937355][ T10] usb 7-1: USB disconnect, device number 10 [ 1695.988811][ T10] em28xx 7-1:0.0: Disconnecting em28xx [ 1696.010613][T25130] team0: Port device team_slave_0 added [ 1696.084372][T25130] team0: Port device team_slave_1 added [ 1696.113848][T24674] em28xx 7-1:0.0: Registering input extension [ 1696.156529][ T10] em28xx 7-1:0.0: Closing input extension [ 1696.238411][ T10] em28xx 7-1:0.0: Freeing device [ 1696.528718][T25130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1696.560550][T25130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1698.472235][T25130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1698.882394][T25130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.047991][T25130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.086386][T25437] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1699.093018][T25437] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1699.101034][T25437] vhci_hcd vhci_hcd.0: Device attached [ 1699.156444][T25438] vhci_hcd: connection closed [ 1699.248978][ T6006] vhci_hcd vhci_hcd.0: stop threads [ 1699.501591][ T6006] vhci_hcd vhci_hcd.0: release socket [ 1699.519487][T23963] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1699.649574][ T6006] vhci_hcd vhci_hcd.0: disconnect device [ 1699.655726][ T7593] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1699.708225][T25130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.207281][T25466] 9p: Bad value for 'rfdno' [ 1703.244426][T25130] hsr_slave_0: entered promiscuous mode [ 1703.274080][T25130] hsr_slave_1: entered promiscuous mode [ 1703.300392][T25130] debugfs: 'hsr0' already exists in 'hsr' [ 1703.309977][T25130] Cannot create hsr debugfs directory [ 1703.449453][ T8873] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1703.597816][T25477] futex_wake_op: syz.5.5690 tries to shift op by -1; fix this program [ 1703.629433][ T8873] usb 1-1: Using ep0 maxpacket: 16 [ 1703.657902][ T8873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1703.719819][ T8873] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1703.747195][ T8873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.761885][ T8873] usb 1-1: Product: syz [ 1703.786355][ T8873] usb 1-1: Manufacturer: syz [ 1703.795898][ T8873] usb 1-1: SerialNumber: syz [ 1703.874787][ T8873] usb 1-1: config 0 descriptor?? [ 1703.962579][ T8873] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1704.015590][ T8873] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1704.030810][T25005] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1704.275106][ T73] bridge_slave_1: left allmulticast mode [ 1704.284970][ T73] bridge_slave_1: left promiscuous mode [ 1704.291470][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.306831][ T73] bridge_slave_0: left allmulticast mode [ 1704.313212][ T73] bridge_slave_0: left promiscuous mode [ 1704.321609][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.329694][T25005] usb 7-1: Using ep0 maxpacket: 16 [ 1704.355116][T25005] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.601490][T25005] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1706.613353][ T8873] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1706.662009][T25005] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.696894][T25005] usb 7-1: config 0 descriptor?? [ 1706.763516][ T8873] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1706.809386][ T8873] em28xx 1-1:0.0: board has no eeprom [ 1706.834735][T25005] usb 7-1: can't set config #0, error -71 [ 1706.852802][T25005] usb 7-1: USB disconnect, device number 11 [ 1706.909432][ T8873] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1706.917404][ T8873] em28xx 1-1:0.0: dvb set to bulk mode. [ 1707.439900][T25502] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1707.446553][T25502] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1707.454399][T25502] vhci_hcd vhci_hcd.0: Device attached [ 1707.692990][T25503] vhci_hcd: connection closed [ 1707.729311][ T4529] vhci_hcd vhci_hcd.0: stop threads [ 1707.968818][ T4529] vhci_hcd vhci_hcd.0: release socket [ 1708.059567][T19510] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 1708.136836][ T4529] vhci_hcd vhci_hcd.0: disconnect device [ 1708.202645][T24584] em28xx 1-1:0.0: Binding DVB extension [ 1708.324147][ T8873] usb 1-1: USB disconnect, device number 20 [ 1708.334711][ T8873] em28xx 1-1:0.0: Disconnecting em28xx [ 1708.489685][T24584] em28xx 1-1:0.0: Registering input extension [ 1708.505262][ T8873] em28xx 1-1:0.0: Closing input extension [ 1708.553694][ T8873] em28xx 1-1:0.0: Freeing device [ 1709.638903][T25519] dlm: no local IP address has been set [ 1709.644812][T25519] dlm: cannot start dlm midcomms -107 [ 1710.519090][T25523] 9p: Bad value for 'rfdno' [ 1710.779292][T25530] kAFS: No cell specified [ 1710.902263][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1710.944020][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1711.174906][ T73] bond0 (unregistering): Released all slaves [ 1712.509542][ T8873] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1712.697756][ T8873] usb 6-1: Using ep0 maxpacket: 16 [ 1712.712422][ T8873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1712.738988][ T8873] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1712.963346][ T8873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.997487][ T8873] usb 6-1: Product: syz [ 1713.007556][ T8873] usb 6-1: Manufacturer: syz [ 1713.490508][T19510] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1714.978067][ T8873] usb 6-1: SerialNumber: syz [ 1717.506745][ T8873] usb 6-1: config 0 descriptor?? [ 1717.512337][ T8873] usb 6-1: can't set config #0, error -71 [ 1717.539805][ T8873] usb 6-1: USB disconnect, device number 6 [ 1718.196696][T25557] 9pnet_fd: Insufficient options for proto=fd [ 1718.360054][ T73] hsr_slave_0: left promiscuous mode [ 1718.419460][ T73] hsr_slave_1: left promiscuous mode [ 1718.425682][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1718.457802][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1718.513761][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1718.600809][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.159392][ T73] veth1_macvtap: left promiscuous mode [ 1719.165205][ T73] veth0_macvtap: left promiscuous mode [ 1719.196826][ T73] veth1_vlan: left promiscuous mode [ 1719.213957][ T73] veth0_vlan: left promiscuous mode [ 1720.859457][ T8873] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1722.910257][ T8873] usb 8-1: Using ep0 maxpacket: 16 [ 1722.928713][ T8873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1722.958307][ T8873] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1723.029442][ T8873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.037480][ T8873] usb 8-1: Product: syz [ 1723.101464][ T8873] usb 8-1: Manufacturer: syz [ 1723.106107][ T8873] usb 8-1: SerialNumber: syz [ 1723.124176][ T8873] usb 8-1: config 0 descriptor?? [ 1723.184676][ T8873] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1723.219388][ T8873] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1723.454074][T25591] kAFS: No cell specified [ 1723.466605][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1723.482985][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1723.494522][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1723.503181][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1723.511196][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1724.022913][ T8873] em28xx 8-1:0.0: chip ID is em2765 [ 1725.493709][ T8873] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1725.577890][ T5146] Bluetooth: hci4: command tx timeout [ 1725.599466][ T8873] em28xx 8-1:0.0: board has no eeprom [ 1725.659416][ T8873] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1725.667280][ T8873] em28xx 8-1:0.0: dvb set to bulk mode. [ 1725.699570][T24674] em28xx 8-1:0.0: Binding DVB extension [ 1725.767839][ T8873] usb 8-1: USB disconnect, device number 19 [ 1725.975424][T25606] 9pnet_fd: Insufficient options for proto=fd [ 1726.057509][ T8873] em28xx 8-1:0.0: Disconnecting em28xx [ 1726.172914][T25609] dlm: no local IP address has been set [ 1726.178531][T25609] dlm: cannot start dlm midcomms -107 [ 1726.871577][T24674] em28xx 8-1:0.0: Registering input extension [ 1726.915008][ T8873] em28xx 8-1:0.0: Closing input extension [ 1726.996039][ T8873] em28xx 8-1:0.0: Freeing device [ 1727.649561][ T5146] Bluetooth: hci4: command tx timeout [ 1728.496356][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1729.769467][ T5146] Bluetooth: hci4: command tx timeout [ 1730.505171][T25630] befs: (nullb0): invalid magic header [ 1731.655634][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1731.799858][ T5146] Bluetooth: hci4: command tx timeout [ 1732.924942][T25647] dlm: no local IP address has been set [ 1732.930543][T25647] dlm: cannot start dlm midcomms -107 [ 1740.731237][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1742.435493][T25646] Set syz1 is full, maxelem 65536 reached [ 1743.768841][T10085] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1743.794248][T10085] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1743.802821][T10085] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1743.822883][T10085] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1743.830535][T10085] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1744.006867][ T5146] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1744.021100][ T5146] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1744.028838][ T5146] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1744.036747][ T5146] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1744.044705][ T5146] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1745.220518][T10085] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1745.279635][T10085] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1745.295266][T10085] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1745.320258][T10085] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1745.327911][T10085] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1745.410006][T25693] 