last executing test programs: 17m17.776499548s ago: executing program 32 (id=911): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x2, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1000, 0xd7b4591d6f0333b9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040015}, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ptrace$peekuser(0x3, 0x0, 0x5) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80101) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000300)={0x1}) syz_emit_ethernet(0x3a, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf808004517002c0066000007fd8f780a0101027f00000400004e2200004a20a7219b4b71575ed8eeb89a76f2c245585467ed579ea8dd206cc13ec58f3cc526579ca9ac4876c1ff8b4f59541977f8569caf709fc222fd22b4eb7aa18ee73fc9bc82dd9837db3f5c006a476fbcce2f834b0596bc715f59a4a3a5690893a69a0cdf600e4464cf9a7e977380e894f4c9c76deb818c96f874260acbe2db62b22f642ab078468d5536ff3eb8eb79cbb6821d0ddaf7c93fb3876f9bd9167c8274bff7d70f67a582e83e631d12894a3b38ca09dcd52e27af01444d0ba353bd6cf84ac9e5fdad03767f34490fa28eb937f20a09b3b00d6fc7e1db2b4d3a374072"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) poll(&(0x7f0000002d40)=[{0xffffffffffffffff, 0x4080}], 0x1, 0x5) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) 17m4.192108993s ago: executing program 33 (id=944): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x2, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1000, 0xd7b4591d6f0333b9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040015}, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80101) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000300)={0x1}) syz_emit_ethernet(0x3a, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) poll(&(0x7f0000002d40)=[{r6, 0x4080}], 0x1, 0x5) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) unshare(0x2040c00) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 16m49.326266968s ago: executing program 34 (id=976): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, 0x0, 0x4000000) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x0, 0x5, 0x2, {0x2, 0xa}}, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0x5, 0x3, "f080ea0b", "c05e4cec"}}, 0x0}, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0xc0}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0xfff7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f0000006800)="10", 0x1) 16m14.578829842s ago: executing program 35 (id=1026): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), 0x0, &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 9m40.167625785s ago: executing program 36 (id=1425): lseek(0xffffffffffffffff, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67200000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad530100000000008404000000000000"], &(0x7f0000000380)='GPL\x00', 0x2}, 0x94) 6m45.303651701s ago: executing program 9 (id=1716): add_key(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x101) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x7c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'dvmrp1\x00'}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e22}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e23}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffff00}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000070}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "75fbf512"}]}}, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000010000000000000000400000000000000080000000000000020"], 0x24, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='-', 0x1}]) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000104fcffffff000000000000000076b27107d61f5ffdc00b86dea656a2077290843e91f6aecddca3a4b099c2a2ccd187c90905b4fe5d6ae7b58dd7b1fe99ed34a320207312f08a78cb1b093b61afedb3b8492acbb587bfc6f6ddf4208d4ebaeb363a2367159759718a2713eff52a5974489b284a2a3cf2bfd1dd89f4a7fddad3d24a1045a2aa040008cc12cb842c24dffefd618df08d8e634169f160275a3890dbc52daa59bf2cdea8f125c71c7b298476c35a6b87f5fa8f2c6089d586dac78dae3324cc49466346faf875f8cee4f0f07d798e0bef0e31e5303befbac52725e2049d", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0023006400000000000000"], 0x40}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000100), 0x14) 6m41.510629184s ago: executing program 9 (id=1720): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1000006) socket(0x11, 0xa, 0x5) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/235) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0xfffd, 0xa00, 0x0, 0x2}]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48090) 6m41.329276496s ago: executing program 8 (id=1721): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r4, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x0, r4}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) 6m39.910534898s ago: executing program 9 (id=1722): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 6m37.685260455s ago: executing program 5 (id=1724): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3532, 0x32c9, 0x45, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x6d, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) 6m36.476280027s ago: executing program 9 (id=1726): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0xc) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="500106"], 0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000180), 0x0}, 0x20) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="2003"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "0010"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, 0x0}, 0x94) r4 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800}, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000140)={0x8080000, 0xf000, 0x1}) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0xf4, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x8}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xd, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x1}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x7, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x7, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7e}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0xfe, '\x00', 0x6}]}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400ff3"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6m35.304764198s ago: executing program 7 (id=1729): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 6m35.041386287s ago: executing program 7 (id=1730): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) getpgrp(r4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x83) r5 = timerfd_create(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0x2, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c0001000000000000e000000e"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) timerfd_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840) 6m34.923596361s ago: executing program 8 (id=1731): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x7, 0x3, {r0}, {}, 0x10, 0x2}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioprio_set$uid(0x3, 0x0, 0x0) gettid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e7cc6120c4108a818f7d0102030109021b00010000c005090423000103"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') dup3(r5, r6, 0x0) 6m33.528256721s ago: executing program 5 (id=1733): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) listen(r3, 0x5) listen(r3, 0x1000009) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0x40855) 6m33.422345803s ago: executing program 7 (id=1734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r4 = socket$netlink(0x10, 0x3, 0xb) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000340)={r5, 0x2, 0x3, 0x1, &(0x7f0000000300)=[{0x5, 0x4, 0x3, 