9pnet_fd: Insufficient options for proto=fd [ 1745.888674][T10085] Bluetooth: hci7: command tx timeout [ 1746.089417][ T5906] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1746.269580][T10085] Bluetooth: hci8: command tx timeout [ 1746.389525][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 1746.406610][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1746.448483][ T5906] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1746.501425][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.546272][ T5906] usb 7-1: config 0 descriptor?? [ 1747.061296][ T5906] macally 0003:060B:0001.001D: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.6-1/input0 [ 1747.306342][ T5906] usb 7-1: USB disconnect, device number 12 [ 1747.400734][T10085] Bluetooth: hci9: command tx timeout [ 1747.663821][T25592] chnl_net:caif_netlink_parms(): no params data found [ 1747.702079][T25658] chnl_net:caif_netlink_parms(): no params data found [ 1747.960383][T10085] Bluetooth: hci7: command tx timeout [ 1748.279834][T10085] Bluetooth: hci8: command tx timeout [ 1748.557182][ T73] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.763564][T25689] chnl_net:caif_netlink_parms(): no params data found [ 1749.482262][T10085] Bluetooth: hci9: command tx timeout [ 1750.042946][T10085] Bluetooth: hci7: command tx timeout [ 1750.044954][ T73] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.362976][T10085] Bluetooth: hci8: command tx timeout [ 1750.739840][ T73] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.802913][T25658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.839163][T25658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.865237][T25658] bridge_slave_0: entered allmulticast mode [ 1750.891140][T25658] bridge_slave_0: entered promiscuous mode [ 1751.086449][T25661] chnl_net:caif_netlink_parms(): no params data found [ 1751.223833][T25658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.254143][T25658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.266249][T25658] bridge_slave_1: entered allmulticast mode [ 1751.296390][T25658] bridge_slave_1: entered promiscuous mode [ 1751.545515][ T73] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.564062][T10085] Bluetooth: hci9: command tx timeout [ 1751.669537][T25592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.678075][T25592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.887488][T25592] bridge_slave_0: entered allmulticast mode [ 1751.897144][T25592] bridge_slave_0: entered promiscuous mode [ 1752.119927][T10085] Bluetooth: hci7: command tx timeout [ 1752.152337][T25592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.170523][T25592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.177814][T25592] bridge_slave_1: entered allmulticast mode [ 1752.210359][T25592] bridge_slave_1: entered promiscuous mode [ 1752.366487][T25658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1752.389997][T25689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.397103][T25689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.414530][T25689] bridge_slave_0: entered allmulticast mode [ 1752.424094][T25689] bridge_slave_0: entered promiscuous mode [ 1752.441120][T10085] Bluetooth: hci8: command tx timeout [ 1752.565352][T25658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1752.584666][T25689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.598978][T25689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.613632][T25689] bridge_slave_1: entered allmulticast mode [ 1752.632888][T25689] bridge_slave_1: entered promiscuous mode [ 1752.816791][T25592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1752.827315][T25661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.849146][T25661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.864543][T25661] bridge_slave_0: entered allmulticast mode [ 1752.890718][T25661] bridge_slave_0: entered promiscuous mode [ 1753.076379][T25592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1753.088448][T25661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.110647][T25661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.118027][T25661] bridge_slave_1: entered allmulticast mode [ 1753.131267][T25661] bridge_slave_1: entered promiscuous mode [ 1753.143148][T25658] team0: Port device team_slave_0 added [ 1753.156533][T25689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1753.235414][T25658] team0: Port device team_slave_1 added [ 1753.259527][T25652] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1753.281233][T25689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1753.403390][T25592] team0: Port device team_slave_0 added [ 1753.416074][T25661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1753.449623][T25652] usb 7-1: Using ep0 maxpacket: 16 [ 1753.463938][T25652] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1753.479768][T25652] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1753.497419][T25652] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.527156][T25652] usb 7-1: config 0 descriptor?? [ 1753.639472][T10085] Bluetooth: hci9: command tx timeout [ 1754.582960][T25652] macally 0003:060B:0001.001E: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.6-1/input0 [ 1754.724477][T25652] usb 7-1: USB disconnect, device number 13 [ 1756.193064][T25820] fido_id[25820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1756.647506][T25689] team0: Port device team_slave_0 added [ 1756.666749][T25592] team0: Port device team_slave_1 added [ 1756.714776][T25822] 9pnet_fd: Insufficient options for proto=fd [ 1756.728539][T25661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1756.779469][T25658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1756.786700][T25658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1756.866685][T25658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1756.904756][T25658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1756.915842][T25658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1756.970750][T25658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1757.015387][T25689] team0: Port device team_slave_1 added [ 1757.627004][T25592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1757.645353][T25592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.677956][T25592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1757.947310][T25837] dlm: no local IP address has been set [ 1757.952969][T25837] dlm: cannot start dlm midcomms -107 [ 1757.985046][ T73] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.059189][T25592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1758.073115][T25592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.101899][T25592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1758.117750][T25661] team0: Port device team_slave_0 added [ 1758.157942][T25689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1758.165065][T25689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.193021][T25689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1758.225757][T25661] team0: Port device team_slave_1 added [ 1758.257914][T25658] hsr_slave_0: entered promiscuous mode [ 1758.264940][T25658] hsr_slave_1: entered promiscuous mode [ 1758.277389][T25658] debugfs: 'hsr0' already exists in 'hsr' [ 1758.287260][T25658] Cannot create hsr debugfs directory [ 1758.297355][T25689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1758.310982][T25689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.348018][T25689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1758.938372][ T73] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.086204][T25661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1759.109505][T25661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.152994][T25661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1759.163468][T25849] 9p: Bad value for 'rfdno' [ 1759.211834][T25661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1759.230131][T25661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.256891][T25661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1759.310900][T24674] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1759.372198][ T73] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.443358][T25592] hsr_slave_0: entered promiscuous mode [ 1759.450282][T25592] hsr_slave_1: entered promiscuous mode [ 1759.456471][T25592] debugfs: 'hsr0' already exists in 'hsr' [ 1759.464072][T25592] Cannot create hsr debugfs directory [ 1759.479458][T24674] usb 7-1: Using ep0 maxpacket: 16 [ 1759.486322][T25689] hsr_slave_0: entered promiscuous mode [ 1759.486657][T24674] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.493651][T25689] hsr_slave_1: entered promiscuous mode [ 1759.503139][T24674] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1759.510198][T25689] debugfs: 'hsr0' already exists in 'hsr' [ 1759.517915][T24674] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.523599][T25689] Cannot create hsr debugfs directory [ 1759.541873][T24674] usb 7-1: config 0 descriptor?? [ 1759.571383][ T73] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.728876][T25661] hsr_slave_0: entered promiscuous mode [ 1759.738631][T25661] hsr_slave_1: entered promiscuous mode [ 1759.745606][T25661] debugfs: 'hsr0' already exists in 'hsr' [ 1759.751619][T25661] Cannot create hsr debugfs directory [ 1759.982001][T24674] macally 0003:060B:0001.001F: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.6-1/input0 [ 1760.176907][T25652] usb 7-1: USB disconnect, device number 14 [ 1760.335877][ T73] bridge_slave_1: left allmulticast mode [ 1760.342525][ T73] bridge_slave_1: left promiscuous mode [ 1760.348222][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.361785][ T73] bridge_slave_0: left allmulticast mode [ 1760.367417][ T73] bridge_slave_0: left promiscuous mode [ 1760.373267][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.384743][ T73] bridge_slave_1: left allmulticast mode [ 1760.390484][ T73] bridge_slave_1: left promiscuous mode [ 1760.396177][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.406130][ T73] bridge_slave_0: left allmulticast mode [ 1760.411819][ T73] bridge_slave_0: left promiscuous mode [ 1760.417513][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.429683][ T73] bridge_slave_1: left allmulticast mode [ 1760.435316][ T73] bridge_slave_1: left promiscuous mode [ 1760.441489][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.453651][ T73] bridge_slave_0: left allmulticast mode [ 1760.459294][ T73] bridge_slave_0: left promiscuous mode [ 1760.467446][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.710200][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1760.722839][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1760.742434][ T73] bond0 (unregistering): Released all slaves [ 1764.129604][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1764.145365][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1764.157442][ T73] bond0 (unregistering): Released all slaves [ 1764.322026][T25869] dlm: no local IP address has been set [ 1764.327577][T25869] dlm: cannot start dlm midcomms -107 [ 1764.499241][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1764.512490][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1764.527366][ T73] bond0 (unregistering): Released all slaves [ 1765.730197][T25879] 9p: Bad value for 'rfdno' [ 1766.505697][ T73] hsr_slave_0: left promiscuous mode [ 1766.512698][ T73] hsr_slave_1: left promiscuous mode [ 1766.528627][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1766.546116][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1766.573775][ T73] hsr_slave_0: left promiscuous mode [ 1766.586436][ T73] hsr_slave_1: left promiscuous mode [ 1766.599021][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1766.618672][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1766.634280][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1766.642137][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1766.675497][ T73] hsr_slave_0: left promiscuous mode [ 1766.690099][ T73] hsr_slave_1: left promiscuous mode [ 1766.702944][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1766.725005][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1766.741875][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1766.759604][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1766.912550][ T73] veth1_macvtap: left promiscuous mode [ 1766.918133][ T73] veth0_macvtap: left promiscuous mode [ 1766.923874][ T73] veth1_vlan: left promiscuous mode [ 1766.929219][ T73] veth0_vlan: left promiscuous mode [ 1766.941524][ T73] veth1_macvtap: left promiscuous mode [ 1766.947068][ T73] veth0_macvtap: left promiscuous mode [ 1766.966011][ T73] veth1_vlan: left promiscuous mode [ 1766.971531][ T73] veth0_vlan: left promiscuous mode [ 1768.575143][T25919] dlm: no local IP address has been set [ 1768.580811][T25919] dlm: cannot start dlm midcomms -107 [ 1769.891568][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1769.922635][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1770.079465][ T5906] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1770.252341][ T5906] usb 7-1: Using ep0 maxpacket: 16 [ 1770.276049][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.309034][ T5906] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1770.320994][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.334083][ T5906] usb 7-1: config 0 descriptor?? [ 1770.661169][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1770.722423][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1770.799621][ T5906] macally 0003:060B:0001.0020: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.6-1/input0 [ 1770.973620][T19510] usb 7-1: USB disconnect, device number 15 [ 1771.926105][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1772.017122][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1774.942021][T25658] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1774.963604][T25968] binder: 25966:25968 ioctl c0306201 0 returned -14 [ 1774.976325][T25658] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1775.009889][T25658] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1775.053952][T25658] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1775.206592][T25592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1775.232606][T25592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1775.264225][T25592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1775.288937][T25592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1775.505802][T25689] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1775.535340][T25689] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1775.553223][T25689] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1775.572505][T25689] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1775.679737][T19510] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1775.814213][T25658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1775.837679][T25661] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1775.849799][T19510] usb 7-1: Using ep0 maxpacket: 16 [ 1775.865839][T19510] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.866824][T25661] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1775.899518][T19510] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1775.919550][T19510] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.921887][T25661] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1775.945814][T19510] usb 7-1: config 0 descriptor?? [ 1775.988206][T25661] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1776.037315][T25658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1776.144490][T23960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.151695][T23960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.233825][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.241026][ T6079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.292694][T25592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.609991][T19510] macally 0003:060B:0001.0021: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.6-1/input0 [ 1776.634274][T25592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1776.644566][T19510] usb 7-1: USB disconnect, device number 16 [ 1776.750098][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.757298][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.792194][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.799441][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.890246][T26002] fido_id[26002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1776.906116][T25689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.978332][T25658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1777.004534][T25658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1777.164100][T25689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1777.228594][T23960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.235820][T23960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1777.320187][T23960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.327383][T23960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1778.182061][T25661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1778.350233][T25661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1778.439084][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.446322][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1778.544664][T17206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.551878][T17206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1778.602989][T25658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1778.825429][T25661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1779.819888][T25592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1780.325471][T25689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1780.473851][T25592] veth0_vlan: entered promiscuous mode [ 1780.527304][T25592] veth1_vlan: entered promiscuous mode [ 1780.666487][T26044] binder: 26040:26044 ioctl c0306201 0 returned -14 [ 1780.735640][T25689] veth0_vlan: entered promiscuous mode [ 1780.787849][T25592] veth0_macvtap: entered promiscuous mode [ 1780.844321][T25689] veth1_vlan: entered promiscuous mode [ 1780.876348][T25661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1780.907826][T25592] veth1_macvtap: entered promiscuous mode [ 1781.038794][T25592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.118207][T25592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1781.204243][ T7518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.262508][ T7518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.277599][T25689] veth0_macvtap: entered promiscuous mode [ 1781.323086][ T7518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.341895][ T7518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.373212][T25689] veth1_macvtap: entered promiscuous mode [ 1781.607232][T25689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.763730][T25658] veth0_vlan: entered promiscuous mode [ 1781.796226][T25689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1781.843628][ T6209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1781.894833][ T6209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1781.900555][T23586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.985214][T23586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.029850][T25658] veth1_vlan: entered promiscuous mode [ 1783.907895][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1783.922888][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1783.936050][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1783.944908][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1783.954407][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1784.141506][T23586] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1784.274979][T23586] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1785.190540][ T73] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.969421][T10085] Bluetooth: hci2: command tx timeout [ 1787.280681][T26124] binder: 26120:26124 ioctl c0306201 0 returned -14 [ 1787.325893][ T73] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.468632][T25661] veth0_vlan: entered promiscuous mode [ 1787.509242][T25658] veth0_macvtap: entered promiscuous mode [ 1787.534280][ T6388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1787.565572][ T6388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1787.651769][ T73] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.739912][T25658] veth1_macvtap: entered promiscuous mode [ 1787.851161][ T73] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.885840][T25661] veth1_vlan: entered promiscuous mode [ 1787.924259][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1787.965948][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.224453][T25658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1788.407772][T25658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.596790][T26100] chnl_net:caif_netlink_parms(): no params data found [ 1788.627165][ T4529] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.652809][ T4529] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.818506][ T4529] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.834883][T25661] veth0_macvtap: entered promiscuous mode [ 1789.029446][ T5146] Bluetooth: hci2: command tx timeout [ 1789.196928][ T4529] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.294695][T26153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5840'. [ 1789.354724][ T73] bridge_slave_1: left allmulticast mode [ 1789.365155][ T73] bridge_slave_1: left promiscuous mode [ 1789.390092][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.603216][ T73] bridge_slave_0: left allmulticast mode [ 1789.620921][ T73] bridge_slave_0: left promiscuous mode [ 1789.656655][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.839469][ T10] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 1790.019440][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 1790.349437][ T10] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 1790.579409][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 1790.588653][ T10] usb usb7-port1: attempt power cycle [ 1790.979406][ T10] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 1791.080181][ T5146] Bluetooth: hci2: command tx timeout [ 1791.397907][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 1791.591858][ T10] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 1792.267179][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1792.366655][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1792.461577][ T73] bond0 (unregistering): Released all slaves [ 1792.942198][T25661] veth1_macvtap: entered promiscuous mode [ 1793.296134][ T10] usb 7-1: device descriptor read/8, error -71 [ 1793.296450][ T5146] Bluetooth: hci2: command tx timeout [ 1794.055687][ T10] usb usb7-port1: unable to enumerate USB device [ 1794.748384][T26100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.768946][T26100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.796787][T26100] bridge_slave_0: entered allmulticast mode [ 1794.810729][T26100] bridge_slave_0: entered promiscuous mode [ 1794.830121][T26100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.837260][T26100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.875799][T26100] bridge_slave_1: entered allmulticast mode [ 1794.900957][T26100] bridge_slave_1: entered promiscuous mode [ 1794.970024][T23960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1795.001025][T23960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1795.141902][T25661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1795.216459][T25661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1795.456439][T26100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1795.819684][ T73] hsr_slave_0: left promiscuous mode [ 1795.848423][ T73] hsr_slave_1: left promiscuous mode [ 1795.854760][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1795.869851][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.450091][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1796.457535][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.601573][ T73] veth1_macvtap: left promiscuous mode [ 1796.649889][ T73] veth0_macvtap: left promiscuous mode [ 1796.678353][ T73] veth1_vlan: left promiscuous mode [ 1796.710072][ T73] veth0_vlan: left promiscuous mode [ 1798.456475][T26276] binder: BINDER_SET_CONTEXT_MGR already set [ 1798.462918][T26276] binder: 26275:26276 ioctl 4018620d 2000000002c0 returned -16 [ 1799.607197][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1799.732333][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1800.259983][ T8873] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1801.244149][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.259571][ T8873] usb 2-1: Using ep0 maxpacket: 16 [ 1801.279241][ T8873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1801.305754][ T8873] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1801.329450][ T8873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.351108][ T8873] usb 2-1: config 0 descriptor?? [ 1801.826503][ T8873] usbhid 2-1:0.0: can't add hid device: -71 [ 1801.851423][ T8873] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1801.894287][ T8873] usb 2-1: USB disconnect, device number 9 [ 1802.866346][ T7518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.879054][T26100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1802.941297][ T7518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.388566][T26100] team0: Port device team_slave_0 added [ 1803.443736][ T6012] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.502074][T26100] team0: Port device team_slave_1 added [ 1803.519553][ T6012] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.528296][ T6012] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.621496][ T6012] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.881231][T10085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1803.893007][T10085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1803.900962][T10085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1803.908985][T10085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1803.917172][T10085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1803.992897][T26100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.038597][T26100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1804.110084][T26100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.152221][T26100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.165443][T10085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1804.187936][T10085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1804.197026][T10085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1804.246184][T26100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1804.301373][T10085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1804.349997][T26100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.504256][T10085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1805.396971][ T73] IPVS: stop unused estimator thread 0... [ 1805.593055][T26100] hsr_slave_0: entered promiscuous mode [ 1805.612559][T26100] hsr_slave_1: entered promiscuous mode [ 1805.619044][T26100] debugfs: 'hsr0' already exists in 'hsr' [ 1805.659130][T26100] Cannot create hsr debugfs directory [ 1805.959711][T10085] Bluetooth: hci3: command tx timeout [ 1806.079703][ T8873] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1806.270143][ T8873] usb 1-1: Using ep0 maxpacket: 16 [ 1806.391869][ T8873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1806.403591][ T8873] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1806.553989][T10085] Bluetooth: hci4: command tx timeout [ 1806.555242][ T8873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.580778][ T8873] usb 1-1: config 0 descriptor?? [ 1806.819204][ T73] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.037535][ T8873] usbhid 1-1:0.0: can't add hid device: -71 [ 1807.075587][ T8873] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1807.129555][T19510] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1807.242998][ T8873] usb 1-1: USB disconnect, device number 21 [ 1807.294010][T19510] usb 7-1: Using ep0 maxpacket: 32 [ 1807.327477][T19510] usb 7-1: no configurations [ 1807.338788][ T73] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.343776][T19510] usb 7-1: can't read configurations, error -22 [ 1807.448152][ T73] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.539943][T19510] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1807.673800][T26100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.709528][T19510] usb 7-1: Using ep0 maxpacket: 32 [ 1807.723515][T19510] usb 7-1: no configurations [ 1807.735188][T19510] usb 7-1: can't read configurations, error -22 [ 1807.750633][T19510] usb usb7-port1: attempt power cycle [ 1807.789912][ T73] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.860274][T26100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.039232][T26100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.079642][T10085] Bluetooth: hci3: command tx timeout [ 1808.303444][T26100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.339511][T19510] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1808.340614][T26365] chnl_net:caif_netlink_parms(): no params data found [ 1808.361107][T19510] usb 7-1: Using ep0 maxpacket: 32 [ 1808.600817][T10085] Bluetooth: hci4: command tx timeout [ 1809.117295][T19510] usb 7-1: no configurations [ 1809.126790][T26368] chnl_net:caif_netlink_parms(): no params data found [ 1809.149490][T19510] usb 7-1: can't read configurations, error -22 [ 1809.335726][ T73] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.541671][T19510] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1809.570584][T26365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.582543][T19510] usb 7-1: Using ep0 maxpacket: 32 [ 