0x2}]}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf25010009000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500008000000a00000000000000fc010000000000000000000000000001070000000000000001000000ff7f00000000000000000000000000000500000000000000"], 0x98}, 0x1, 0x7}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 6m31.44106016s ago: executing program 3 (id=1735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) r4 = socket$netlink(0x10, 0x3, 0xb) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000340)={r5, 0x2, 0x3, 0x1, &(0x7f0000000300)=[{0x5, 0x4, 0x3, 0x2}]}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf25010009000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500008000000a00000000000000fc010000000000000000000000000001070000000000000001000000ff7f00000000000000000000000000000500000000000000"], 0x98}, 0x1, 0x7}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 6m30.812703021s ago: executing program 8 (id=1736): ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000280)={0x2, 0x0, 0x3, 0x7, 0x2, [0x3, 0x200, 0x85, 0xa8]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x200000020000009, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100000, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) close_range(r3, 0xffffffffffffffff, 0x0) 6m30.736115174s ago: executing program 9 (id=1737): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000000004000000010000800000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000380)=""/196) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) accept(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x27) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="aeeb01005ffc00000000000000"], 0x0, 0xfc5f}, 0x28) 6m30.387623922s ago: executing program 7 (id=1738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000780), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r6, 0x25, 0x2}, 0x14) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x14) openat$audio1(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, @tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}, 0x2}}, @l2={0x1f, 0x5, @none, 0x2, 0x1}, 0x8e67, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='team0\x00', 0x9, 0x1, 0x4}) 6m25.560046029s ago: executing program 7 (id=1739): socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80801) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, r3, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) mount_setattr(0xffffffffffffffff, 0x0, 0x300, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 6m25.291620063s ago: executing program 3 (id=1740): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000006680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6m24.162116348s ago: executing program 7 (id=1741): ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000280)={0x2, 0x0, 0x3, 0x7, 0x2, [0x3, 0x200, 0x85, 0xa8]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x200000020000009, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100000, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) close_range(r3, 0xffffffffffffffff, 0x0) 6m24.080747685s ago: executing program 5 (id=1742): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) getpgrp(r4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x83) r5 = timerfd_create(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0x2, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c0001000000000000e000000e"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840) 6m22.440397522s ago: executing program 3 (id=1743): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x3b8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x3b5c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}, @TCA_BASIC_POLICE={0x14a8, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0xe411, 0x3, 0xfffffffe, 0xa3213227, 0x800, 0xffffffff, 0x7ff, 0x2, 0xd, 0xb, 0x8001, 0x6, 0x2, 0x4, 0xedcc, 0x240000, 0x80, 0x9e6f, 0x0, 0x80000001, 0x1, 0x92c, 0xfe81, 0x5, 0xfff, 0x93, 0x64c7, 0x0, 0x6, 0x3, 0xfff, 0xff80000, 0xbf, 0xffff, 0xb, 0x431, 0x8, 0xffff, 0x5, 0x10000, 0x1, 0x2, 0x1, 0x371, 0x1, 0x35, 0x6, 0x5, 0xff, 0x6, 0x7, 0x7, 0x9, 0x5, 0xb7c, 0xfff, 0x7ff, 0x7674, 0x1ff, 0x2c, 0x2, 0x6, 0x8, 0x2, 0x74a3, 0x6, 0x1, 0xfff, 0x7, 0xa, 0xc, 0x5, 0x5, 0x1e0, 0x3, 0x2, 0xd, 0x65a, 0x4757a012, 0x2, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x0, 0x5, 0x4, 0x6f38, 0x0, 0x8, 0x4, 0x1, 0xfffffffd, 0x4, 0x3, 0x9, 0xe, 0x8, 0xf, 0x9, 0x40, 0x2, 0x3, 0x2, 0x1, 0x377, 0x7f, 0x5, 0x8, 0x8, 0x80000000, 0x91224ee0, 0x775, 0x7fffffff, 0x2, 0x2, 0x3ac3, 0x80000001, 0x68, 0x8, 0x0, 0x4, 0x80008, 0xfffffffb, 0xe, 0x7, 0x1, 0x9, 0x5, 0xb, 0x2, 0x83e, 0x7ff, 0x1, 0x2, 0xfffffffb, 0x5, 0x818, 0x1, 0x4, 0x29, 0x6, 0x0, 0x0, 0x100, 0x6eb, 0x81, 0x9, 0x2, 0x1, 0x4, 0x794, 0x6, 0x10000, 0x2, 0x2, 0x7c09f053, 0x100, 0x1, 0x6063fa6d, 0x8, 0x6, 0x6, 0x6, 0x92, 0x1, 0x4, 0x6, 0x4, 0x10, 0x2, 0x28a, 0x3, 0x1, 0xff, 0x2ddb18f6, 0x3, 0x2, 0x2, 0x1, 0x5, 0x1, 0xa, 0x6, 0xffffffc0, 0x6, 0x7, 0xd1, 0x3, 0x5ae1, 0xc, 0x3, 0x6, 0x7, 0xfffff15a, 0x6, 0x2f, 0x0, 0x0, 0x2, 0xfffffffa, 0xe97, 0x6, 0xffff2958, 0x6c01, 0x7ff, 0x1, 0x2, 0x1, 0x8, 0x0, 0x7, 0xd, 0x3, 0x9e4, 0xa, 0x2, 0x0, 0xb15, 0x4, 0x5, 0xffff, 0xfef3, 0x4, 0xff, 0x5, 0x1, 0x6, 0x6, 0x5, 0xe160, 0x6, 0x1, 0x8, 0x2, 0xd828, 0x8, 0x8, 0x6, 0x12, 0x2, 0x2, 0xef1, 0x3, 0x800, 0x4, 0x2, 0xe79, 0x3ff, 0x0, 0x24dff41d, 0x6, 0x800, 0x401, 0x40]}, @TCA_POLICE_RATE={0x404, 0x2, [0xa12, 0xa647, 0xb, 0x7, 0x76ed, 0x8, 0x401, 0x5, 0xffffffff, 0x8, 0x5, 0x4, 0xff, 0x7b, 0xfff, 0xffffff7d, 0x4, 0x3, 0xa8c, 0x4, 0x7fffffff, 0x1, 0x1, 0x7, 0x8, 0x2, 0x400, 0xa, 0xf6e, 0x4, 0xab2, 0x9, 0xe5d6, 0x10001, 0x8001, 0xc, 0x7, 0x4, 0x7, 0xffff, 0x1, 0xc, 0x100, 0x5, 0x0, 0x40, 0x401, 0x2, 0x5, 0x3ff, 0x54, 0x7ff, 0x8, 0xc78, 0x9, 0xfffffffa, 0x9, 0x5995, 0x7, 0x2, 0x2, 0x8, 0x73, 0x6e87, 0x8, 0x9f, 0x2, 0x6, 0x8, 0x84, 0x5, 0x9, 0x4, 0xbf93c0a, 0x6, 0x4, 0x2, 0x7f, 0x1, 0x3, 0x3, 0x3, 0x8001, 0xff, 0x9, 0x101, 0x8000, 0x7ff, 0x3, 0xdf41, 0x4, 0x240000, 0x6, 0x7fff, 0x1, 0xfffffffc, 0x8, 0x3, 0x5, 0x6, 0x0, 0x3, 0xfffffe1b, 0xda, 0x6, 0x0, 0x2, 0x80, 0x9, 0x1, 0x29, 0x7fffffff, 0x554, 0x0, 0x1906, 0x0, 0x2, 0xe, 0x96cb, 0x8, 0xfffffffe, 0x2057, 0x3, 0x7, 0x4, 0x5, 0x8, 0x6, 0x40, 0xfffffff9, 0xffffffff, 0x8, 0x5, 0x5, 0x6, 0xf, 0x5, 0x5534, 0x3, 0xaf5, 0x40, 0x101, 0x0, 0x4, 0x7fff, 0x197a, 0x4, 0x7, 0x5, 0x3, 0x7, 0x10, 0x51c3, 0x9, 0x3ff, 0x0, 0x6, 0x55fe, 0x5, 0x4, 0x4, 0x10000, 0x6, 0x8000, 0x6, 0x7, 0x5, 0xf3, 0x0, 0x7, 0x2, 0xe, 0x0, 0x3, 0x2, 0x1116, 0x3, 0x0, 0x9, 0xaf55, 0x3, 0x7, 0x9, 0x4, 0x101, 0x9, 0x100, 0xffffffff, 0x10e1, 0x0, 0x5, 0x6, 0x9, 0x0, 0x4, 0xe3, 0x4, 0x4, 0x668ee59c, 0x6, 0x8000, 0x3, 0x7, 0x0, 0x10001, 0x0, 0x3, 0x6d4cb1fa, 0xfffffff8, 0x9, 0xffffffff, 0x8, 0x4, 0x0, 0x7fff, 0x80000000, 0x6, 0x3ff, 0x3, 0x0, 0x1000, 0xfffffff7, 0x8, 0x6, 0x4, 0x7e, 0x9036, 0x7f, 0x2, 0x1, 0x30000000, 0x66d, 0x3, 0x8001, 0x3, 0xcb, 0x401, 0x6, 0x7, 0x0, 0x1, 0x2, 0xb, 0x7fff, 0xfff, 0x13, 0x2, 0x9, 0xfffff6ff, 0x3, 0x7, 0x0, 0xf01, 0x39d, 0x81, 0x40]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xad9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffb, 0x7, 0x7, 0x1, 0x5, {0xf1, 0x2, 0x4, 0x8, 0x7, 0x3}, {0x2, 0x1, 0xfff9, 0x5, 0x7f, 0xc}, 0x5, 0x9, 0x82c}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0x7, 0x5, 0x1ff, 0xfffff000, 0x1, 0x1, 0x4c, 0x400, 0x8, 0x9, 0x5, 0x2, 0x8000, 0x984, 0x317, 0x8, 0x4, 0x1, 0xffff0000, 0x8, 0xffffffff, 0x400, 0x7, 0xa652, 0xa, 0x0, 0x1, 0x80, 0xa39, 0x6, 0x7, 0x6, 0x7, 0x5, 0x0, 0x0, 0x200, 0x7f, 0xf, 0x5, 0xfffffffb, 0xe7, 0x0, 0x5, 0xfe0, 0xb8, 0x58, 0x5, 0x0, 0xc0f5, 0xa44b, 0xfffffff8, 0xe, 0x7, 0xfd, 0x2, 0x8, 0x8000, 0x7, 0x9, 0x9, 0xdb2, 0x0, 0xe, 0x7, 0x8, 0x69, 0x100, 0x8, 0x401, 0x10, 0x35c5, 0x9, 0x1, 0x5, 0xa, 0x6, 0x9, 0x5b, 0x0, 0x2, 0x2, 0x9, 0x9, 0x7, 