1809.600626][T26365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.612936][T26365] bridge_slave_0: entered allmulticast mode [ 1809.615865][T19510] usb 7-1: no configurations [ 1809.621955][T26365] bridge_slave_0: entered promiscuous mode [ 1809.628635][T19510] usb 7-1: can't read configurations, error -22 [ 1810.046495][T19510] usb usb7-port1: unable to enumerate USB device [ 1810.067551][T26365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.075052][T26365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.082594][T26365] bridge_slave_1: entered allmulticast mode [ 1810.094982][T26365] bridge_slave_1: entered promiscuous mode [ 1810.179423][T10085] Bluetooth: hci3: command tx timeout [ 1810.426348][T26100] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1810.985280][T10085] Bluetooth: hci4: command tx timeout [ 1811.471859][T26368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.500882][T26368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.530858][T26368] bridge_slave_0: entered allmulticast mode [ 1811.570866][T26368] bridge_slave_0: entered promiscuous mode [ 1811.673985][ T73] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.763862][T26100] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1811.890203][T26368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.907541][T26368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.931327][T26368] bridge_slave_1: entered allmulticast mode [ 1812.199690][T10085] Bluetooth: hci3: command tx timeout [ 1812.253102][T26368] bridge_slave_1: entered promiscuous mode [ 1812.302550][T26365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1812.384484][ T73] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.469904][T26100] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1812.673217][T26365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1812.719027][T26100] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1812.866313][T26368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1813.075677][ T73] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.155018][T26368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1813.159580][T10085] Bluetooth: hci4: command tx timeout [ 1813.662468][T26365] team0: Port device team_slave_0 added [ 1813.681612][T26368] team0: Port device team_slave_0 added [ 1813.711689][T26368] team0: Port device team_slave_1 added [ 1813.744883][T26365] team0: Port device team_slave_1 added [ 1814.927394][T26365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1814.949815][T26365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1814.992729][T26365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1815.058693][T26368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1815.089474][T26368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.123247][T26368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1815.189653][ T7593] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1815.278597][T26365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1815.310936][T26365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.382643][ T7593] usb 2-1: Using ep0 maxpacket: 32 [ 1815.408003][ T7593] usb 2-1: no configurations [ 1815.413989][T26365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1815.419922][ T7593] usb 2-1: can't read configurations, error -22 [ 1815.460858][T26368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1815.477973][T26368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.544971][T26368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1815.589510][ T7593] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1815.759489][ T7593] usb 2-1: Using ep0 maxpacket: 32 [ 1815.770426][ T7593] usb 2-1: no configurations [ 1815.782419][ T7593] usb 2-1: can't read configurations, error -22 [ 1815.810415][ T7593] usb usb2-port1: attempt power cycle [ 1815.947330][T26368] hsr_slave_0: entered promiscuous mode [ 1816.102315][T26368] hsr_slave_1: entered promiscuous mode [ 1816.208966][T26368] debugfs: 'hsr0' already exists in 'hsr' [ 1816.228162][T26368] Cannot create hsr debugfs directory [ 1816.295269][ T7593] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1816.314370][T26365] hsr_slave_0: entered promiscuous mode [ 1816.327030][T26365] hsr_slave_1: entered promiscuous mode [ 1816.334872][T26365] debugfs: 'hsr0' already exists in 'hsr' [ 1816.341500][ T7593] usb 2-1: Using ep0 maxpacket: 32 [ 1816.349309][ T7593] usb 2-1: no configurations [ 1816.355880][T26365] Cannot create hsr debugfs directory [ 1816.366963][ T7593] usb 2-1: can't read configurations, error -22 [ 1816.509506][ T7593] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1816.550302][ T7593] usb 2-1: Using ep0 maxpacket: 32 [ 1816.577887][ T7593] usb 2-1: no configurations [ 1816.588552][ T7593] usb 2-1: can't read configurations, error -22 [ 1816.606367][ T7593] usb usb2-port1: unable to enumerate USB device [ 1816.673544][ T73] bridge_slave_1: left allmulticast mode [ 1816.689962][ T73] bridge_slave_1: left promiscuous mode [ 1816.699818][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.740675][ T73] bridge_slave_0: left allmulticast mode [ 1816.765879][ T73] bridge_slave_0: left promiscuous mode [ 1816.780997][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.810861][ T73] bridge_slave_1: left allmulticast mode [ 1816.816609][ T73] bridge_slave_1: left promiscuous mode [ 1816.838530][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.866695][ T73] bridge_slave_0: left allmulticast mode [ 1816.891161][ T73] bridge_slave_0: left promiscuous mode [ 1816.903612][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.931173][ T73] bridge_slave_1: left allmulticast mode [ 1816.944662][ T73] bridge_slave_1: left promiscuous mode [ 1816.956285][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.998930][ T73] bridge_slave_0: left allmulticast mode [ 1817.016734][ T73] bridge_slave_0: left promiscuous mode [ 1817.030040][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.170045][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1818.198486][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1818.233082][ T73] bond0 (unregistering): Released all slaves [ 1819.972778][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1820.008283][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1820.032129][ T73] bond0 (unregistering): Released all slaves [ 1820.328733][T26571] 9pnet_fd: Insufficient options for proto=fd [ 1820.552344][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1820.570630][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1820.584658][ T73] bond0 (unregistering): Released all slaves [ 1821.380086][T24674] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1821.589470][ T5906] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1821.829739][T26599] dlm: no local IP address has been set [ 1821.835372][T26599] dlm: cannot start dlm midcomms -107 [ 1822.392953][T24674] usb 7-1: Using ep0 maxpacket: 32 [ 1822.398855][T24674] usb 7-1: no configurations [ 1822.407169][T24674] usb 7-1: can't read configurations, error -22 [ 1822.478185][ T5906] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1822.488052][ T5906] usb 2-1: config 0 has no interface number 0 [ 1822.500756][ T5906] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.514809][ T5906] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1822.527171][ T5906] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1822.542704][T24674] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1822.555038][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.575301][ T5906] usb 2-1: config 0 descriptor?? [ 1822.662229][T26100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.739481][T24674] usb 7-1: Using ep0 maxpacket: 32 [ 1822.756530][T24674] usb 7-1: no configurations [ 1822.771650][T24674] usb 7-1: can't read configurations, error -22 [ 1822.797069][T24674] usb usb7-port1: attempt power cycle [ 1822.903345][ T73] hsr_slave_0: left promiscuous mode [ 1822.920832][ T73] hsr_slave_1: left promiscuous mode [ 1822.927154][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1822.949768][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1822.971515][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1822.978985][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1823.006972][ T73] hsr_slave_0: left promiscuous mode [ 1823.021666][ T73] hsr_slave_1: left promiscuous mode [ 1823.025045][ T5906] uclogic 0003:28BD:0905.0022: Interface probing failed: -22 [ 1823.036227][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1823.049405][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1823.059613][ T5906] uclogic 0003:28BD:0905.0022: interface is invalid, ignoring [ 1823.068331][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1823.084281][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1823.113636][ T73] hsr_slave_0: left promiscuous mode [ 1823.126943][ T73] hsr_slave_1: left promiscuous mode [ 1823.135062][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1823.142716][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1823.150961][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1823.158343][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1823.168578][T24674] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1823.191128][T24674] usb 7-1: Using ep0 maxpacket: 32 [ 1823.207353][T24674] usb 7-1: no configurations [ 1823.215055][T24674] usb 7-1: can't read configurations, error -22 [ 1823.229977][T26601] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1823.266404][ T5906] usb 2-1: USB disconnect, device number 14 [ 1823.292872][ T73] veth1_macvtap: left promiscuous mode [ 1823.306451][ T73] veth0_macvtap: left promiscuous mode [ 1823.320343][ T73] veth1_vlan: left promiscuous mode [ 1823.326970][ T73] veth0_vlan: left promiscuous mode [ 1823.337436][ T73] veth1_macvtap: left promiscuous mode [ 1823.343095][ T73] veth0_macvtap: left promiscuous mode [ 1823.348750][ T73] veth1_vlan: left promiscuous mode [ 1823.354142][ T73] veth0_vlan: left