0xc, 0x10000, 0x85, 0xffffff81, 0x7, 0xfc8, 0x10000, 0x80000000, 0x7, 0xb73, 0x8, 0xd2, 0xc12, 0xfffeffff, 0x7, 0x1, 0xfff, 0x8000, 0x3, 0xf, 0x3, 0x2800000, 0xff, 0x80000000, 0x0, 0x3, 0x355, 0x1, 0x5, 0x3, 0x7, 0x401, 0x4, 0xd, 0x7, 0x10001, 0x8, 0x401, 0x8001, 0x8, 0xa, 0x9, 0x3, 0x40, 0x1, 0x3, 0x7, 0xd, 0xfffffffa, 0xb7, 0xdc8, 0x5, 0xfffffff7, 0x0, 0xe9, 0xb, 0x8, 0x8000, 0x7, 0xe0d0, 0x800, 0xca, 0xa, 0x4, 0x1, 0x2, 0x1, 0x7, 0x4, 0x4af, 0x8, 0x8, 0xfffffffe, 0xffffffff, 0x7, 0x402a, 0x6, 0x5, 0x5, 0xa5f0, 0x8, 0x5, 0xfffffff7, 0x0, 0x3, 0x1d7e, 0x0, 0x1, 0x8001, 0x6, 0xa130, 0xfffffffe, 0x7, 0x0, 0x2, 0x5, 0x1ff, 0xfffffffc, 0x7fffffff, 0x1, 0x5, 0x2, 0xbb, 0x65a9, 0x8001, 0x81, 0x101, 0xd259, 0x2, 0x9, 0x41d, 0x5, 0x9, 0x66d, 0x0, 0x400, 0x80, 0x8, 0xd, 0x3, 0xc91, 0x336, 0x4, 0xa, 0x1, 0x317a, 0x7, 0x6, 0x7fffffff, 0x9, 0x1, 0xd, 0x1, 0x1, 0x2c, 0xd4, 0x3b74, 0x9, 0x7, 0x9, 0x4, 0x858e, 0x8, 0x6, 0x1, 0x9, 0x7, 0x100, 0x80000001, 0x6, 0x1, 0x2, 0x3, 0x5, 0x4, 0x7, 0x4c, 0x6, 0x7f, 0x9, 0x81, 0x4311, 0xfffff000, 0xff, 0x6, 0x6, 0x2, 0x798, 0x0, 0xf3e5627]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xac0000, 0x3, 0x80000000, 0x6, 0x10, 0x3, 0x1, 0x6, 0x7, 0xffffffff, 0x6, 0x2, 0x7ff, 0x7, 0x1, 0x6, 0x3, 0x7, 0x7fffffff, 0x2, 0xf3, 0x0, 0x3, 0x400, 0xc7, 0x1, 0x7fff, 0x87b, 0x1, 0x2, 0x6, 0x1, 0x1, 0x2, 0x3b, 0x6, 0x4, 0x400, 0x8, 0x951, 0x0, 0x0, 0x96d, 0x8, 0x83d, 0x0, 0x2, 0x7f, 0x9, 0x7fffffff, 0x7, 0xfffffffb, 0x5, 0x400, 0x80000001, 0x0, 0x1964, 0x2, 0x3, 0x0, 0x0, 0x8, 0x8000, 0x7, 0xffff, 0xfff, 0xff, 0x0, 0xa, 0x4, 0x7, 0x6dd, 0x5, 0xa, 0x6, 0x6, 0x100, 0x9, 0xd76, 0x4, 0x7ff, 0x0, 0xa9, 0x8, 0x0, 0x3, 0x1, 0x2, 0x4, 0x4, 0x5, 0x0, 0x9, 0x9, 0x0, 0x1c21, 0x8, 0x9, 0x65a8, 0x4, 0xa83, 0xffffece0, 0x7, 0x9, 0x5, 0x3ff, 0x200, 0x2, 0x401, 0x4, 0xc7, 0x5, 0xd, 0x7b08, 0xa, 0x582e, 0x1, 0x2, 0x2c, 0x5, 0x7, 0x6, 0x81, 0x4, 0x8, 0x78be970b, 0x48c, 0x6, 0x1949, 0x2aa, 0xffffff92, 0x0, 0x6, 0x6, 0x9501b00, 0x9, 0x4, 0x74, 0x6, 0x8, 0x32, 0xfff, 0x7fffffff, 0x9, 0x8, 0x2, 0xfff, 0x7, 0xef3, 0x3, 0x9, 0xa03d, 0x8, 0x101, 0x8, 0x1, 0xffff8000, 0x5, 0x7, 0xb, 0x8000, 0x4, 0x7ff, 0x76, 0x6, 0x3, 0x6, 0x0, 0x7, 0x8000, 0x6, 0x1, 0xb76, 0x1000, 0x0, 0x6, 0x1, 0x7fffffff, 0x1, 0x1, 0x3ff, 0x8, 0x1, 0x4, 0xc6, 0x2, 0xb, 0x44, 0xf2d7, 0x8, 0xfffffff4, 0x2, 0x1, 0x7, 0x3, 0x4, 0x3, 0x5, 0xffffffff, 0x9, 0xffffff10, 0x6, 0x1, 0x4, 0x4, 0x2, 0xffffffff, 0x80000001, 0x1, 0x9, 0xfffffc00, 0x7ff, 0x80000000, 0xfffffff1, 0x10001, 0x3, 0x2, 0xfe, 0x81, 0x9, 0x1, 0x6, 0x609, 0x9, 0x6, 0xffffffff, 0x1, 0x5, 0xc, 0x1, 0x8c1, 0x7, 0x7ff, 0x7, 0x2, 0x0, 0x5, 0x6, 0xffffff05, 0x7fffffff, 0x4, 0x5, 0x7ff, 0x9, 0x2, 0x9, 0x6, 0x1000, 0x9, 0x200, 0xb, 0x2, 0x1, 0xfffffff8, 0x7, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x334b, 0x5, 0x9, 0xdba, 0x800, 0x1, 0x7, 0x1ff, 0x3, 0x6, 0x8, 0x8001, 0x4, 0x80, 0x97b, 0x4, 0x7f, 0x7, 0xcf1e, 0x4, 0xcf0c, 0x7, 0x9, 0x80, 0x0, 0xf93, 0x5, 0x1d26, 0x66ed, 0x5e3a7506, 0x0, 0xe03a, 0x7, 0x200, 0x0, 0x4, 0x5, 0x9, 0x4, 0x8, 0x7, 0x6, 0x46, 0x6, 0x0, 0x3ff, 0x3ff, 0x401, 0x7, 0x1, 0x4, 0x1, 0xc, 0x5a3, 0x0, 0xaa9, 0x7, 0x0, 0x433, 0x5, 0x0, 0x2e828b17, 0x0, 0x9, 0x4, 0xcea, 0x7f, 0x9, 0x6, 0xa, 0xfffffff9, 0xb, 0x7fffffff, 0x10, 0x400, 0x5, 0x6, 0x5, 0x3, 0x0, 0x24, 0xa, 0x79e00, 0xb, 0x10000, 0x7dbc, 0x6, 0x40, 0x8000, 0x7, 0x7, 0x6, 0xffffffff, 0xfffffffa, 0xffffffff, 0x0, 0x8000, 0x7, 0x0, 0x9, 0x80000000, 0x1, 0x8, 0x6, 0x10000, 0x9, 0x6, 0x3, 0xfffffffc, 0xcab4, 0x1, 0x3, 0x9, 0x800, 0x200, 0x401, 0xfffffff9, 0x3, 0x0, 0x10001, 0x8, 0x5, 0x7, 0x0, 0xd2fd, 0x0, 0x8, 0x0, 0x10000, 0x1c0000, 0x6, 0x7, 0x479, 0x4, 0x4, 0x4, 0x0, 0x8, 0x8, 0x7, 0x79f6, 0xff8, 0x6597, 0x5, 0xfffffffb, 0x8a0, 0xff, 0x4, 0x53e, 0x5, 0xca, 0x800, 0xfffffffe, 0x7, 0x4, 0x10001, 0x0, 0xe5e0, 0x1, 0x8, 0x4dbf05cc, 0xb, 0x18000, 0x3f, 0x0, 0x4, 0xd, 0x1, 0x3, 0x4, 0xb, 0x4, 0x6, 0x10000, 0x7fb7, 0x1, 0x7fffffff, 0xfffffffc, 0xa94, 0xfffffc01, 0x0, 0x9, 0x9, 0xffff, 0x9, 0x7, 0x3, 0x6, 0x4, 0x6, 0x6, 0x6, 0xffffffff, 0x8000, 0x10000, 0xfffffffd, 0xfffffff5, 0x7fff, 0xb, 0x1, 0x7ff, 0x9, 0x6, 0x5, 0x5, 0x6, 0x1, 0x5, 0x9, 0x5, 0x6, 0x5, 0x2cc9, 0x2, 0x0, 0x0, 0x1, 0x2, 0xf1, 0x5, 0x2, 0x5, 0x3, 0x3, 0x3f31, 0x7, 0x6, 0x3403, 0x1, 0x3ff, 0x3, 0x5, 0x1, 0x2, 0x5ee9, 0xffff, 0xb, 0x0, 0x0, 0x2, 0x3, 0x5, 0x41ce, 0xcc78, 0x6, 0x3, 0x10001, 0x80000000, 0x1, 0x7, 0x3, 0x40, 0x7, 0x5, 0x6, 0x80000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x8001, 0x9, 0x6, {0x1, 0x8b9eec10db3be821, 0xd, 0x400, 0x7, 0x1}, {0x8, 0x0, 0x0, 0x0, 0xffff, 0x6}, 0x3, 0xa}}]}, @TCA_BASIC_ACT={0x26a8, 0x3, [@m_tunnel_key={0x9c, 0x1, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x56, 0x6, "b36d8b90942e6dffaa698a3d471b885d46f48636c439374faee17aa386aed52dc7b4246c9fe9bdd3811fa767a1cd20d0fc47b18f85af3958b17e48cfdc68d06f2ef7d814bbdd46c44e4baa4c094ebdc86975"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x120, 0x19, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fff, 0xc, 0xffffffffffffffff, 0xcd, 0x8}, 0x10}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x77}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6921, 0x80000000, 0x6, 0x9, 0x4}, 0xa}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="ed206db17150"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffc}]}, {0x6c, 0x6, "dbc22f0262684668ff89b6eb8ca472ee1d1dd4da573c6aa6e46faad46f0c92635c9a4fcf78fdc42f1e7b0a96f91c57e5cad3a53eb5e59f3be33740206d81228f32d7ddece5fe1e641359dee81e9a69a1d34a4b4f277d4e1e8cdd56af2766f595f853c3eb3aac9588"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x1e5c, 0x3, 0x0, 0x0, {{0xa}, {0x1d70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x80, 0x2, 0x5, 0x3c, 0x9}, 0x6, 0x2, [{0x2, 0x8, 0x3, 0x9, 0xb, 0xfffffffa}, {0x498, 0x2, 0x7, 0x0, 0xb, 0x6}, {0x8, 0x5, 0x4, 0x8, 0x0, 0x8}, {0x5601, 0x3, 0x3, 0x7, 0x4, 0x66}, {0x800, 0x6, 0x1, 0x6d2b, 0x7, 0xf820}]}, [{0x9, 0x4, 0x6d, 0x5, 0x8, 0x9}, {0x3, 0x3, 0xfffffffc, 0x3, 0x5, 0x9}, {0x4, 0x81, 0x0, 0x20000000, 0x6, 0x8}, {0x0, 0x6, 0x2, 0x7, 0x7, 0xf4fe}, {0x180, 0xe, 0x0, 0xe03f, 0x1, 0x5}, {0x7fff, 0x7, 0x0, 0xbfd2, 0x8, 0x69}, {0x1, 0x6, 0x100, 0xcf50, 0x1, 0x401}, {0x0, 0x5, 0xfffffffa, 0xa, 0x40, 0x80000001}, {0x2, 0x800, 0xebb, 0x8, 0x6, 0xfffffff9}, {0x8000, 0x6, 0x5, 0x1c45, 0x200, 0x3ff}, {0x7c2b, 0x5, 0xd, 0x1ff, 0x7, 0xfff}, {0x6, 0x5, 0x7, 0x7fefcbc8, 0x2, 0x4}, {0x5, 0x7, 0x0, 0x1ff, 0x4, 0x5}, {0xfffffffe, 0x401, 0x2, 0x80000001, 0x9}, {0x4, 0x96c, 0x34a, 0x7, 0xa7, 0x39}, {0x6, 0x2f36, 0x8, 0xc, 0x90d, 0x8000}, {0x7f, 0x6, 0x1, 0x3, 0x77, 0x9}, {0x4, 0x6, 0x5, 0x5, 0x1, 0x912}, {0x3, 0x2, 0xe, 0x7f, 0x3, 0xfffffff7}, {0x1, 0x5, 0x4, 0xd, 0xf, 0x90d1}, {0x7ff, 0x7, 0x5, 0x0, 0x2, 0x3ff}, {0x297e, 0x0, 0x4, 0x81, 0x9, 0x9}, {0x0, 0x7fff, 0x621, 0x1, 0x2, 0x1}, {0x2d2, 0x5, 0x7, 0x7, 0x7fff, 0x986}, {0xff, 0x7, 0x8, 0x8, 0x9, 0xfffffffb}, {0x3, 0x5, 0x10000, 0x8, 0x4, 0x5}, {0x1, 0x853, 0xb, 0x3, 0xfffffffd, 0x6}, {0x5, 0x8, 0x2, 0x2, 0xfffffff9, 0x5}, {0xff, 0x2, 0x1, 0x6, 0x9, 0xa}, {0x2, 0x5, 0x85, 0x7, 0xffffbe6f, 0x6b1}, {0x1, 0x3, 0x6, 0x4f49, 0xb62, 0x3}, {0x4, 0x2, 0xc, 0x0, 0x7f, 0x5}, {0x3, 0x3, 0x1, 0x1, 0x3c5400, 0x2}, {0x1, 0x9503, 0x125, 0x6, 0x4cd, 0x10000}, {0x1, 0x63, 0xf, 0x5, 0x8, 0xffff}, {0x7f, 0x6, 0x1b27, 0x5, 0x4, 0x7ff}, {0x6, 0x6, 0x9, 0x100000, 0x6, 0xfffffffe}, {0x8, 0x2bf41eca, 0x8, 0x4, 0xe0004300, 0x1}, {0xfffffff8, 0x7, 0x4, 0x7e, 0x3, 0x5}, {0x1ff, 0x80000000, 0x0, 0xfffff800, 0x7, 0x5e}, {0x3, 0x2, 0x5345cb17, 0x9, 0x6, 0x1}, {0x7, 0x7, 0xfffffe00, 0x8, 0x8, 0x18}, {0x0, 0x7, 0x5, 0x81, 0x0, 0x3ff}, {0x5, 0xffffffff, 0x3ff, 0x2c6f, 0x5, 0x2}, {0x3ff, 0x4, 0x1, 0x8, 0x4, 0x8}, {0x3f, 0x5c, 0x1000, 0x8, 0x1, 0x101}, {0x3, 0x5, 0x6, 0xfffffff9, 0x1, 0x4}, {0x6, 0x5cd3, 0x7, 0xd3, 0x0, 0x3}, {0x0, 