promiscuous mode [ 1823.359509][T24674] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1823.368677][ T73] veth1_macvtap: left promiscuous mode [ 1823.374992][ T73] veth0_macvtap: left promiscuous mode [ 1823.380968][ T73] veth1_vlan: left promiscuous mode [ 1823.386308][ T73] veth0_vlan: left promiscuous mode [ 1823.392254][T24674] usb 7-1: Using ep0 maxpacket: 32 [ 1823.398923][T24674] usb 7-1: no configurations [ 1823.404270][T24674] usb 7-1: can't read configurations, error -22 [ 1823.411361][T24674] usb usb7-port1: unable to enumerate USB device [ 1826.765241][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1826.801524][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1827.820951][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1827.878193][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1828.969499][ T6042] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 1829.129111][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1829.129483][ T6042] usb 2-1: Invalid ep0 maxpacket: 16 [ 1829.174683][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1829.269514][ T6042] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 1829.429983][ T6042] usb 2-1: Invalid ep0 maxpacket: 16 [ 1829.451914][ T6042] usb usb2-port1: attempt power cycle [ 1829.655950][T26645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5938'. [ 1829.702821][T26100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1829.829633][ T6042] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 1829.873491][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.880706][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1829.904507][ T6042] usb 2-1: Invalid ep0 maxpacket: 16 [ 1829.996538][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.003748][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1830.045666][ T6042] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 1830.112571][ T6042] usb 2-1: Invalid ep0 maxpacket: 16 [ 1830.131543][ T6042] usb usb2-port1: unable to enumerate USB device [ 1831.369128][T25455] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1831.453177][T26365] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1831.536748][T26365] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1831.606518][T26365] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1831.683478][T26365] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1831.729540][T25455] usb 7-1: Using ep0 maxpacket: 32 [ 1831.738452][T25455] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.777216][T25455] usb 7-1: config 0 has no interfaces? [ 1831.801476][T25455] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1831.817443][T25455] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.875665][T25455] usb 7-1: config 0 descriptor?? [ 1832.224155][T26368] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1832.250498][T26368] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1832.317436][T26368] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1832.361385][T26368] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1832.417672][T26100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1832.596391][T26365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1832.773600][T26100] veth0_vlan: entered promiscuous mode [ 1832.799981][T26365] 8021q: adding VLAN 0 to HW filter on device team0 [ 1832.827978][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.835186][T15943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1832.870527][T26100] veth1_vlan: entered promiscuous mode [ 1832.884653][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.891845][T15943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1832.976499][T26368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1833.054915][T26368] 8021q: adding VLAN 0 to HW filter on device team0 [ 1833.065304][T26100] veth0_macvtap: entered promiscuous mode [ 1833.096794][T19189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.104025][T19189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1833.114651][T26100] veth1_macvtap: entered promiscuous mode [ 1833.156312][T19189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.163533][T19189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.301778][T26100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1833.374908][T26100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1833.464603][T23586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.495285][T23586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.546683][T23586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.601369][T23586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.943786][ T4529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1833.977756][ T4529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1834.112159][T26365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1834.141431][T23586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1834.171553][T23586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1834.193534][T23935] usb 7-1: USB disconnect, device number 29 [ 1834.657755][T26368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1835.466270][T26365] veth0_vlan: entered promiscuous mode [ 1835.541936][T26365] veth1_vlan: entered promiscuous mode [ 1835.924346][T26365] veth0_macvtap: entered promiscuous mode [ 1836.850183][T26365] veth1_macvtap: entered promiscuous mode [ 1836.917736][T26365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1836.972919][T26365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1837.171493][T26368] veth0_vlan: entered promiscuous mode [ 1837.226648][T26368] veth1_vlan: entered promiscuous mode [ 1837.294221][ T6209] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.322188][ T6209] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.350106][ T6209] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.584643][ T6209] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.586596][T26368] veth0_macvtap: entered promiscuous mode [ 1840.904000][T26368] veth1_macvtap: entered promiscuous mode [ 1841.109750][T19189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1841.117603][T19189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1841.260778][T26368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1841.355684][T26368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1841.506567][ T73] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.604138][ T6079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1841.628886][ T73] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.662841][ T6079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1841.695134][ T73] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.721022][ T73] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.189951][T26788] Set syz1 is full, maxelem 65536 reached [ 1842.962019][T15943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.000592][T15943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.057241][T26827] 9pnet_fd: Insufficient options for proto=fd [ 1843.286788][T19189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.323872][T19189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.921879][T26841] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 1843.928533][T26841] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1843.937052][T26841] vhci_hcd vhci_hcd.0: Device attached [ 1844.550600][T26842] vhci_hcd: connection closed [ 1844.565380][T24166] vhci_hcd vhci_hcd.8: stop threads [ 1844.836633][T24166] vhci_hcd vhci_hcd.8: release socket [ 1845.006472][T24166] vhci_hcd vhci_hcd.8: disconnect device [ 1846.273093][T19510] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1846.500064][T19510] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1846.559663][T19510] usb 3-1: config 0 has no interface number 0 [ 1846.581722][T19510] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1846.665905][T19510] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1846.695395][T19510] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1846.714941][T19510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.736672][T19510] usb 3-1: config 0 descriptor?? [ 1847.194988][T19510] uclogic 0003:28BD:0905.0023: Interface probing failed: -22 [ 1847.233636][T19510] uclogic 0003:28BD:0905.0023: interface is invalid, ignoring [ 1847.433191][T19510] usb 3-1: USB disconnect, device number 15 [ 1853.412365][T26892] 9p: Bad value for 'wfdno' [ 1856.379419][T25652] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 1857.352155][T25652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1857.435626][T25652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1857.465066][T25652] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1857.575700][T25652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.603123][T25652] usb 1-1: config 0 descriptor?? [ 1857.608979][T26936] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1858.206295][T25652] hid_mf 0003:0079:1846.0024: item fetching failed at offset 0/2 [ 1858.297998][T25652] hid_mf 0003:0079:1846.0024: HID parse failed. [ 1858.378621][T26956] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1858.574644][T25652] hid_mf 0003:0079:1846.0024: probe with driver hid_mf failed with error -22 [ 1858.682493][T25652] usb 1-1: USB disconnect, device number 22 [ 1859.461002][T26962] sctp: [Deprecated]: syz.9.5991 (pid 26962) Use of int in max_burst socket option deprecated. [ 1859.461002][T26962] Use struct sctp_assoc_value instead [ 1862.700026][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1868.229877][T26948] Set syz1 is full, maxelem 65536 reached [ 1868.844630][T27009] overlayfs: failed to resolve './file0': -2 [ 1869.160408][T25455] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1870.040176][T10085] Bluetooth: hci9: command 0x0406 tx timeout [ 1870.146341][T25455] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 1870.154873][T25455] usb 9-1: config 0 has no interface number 0 [ 1870.161052][T25455] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1870.171978][T25455] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1870.185813][T25455] usb 