0x3ff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x1, 0x5, 0x69c1, 0x5}, {0x4, 0x8, 0x7, 0x0, 0x3ff, 0x9}, {0x4, 0x5f3, 0x91, 0xff, 0xb9, 0x3}, {0x4, 0x4, 0x6, 0x7, 0x7, 0x401}, {0x4, 0x101, 0x7, 0x1, 0xebb0, 0x52caed03}, {0x101, 0xfffffff1, 0x10000, 0x0, 0x4, 0x9}, {0x5, 0x4, 0x8, 0x40, 0x6, 0x2}, {0xfffffffe, 0x1, 0x3, 0x7609, 0xfffffe01, 0x80000001}, {0x5, 0xffffffff, 0x0, 0x8, 0x2, 0x80000001}, {0xef, 0x6, 0x7, 0xfffffff7, 0xd, 0x7}, {0x1, 0x5, 0x9, 0x5, 0x5, 0x2}, {0x5, 0x5367, 0x5, 0x4, 0x9eff, 0x23a}, {0x10001, 0x5, 0x2, 0x2, 0x1, 0x8}, {0x40, 0x2000000, 0x8, 0x101, 0x101}, {0x2, 0x3, 0x4, 0x4, 0xffffff01, 0x1}, {0x6, 0x0, 0x0, 0x2}, {0x7, 0x7, 0x0, 0x2, 0x5, 0xffffff27}, {0xf2b, 0x2, 0x3, 0x9, 0x7, 0x3}, {0xfffffffc, 0xb, 0x3, 0x9, 0x3, 0x9}, {0x5, 0x43, 0x8, 0x401, 0x165, 0x8}, {0x6, 0x5, 0x4, 0x7, 0x8, 0xfff}, {0x6, 0x4, 0x47, 0x0, 0x0, 0x1edd}, {0x9, 0x1, 0xfffffffa, 0x0, 0x3, 0x4}, {0x10000002, 0x8, 0xa, 0x1, 0x9, 0xa622}, {0x3, 0x1, 0xfff, 0xcf, 0x80, 0xc5}, {0x7, 0x9, 0x4, 0x1, 0x2, 0x4}, {0x80000001, 0x8167, 0x400, 0x8, 0x6a, 0xa7e}, {0x5c93, 0x100, 0x7, 0x4, 0xfffffbff, 0x9}, {0x8, 0x360, 0x2, 0x4, 0x7, 0x2646cae1}, {0x4, 0x3, 0xfffffe6a, 0x9, 0x6, 0xf48e}, {0x0, 0xf94, 0x2, 0x8, 0x7ff, 0x4}, {0xf415, 0xff, 0x0, 0xbb, 0xf, 0x200}, {0x7fffffff, 0x0, 0xffffff3d, 0xf0c9, 0x8, 0x80000001}, {0x6, 0x7, 0xd64a, 0x1ed3261c, 0x4, 0x31d98d62}, {0x6, 0xbf00, 0x7ace0c9e, 0x2}, {0x4840, 0x8, 0x5deaccf5, 0xcf, 0xca}, {0xd, 0xad, 0x6, 0x3, 0x2, 0x3}, {0x4, 0xff, 0x8001, 0x6, 0x400, 0x400}, {0x4, 0x0, 0x4cc, 0x7fff, 0x10, 0x10000}, {0x60ae932a, 0x9, 0x5, 0xfea6, 0xde3ba3a, 0x1bd}, {0x8, 0xe, 0x0, 0x27d, 0x7a8, 0xc5b5}, {0x2, 0x3, 0x9, 0x4, 0xfffffffc, 0x3}, {0x7, 0x7, 0x7, 0x1ba2, 0x401, 0x8}, {0x48, 0x5, 0x5, 0x59, 0xb, 0x8}, {0x9, 0x8, 0x0, 0x40, 0x4}, {0x3, 0x80000000, 0x9, 0xffff, 0x8, 0xffffffff}, {0x10000, 0x1, 0x11ae, 0x7ff, 0x4, 0x81}, {0x2, 0x0, 0xe815, 0x2, 0x6279, 0x10}, {0x9e0, 0x2441, 0x7, 0xadbb, 0xff}, {0xd3, 0x69, 0x9, 0x6, 0x2, 0x1}, {0x8, 0xf, 0x9, 0x5, 0x5, 0x6}, {0x7, 0x10, 0x8, 0x5, 0x1, 0x10000}, {0x0, 0x7fff, 0x8, 0x0, 0x5, 0x7fff}, {0xfffffff8, 0x0, 0xfffffffa, 0x2, 0xc, 0x1}, {0x2, 0x4, 0x9, 0xffff6bdd, 0x4, 0x6}, {0x2, 0x1ff, 0x5, 0x80000001, 0x8, 0x401}, {0xb, 0x4, 0x8, 0x2, 0x0, 0x2}, {0x7, 0x3c, 0xac, 0x8, 0x4, 0x10}, {0x2c8, 0x2, 0xffffffff, 0x8000, 0x6, 0x100}, {0x1, 0x7, 0x60000000, 0xa, 0x2, 0x2}, {0x8130, 0x8, 0x6, 0x10001, 0x2, 0x1}, {0x3, 0x0, 0x7, 0x1, 0x0, 0xd}, {0x1, 0xffff8001, 0x4, 0x4, 0x7, 0x3}, {0x6, 0x8, 0x8, 0x3, 0x81, 0xd}, {0xfffffff9, 0x3, 0x80, 0x5, 0xec9, 0x510c8976}, {0x2, 0xfffffff2, 0xfffffffc, 0x4, 0x2, 0x80}, {0x8, 0x3fb, 0x6, 0xff, 0x7fff, 0x6}, {0x0, 0xffffffff, 0xf221, 0x82e2, 0x400, 0x2}, {0x1, 0x10001, 0x4, 0x7, 0x9, 0x96cf}, {0xffff4498, 0x2, 0x7, 0x1, 0x0, 0x8}, {0x1, 0x3ff, 0xd5a9, 0x8, 0x1, 0xb}, {0x10, 0x3, 0xbe4, 0x2, 0x17d8e8bc, 0xf}, {0x8, 0x6, 0x80000000, 0x80000000, 0x4, 0x180000}, {0x5e7, 0x7, 0x8, 0xffffff82, 0x400, 0x400}, {0xe, 0x3, 0xa42, 0x5, 0x1, 0xff}, {0x5, 0x9, 0xf55, 0x1, 0x7fdf, 0x5}, {0xffffffeb, 0x1, 0x3, 0x0, 0x0, 0x5}, {0x5, 0x8, 0x7, 0x2, 0x3, 0x6}, {0x9, 0xfffffff4, 0x9, 0x0, 0x9, 0x8000}], [{}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0xaff8b864eadd16d9, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x6}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x6, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x622c28bce716d1e5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x1}, {0x5}, {0x1}, {0x2}, {0x5}, {0x3}, {0x4, 0x1}, {0x1}, {0x3}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x3c, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0xfff, 0x92c6, 0x1, 0x2, 0xde}, 0x19, 0x56, [{0x8, 0x6, 0x43, 0x1, 0x2, 0x800}, {0x8, 0x2, 0x40, 0x40, 0x9, 0xffffffff}, {0x9, 0x69, 0x7, 0x6, 0xfffff000, 0x4}, {0xb, 0xe, 0xc64, 0x4, 0x8, 0xfffffff1}, {0xb, 0xd, 0x8, 0x404, 0x5, 0x800}]}, [{0x9, 0x16c8, 