9-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1870.203948][T25455] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.296700][T25455] usb 9-1: config 0 descriptor?? [ 1870.764095][T25455] uclogic 0003:28BD:0905.0025: Interface probing failed: -22 [ 1870.799841][T25455] uclogic 0003:28BD:0905.0025: interface is invalid, ignoring [ 1870.975154][T25455] usb 9-1: USB disconnect, device number 6 [ 1874.202584][T27067] overlayfs: failed to resolve './file0': -2 [ 1877.959711][T17926] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1878.503851][T17926] usb 3-1: Using ep0 maxpacket: 8 [ 1879.048425][T17926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1879.071077][T17926] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1879.084872][T17926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.096934][T17926] usb 3-1: config 0 descriptor?? [ 1879.272017][T27127] overlayfs: failed to resolve './file0': -2 [ 1879.557121][T27109] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6032'. [ 1879.770618][T17926] apple 0003:05AC:027D.0026: unknown main item tag 0x0 [ 1879.777529][T17926] apple 0003:05AC:027D.0026: unknown main item tag 0x0 [ 1879.874551][T17926] apple 0003:05AC:027D.0026: unknown main item tag 0x0 [ 1879.929438][T17926] apple 0003:05AC:027D.0026: unknown main item tag 0x0 [ 1879.987020][T17926] apple 0003:05AC:027D.0026: unknown main item tag 0x0 [ 1880.027900][T17926] apple 0003:05AC:027D.0026: hidraw0: USB HID v4.00 Device [HID 05ac:027d] on usb-dummy_hcd.2-1/input0 [ 1880.131335][T17926] usb 3-1: USB disconnect, device number 16 [ 1880.291139][T24043] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1880.298396][T27161] fido_id[27161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1880.469415][T24043] usb 1-1: Using ep0 maxpacket: 16 [ 1880.656563][T24043] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1880.697604][T24043] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1880.799625][T24043] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.832658][T24043] usb 1-1: config 0 descriptor?? [ 1881.103356][T27165] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6047'. [ 1881.439445][T17926] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 1881.503003][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1881.510454][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1881.517897][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1881.525320][T24043] usbhid 1-1:0.0: can't add hid device: -32 [ 1881.532035][T24043] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1881.575685][T24043] usb 1-1: USB disconnect, device number 23 [ 1881.677612][T17926] usb 10-1: Invalid ep0 maxpacket: 16 [ 1881.840718][T17926] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 1883.019464][T17926] usb 10-1: Invalid ep0 maxpacket: 16 [ 1883.042117][T17926] usb usb10-port1: attempt power cycle [ 1884.144373][T17926] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 1884.685311][T17926] usb 10-1: device descriptor read/8, error -71 [ 1884.953441][T27209] overlayfs: failed to resolve './file0': -2 [ 1885.009479][ T7593] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1885.189396][ T7593] usb 7-1: Using ep0 maxpacket: 16 [ 1885.225130][ T7593] usb 7-1: config 0 has an invalid interface number: 98 but max is 0 [ 1885.240359][ T7593] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.286367][ T7593] usb 7-1: config 0 has no interface number 0 [ 1885.305470][ T7593] usb 7-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 1885.329452][ T7593] usb 7-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1885.359283][ T7593] usb 7-1: config 0 interface 98 has no altsetting 0 [ 1885.388679][ T7593] usb 7-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 1885.469429][ T7593] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.525981][ T7593] usb 7-1: Product: syz [ 1885.554200][ T7593] usb 7-1: Manufacturer: syz [ 1885.623170][ T7593] usb 7-1: SerialNumber: syz [ 1886.018935][ T7593] usb 7-1: config 0 descriptor?? [ 1886.144287][T27206] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1886.194091][ T7593] asix 7-1:0.98: probe with driver asix failed with error -22 [ 1886.470253][T25652] usb 7-1: USB disconnect, device number 30 [ 1888.599515][ T6029] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1888.760137][ T6029] usb 7-1: Using ep0 maxpacket: 32 [ 1889.589462][ T6029] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1889.597585][ T6029] usb 7-1: config 0 has no interface number 0 [ 1889.606894][ T6029] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1889.616209][ T6029] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.624475][ T6029] usb 7-1: Product: syz [ 1889.628648][ T6029] usb 7-1: Manufacturer: syz [ 1889.633651][ T6029] usb 7-1: SerialNumber: syz [ 1889.641864][ T6029] usb 7-1: config 0 descriptor?? [ 1889.650667][ T6029] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1889.822495][T27274] overlayfs: failed to resolve './file0': -2 [ 1889.907434][ T6029] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1889.976898][ T6029] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1890.379263][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1890.387778][ T6029] usb 7-1: USB disconnect, device number 31 [ 1890.467663][ T6029] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1891.073727][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6080'. [ 1891.091988][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6080'. [ 1891.527319][ T6029] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1891.665320][ T6029] quatech2 7-1:0.51: device disconnected [ 1892.170179][T27309] netlink: 'syz.0.6082': attribute type 10 has an invalid length. [ 1892.372628][T27318] netlink: 'syz.0.6082': attribute type 10 has an invalid length. [ 1892.582478][T27273] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1893.747603][T27309] team0: Port device netdevsim0 added [ 1894.169603][T27318] team0: Port device netdevsim0 removed [ 1894.222558][T27318] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1897.583681][T10085] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1897.596855][T10085] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1897.616118][T10085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1897.626115][T10085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1897.965198][T27368] dlm: no local IP address has been set [ 1897.970926][T27368] dlm: cannot start dlm midcomms -107 [ 1898.507771][T10085] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1899.415094][T27359] chnl_net:caif_netlink_parms(): no params data found [ 1900.599524][ T5146] Bluetooth: hci5: command tx timeout [ 1901.080838][T27359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.088009][T27359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.098164][T27359] bridge_slave_0: entered allmulticast mode [ 1901.106305][T27359] bridge_slave_0: entered promiscuous mode [ 1901.115787][T27359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.123028][T27359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.861023][T27359] bridge_slave_1: entered allmulticast mode [ 1901.871951][T27359] bridge_slave_1: entered promiscuous mode [ 1902.152443][T27420] dlm: no local IP address has been set [ 1902.158081][T27420] dlm: cannot start dlm midcomms -107 [ 1902.679607][ T5146] Bluetooth: hci5: command tx timeout [ 1903.368962][T27431] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1903.546159][ T6209] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.070173][T24043] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 1904.759530][ T5146] Bluetooth: hci5: command tx timeout [ 1904.814944][T24043] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1904.962571][T27439] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6116'. [ 1905.116788][ T6046] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 1905.204110][ T6209] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.309418][ T6046] usb 9-1: Invalid ep0 maxpacket: 16 [ 1905.508274][T27359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1905.560677][ T6046] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 1905.578149][T27359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1905.728645][ T6209] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.768481][ T6046] usb 9-1: Invalid ep0 maxpacket: 16 [ 1905.943208][ T6046] usb usb9-port1: attempt power cycle [ 1906.829524][ T6046] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 1906.839840][ T5146] Bluetooth: hci5: command tx timeout [ 1906.960422][T27359] team0: Port device team_slave_0 added [ 1907.109846][ T6046] usb 9-1: device not accepting address 9, error -71 [ 1907.137945][ T6209] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1907.183628][T27359] team0: Port device team_slave_1 added [ 1907.216054][T27471] dlm: no local IP address has been set [ 1907.223197][T27471] dlm: cannot start dlm midcomms -107 [ 1907.405213][T27359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1907.436104][T27359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1907.530533][T27359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1907.542454][T27479] overlayfs: failed to resolve './file1': -2 [ 1907.583968][T27359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1907.618952][T27359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1907.684846][T27359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1907.919936][ T8873] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1908.159424][ T8873] usb 10-1: Using ep0 maxpacket: 8 [ 1908.192714][ T8873] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1908.230450][ T8873] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 1908.258100][ T8873] usb 10-1: config 0 has no interface number 0 [ 1908.274770][ T8873] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1908.314483][ T8873] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1908.363952][ T8873] usb 10-1: config 0 interface 88 has no altsetting 0 [ 1908.407155][ T8873] usb 10-1: language id specifier not provided by device, defaulting to English [ 1908.470765][ T8873] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1908.531757][ T8873] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1908.540282][ T5906] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1908.604593][ T8873] usb 10-1: Product: syz [ 1908.608896][ T8873] usb 10-1: Manufacturer: 빯視స捄㻀囁驪癅䞿ڰ傡붾⊻儝봚끪߮莼厔Ⱋᣪ舣趕ㆊ픏框뺩凑Ꚕ⢋ꬥ╪䬑茷瓉钌鸊㱓멍ްൢ顿ᆩ [ 1908.677495][T27359] hsr_slave_0: entered promiscuous mode [ 1908.789685][ T5906] usb 9-1: Using ep0 maxpacket: 8 [ 1908.891797][ T8873] usb 10-1: SerialNumber: syz [ 1908.899252][ T5906] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1908.911830][T27359] hsr_slave_1: entered promiscuous mode [ 1909.079666][T27359] debugfs: 'hsr0' already exists in 'hsr' [ 1909.164418][ T8873] usb 10-1: config 0 descriptor?? [ 1909.175281][ T5906] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1909.185735][T27359] Cannot create hsr debugfs directory [ 1909.192413][T27502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6135'. [ 1909.219737][ T5906] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1909.265981][ T5906] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1909.329473][ T5906] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1909.344414][ T6209] bridge_slave_1: left allmulticast mode [ 1909.369906][ T6209] bridge_slave_1: left promiscuous mode [ 1909.375756][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.390150][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.465634][ T6209] bridge_slave_0: left allmulticast mode [ 1909.478506][ T8873] input: 빯視స捄㻀囁驪癅䞿ڰ傡붾⊻儝봚끪߮莼厔Ⱋᣪ舣趕ㆊ픏框뺩凑Ꚕ⢋ꬥ╪䬑茷瓉钌鸊㱓멍ް as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.88/input/input55 [ 1909.634278][ T8873] usb 10-1: USB disconnect, device number 10 [ 1909.728680][ T6209] bridge_slave_0: left promiscuous mode [ 1909.735058][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.745747][ T5906] usb 9-1: usb_control_msg returned -32 [ 1909.773178][ T5906] usbtmc 9-1:16.0: can't read capabilities [ 1910.201143][ C1] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1910.544875][T18633] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1910.709563][T18633] usb 1-1: Using ep0 maxpacket: 32 [ 1910.717765][T18633] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1910.733131][T27524] overlayfs: failed to resolve './file1': -2 [ 1910.741834][T18633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.767499][T18633] usb 1-1: config 0 descriptor?? [ 1910.779501][T25455] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1910.856629][T10085] Bluetooth: hci2: command 0x0406 tx timeout [ 1910.929498][T25455] usb 10-1: device descriptor read/64, error -71 [ 1911.016531][T27529] dlm: no local IP address has been set [ 1911.022197][T27529] dlm: cannot start dlm midcomms -107 [ 1911.031388][T18633] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1911.042165][ T6209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1911.068031][T18633] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1911.085186][ T6209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1911.098496][T18633] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1911.112182][ T6209] bond0 (unregistering): Released all slaves [ 1911.179493][T25455] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1911.344797][T25455] usb 10-1: device descriptor read/64, error -71 [ 1911.374312][T17926] usb 9-1: USB disconnect, device number 11 [ 1911.486010][T25455] usb usb10-port1: attempt power cycle [ 1911.589317][T27537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6147'. [ 1912.079710][T25455] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1912.135894][T25455] usb 10-1: device descriptor read/8, error -71 [ 1912.560033][T25455] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1914.101110][T27572] overlayfs: failed to resolve './file1': -2 [ 1915.114432][T25455] usb 10-1: device not accepting address 14, error -71 [ 1915.211961][T25455] usb usb10-port1: unable to enumerate USB device [ 1915.423355][ T6209] hsr_slave_0: left promiscuous mode [ 1915.457912][ T6209] hsr_slave_1: left promiscuous mode [ 1915.482183][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1915.514022][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1915.541958][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1915.559439][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1915.937677][T27599] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6162'. [ 1915.969647][ T6209] veth1_macvtap: left promiscuous mode [ 1915.981518][T25455] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1916.012914][ T6209] veth0_macvtap: left promiscuous mode [ 1916.060992][ T6209] veth1_vlan: left promiscuous mode [ 1916.093696][ T6209] veth0_vlan: left promiscuous mode [ 1916.203727][T25455] usb 10-1: Using ep0 maxpacket: 32 [ 1916.220335][ T6046] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 1916.230796][T25455] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1916.248403][T25455] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.275468][T25455] usb 10-1: config 0 descriptor?? [ 1916.401405][ T6046] usb 7-1: Invalid ep0 maxpacket: 16 [ 1916.515390][T25455] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1916.559538][ T6046] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 1916.739636][ T6046] usb 7-1: Invalid ep0 maxpacket: 16 [ 1916.749583][ T6046] usb usb7-port1: attempt power cycle [ 1916.890557][ T6209] team0 (unregistering): Port device team_slave_1 removed [ 1916.932808][T27609] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1916.954392][ T6209] team0 (unregistering): Port device team_slave_0 removed [ 1916.997610][T27609] BUG: unable to handle page fault for address: fffffbfff36a9722 [ 1917.005365][T27609] #PF: supervisor read access in kernel mode [ 1917.011331][T27609] #PF: error_code(0x0000) - not-present page [ 1917.017294][T27609] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 13fff1067 PTE 0 [ 1917.024960][T27609] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 1917.030505][T27609] CPU: 0 UID: 0 PID: 27609 Comm: syz.8.6165 Tainted: G L syzkaller #0 PREEMPT(full) [ 1917.041449][T27609] Tainted: [L]=SOFTLOCKUP [ 1917.045770][T27609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1917.055830][T27609] RIP: 0010:ovl_iterate+0x985/0x1120 [ 1917.061156][T27609] Code: ea 03 80 3c 02 00 0f 85 5a 07 00 00 48 8d 41 10 4d 8b 67 08 48 89 c2 48 89 44 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 eb 06 00 00 48 8b 59 10 48 8b 44 24 08 48 39 c3 [ 1917.080790][T27609] RSP: 0018:ffffc90004997d20 EFLAGS: 00010216 [ 1917.086870][T27609] RAX: dffffc0000000000 RBX: ffff88808c6c61f8 RCX: ffffffff9b54b900 [ 1917.094846][T27609] RDX: 1ffffffff36a9722 RSI: ffffffff834741d4 RDI: 0000000000000007 [ 1917.102817][T27609] RBP: ffff88808c6c61f8 R08: 0000000000000007 R09: fffffffffffff000 [ 1917.110802][T27609] R10: ffffffff9b54b900 R11: ffff88801da98b30 R12: 0000000000000000 [ 1917.118785][T27609] R13: ffff88808c6c6218 R14: ffff88809d55d700 R15: ffffc90004997e70 [ 1917.126761][T27609] FS: 00007f29e79456c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 1917.135698][T27609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1917.142282][T27609] CR2: fffffbfff36a9722 CR3: 0000000054837000 CR4: 0000000000350ef0 [ 1917.150254][T27609] Call Trace: [ 1917.153525][T27609] [ 1917.156450][T27609] ? __pfx_down_read_killable+0x10/0x10 [ 1917.162008][T27609] ? __pfx_ovl_iterate+0x10/0x10 [ 1917.166968][T27609] wrap_directory_iterator+0xa2/0xe0 [ 1917.172259][T27609] iterate_dir+0x296/0xaf0 [ 1917.176686][T27609] __x64_sys_getdents+0x13c/0x2b0 [ 1917.181720][T27609] ? __pfx___x64_sys_getdents+0x10/0x10 [ 1917.187275][T27609] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.192928][T27609] ? __pfx_filldir+0x10/0x10 [ 1917.197530][T27609] do_syscall_64+0xcd/0xf80 [ 1917.202062][T27609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.207966][T27609] RIP: 0033:0x7f29e6b8f749 [ 1917.212379][T27609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1917.231992][T27609] RSP: 002b:00007f29e7945038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1917.240413][T27609] RAX: ffffffffffffffda RBX: 00007f29e6de5fa0 RCX: 00007f29e6b8f749 [ 1917.248383][T27609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1917.256350][T27609] RBP: 00007f29e6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1917.264319][T27609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1917.272288][T27609] R13: 00007f29e6de6038 R14: 00007f29e6de5fa0 R15: 00007ffc33a67548 [ 1917.280274][T27609] [ 1917.283282][T27609] Modules linked in: [ 1917.287171][T27609] CR2: fffffbfff36a9722 [ 1917.291311][T27609] ---[ end trace 0000000000000000 ]--- [ 1917.296755][T27609] RIP: 0010:ovl_iterate+0x985/0x1120 [ 1917.302065][T27609] Code: ea 03 80 3c 02 00 0f 85 5a 07 00 00 48 8d 41 10 4d 8b 67 08 48 89 c2 48 89 44 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 eb 06 00 00 48 8b 59 10 48 8b 44 24 08 48 39 c3 [ 1917.321689][T27609] RSP: 0018:ffffc90004997d20 EFLAGS: 00010216 [ 1917.327764][T27609] RAX: dffffc0000000000 RBX: ffff88808c6c61f8 RCX: ffffffff9b54b900 [ 1917.335747][T27609] RDX: 1ffffffff36a9722 RSI: ffffffff834741d4 RDI: 0000000000000007 [ 1917.343722][T27609] RBP: ffff88808c6c61f8 R08: 0000000000000007 R09: fffffffffffff000 [ 1917.351695][T27609] R10: ffffffff9b54b900 R11: ffff88801da98b30 R12: 0000000000000000 [ 1917.359667][T27609] R13: ffff88808c6c6218 R14: ffff88809d55d700 R15: ffffc90004997e70 [ 1917.367641][T27609] FS: 00007f29e79456c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 1917.376572][T27609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1917.383155][T27609] CR2: fffffbfff36a9722 CR3: 0000000054837000 CR4: 0000000000350ef0 [ 1917.391138][T27609] Kernel panic - not syncing: Fatal exception [ 1917.397279][T27609] Kernel Offset: disabled [ 1917.401590][T27609] Rebooting in 86400 seconds..