0x71, 0x1, 0x6, 0x3}, {0x0, 0xff, 0x5, 0x280000, 0x0, 0x6}, {0x5d3e, 0x1, 0x81, 0xc, 0x4, 0x6}, {0x8, 0x6, 0xffffffff, 0x3, 0x6, 0x38ca}, {0x8, 0x9, 0x400, 0x6, 0x2}, {0x2, 0x3, 0x0, 0xffff0d5e, 0x6, 0x97d}, {0x7fffffff, 0x400, 0x9, 0x1, 0x4, 0x10001}, {0x9, 0x0, 0x200, 0x7, 0x101, 0x401}, {0x0, 0x8, 0x200, 0x4, 0x4, 0x3}, {0x5, 0xfffff235, 0x2, 0x6, 0x4ac, 0xc}, {0x9, 0x4, 0x4, 0x4, 0x4, 0x1}, {0x400, 0x6, 0xa7ee, 0x4, 0x75, 0x400}, {0x10, 0x2487, 0x1, 0x100, 0xc, 0xf}, {0x40d7bb, 0x1, 0x1, 0x6, 0x0, 0x1}, {0x7, 0x7f, 0x3, 0xffff8cc7, 0x2, 0x5}, {0x2, 0x1ff, 0x308, 0x42a7, 0x80000000, 0x566d69b2}, {0x4, 0x1, 0x1, 0x5, 0x6, 0x1}, {0x6, 0x10001, 0x7f, 0x9, 0x2f, 0x101}, {0xfffffffd, 0x7f, 0xf, 0x10000, 0xfff, 0x8}, {0x1, 0x3, 0x8, 0x5, 0x6, 0xb}, {0x10000, 0x101, 0x2, 0x6, 0x8, 0xffffffff}, {0x9, 0xffff0001, 0x5, 0x7, 0x3200, 0x7}, {0x80, 0x1, 0x3, 0x1, 0x248000, 0x7cc}, {0x829, 0x7, 0x5, 0x6e83f716, 0x6000000, 0xffffff00}, {0x9, 0xffff, 0x0, 0x6, 0xc9f4d211}, {0x83de, 0x0, 0x94e6, 0x1, 0x6, 0x5}, {0x9cac, 0x9, 0x6, 0x101, 0x8, 0x9}, {0x1, 0x9, 0x4, 0x9, 0x2, 0x5b69}, {0x8, 0xd, 0x7, 0x0, 0x6}, {0x2, 0xc, 0xa, 0x0, 0x9104, 0x1}, {0xc49, 0x7, 0x1, 0x1000, 0x401, 0x401}, {0x9, 0x42, 0xfffff1ae, 0x7, 0x9, 0x451}, {0x8001, 0x2, 0x9, 0x800, 0x0, 0x21}, {0x9, 0x9, 0xfffffff9, 0xfffff3e2, 0x839, 0x1ff}, {0x2, 0x0, 0x520, 0x9, 0x7, 0x40d6b66a}, {0x17a2, 0x4463, 0x80000000, 0x9, 0x4, 0x4f}, {0xbd, 0x36, 0x6, 0x7, 0xfffeffff, 0xffffffff}, {0x7, 0xff, 0x0, 0x0, 0x2cd, 0x2}, {0x3b6, 0x3, 0x9, 0x8, 0x1, 0xfffffff8}, {0x8786, 0x2, 0x1, 0xfffffffd, 0x8, 0x3}, {0x80000000, 0x1, 0x2, 0xe, 0xbe7, 0x200}, {0x3, 0x3, 0x8, 0x65a, 0xffffff01, 0x8}, {0x8, 0x0, 0x5, 0x0, 0x4218f5c4, 0x5b55}, {0x0, 0x4, 0x5, 0x180, 0x8}, {0x1, 0x3, 0x3, 0x7, 0x1, 0x6}, {0xff, 0x5, 0xff, 0x1, 0x1, 0xfff}, {0x3ff, 0x6, 0x5, 0x8, 0x7fffffff, 0x101}, {0xe84b, 0x0, 0x0, 0x6, 0x19, 0x5}, {0x8, 0x0, 0x7fff, 0x1ff, 0xfffffffa, 0x4}, {0x3f1, 0x82, 0xf, 0x4, 0x8, 0x7}, {0x1, 0x5, 0xfff, 0x5, 0x1, 0x4}, {0x80000001, 0x0, 0xfd, 0x4, 0x3, 0x4}, {0x80000000, 0x4, 0x4, 0x3f8, 0x8, 0x1}, {0x8, 0x64a, 0x9, 0xa4a9, 0x9, 0xffff6012}, {0x5, 0xfff, 0xfffffff7, 0x7, 0x7, 0x4}, {0x7, 0xf, 0x7fffffff, 0x0, 0x8, 0x2}, {0x8, 0x7e, 0x2, 0x6, 0x37, 0x9}, {0x8, 0xfffffffc, 0x1, 0x0, 0x6b, 0x6}, {0x1, 0x84a, 0x9, 0x7671, 0x10000, 0xb1}, {0xd, 0x7, 0x5, 0x7f, 0x1f776b9f, 0x1}, {0x0, 0x0, 0x7, 0x2, 0x7ff, 0x1}, {0x1, 0x0, 0x7, 0x5, 0x5, 0x72}, {0x4, 0x75eaba2c, 0x4, 0x3, 0x3, 0x4}, {0xe, 0x1, 0xff, 0x269d, 0x44, 0x9}, {0x6, 0x81, 0xd1fc, 0xf23, 0xffffffff, 0x3b}, {0x7fff, 0x2, 0x4, 0x4, 0x1ff, 0x5}, {0xa8, 0x3, 0x311, 0x9, 0x3, 0x8001}, {0x0, 0x6, 0x48, 0x800, 0x27afb7be, 0x2}, {0x3, 0x3c21, 0x5, 0x3, 0x7, 0x40}, {0x795, 0x6113, 0x5, 0x1, 0x69, 0x4}, {0x2, 0x8, 0x9, 0x3, 0x4, 0x7f}, {0x1, 0x0, 0x1ff, 0x8, 0x0, 0x27}, {0xbdd, 0xa2, 0x5, 0x9, 0x1, 0x1}, {0x4, 0x3, 0x0, 0x48, 0x2, 0xd0}, {0x6, 0x7, 0x101000, 0x13870843, 0x1, 0xefd}, {0x46, 0x1, 0xfffffff9, 0x0, 0x7b, 0xffff}, {0xffff, 0x6, 0xba7e, 0x0, 0xfffffff9, 0xf}, {0xd12, 0x61, 0x1, 0x5, 0x7, 0x8}, {0x5, 0x9, 0x80000001, 0x2, 0x0, 0x6}, {0x81, 0x0, 0x5, 0xba7, 0x9, 0x5}, {0x27a9, 0x2, 0x6, 0x7d7, 0x4, 0x9}, {0x2, 0xd51, 0x1ff, 0x3, 0xa, 0x7fffffff}, {0xffff5fc6, 0x60f, 0x19, 0x174, 0x1, 0x7}, {0x3ff, 0x3, 0x5, 0x6, 0xb, 0x6}, {0x9, 0xfb, 0x4ac2, 0x6, 0x1, 0x54e}, {0x8001, 0x8, 0x3, 0x0, 0xe, 0x6}, {0x4, 0xe819, 0x1, 0x3, 0x4002, 0x2}, {0x10, 0x3, 0xffffffc5, 0x9, 0xd5, 0x1}, {0xffff, 0x914, 0xf15, 0x6, 0x3, 0xbdcf}, {0xe, 0x8, 0x0, 0x2e80, 0xdc3, 0x3}, {0xf8000000, 0x5, 0xa, 0x741d, 0x3, 0x7}, {0x800, 0x0, 0x1354, 0x9, 0x9, 0x6}, {0x4, 0x9, 0x6, 0x40, 0x100, 0x8}, {0x6, 0x18e8, 0x0, 0x7, 0xffffffff, 0x1}, {0x8001, 0x6d, 0x9, 0x1, 0x7, 0x4}, {0x0, 0x1, 0x7, 0x9, 0x800, 0x7ff}, {0x2, 0x5, 0x3, 0x6, 0x18, 0x3}, {0xffff0001, 0x7, 0xff, 0x9, 0xe4f4, 0xffffffff}, {0x4, 0x257, 0x4, 0x5, 0x7, 0x9}, {0x6b4, 0x6, 0xd, 0xfffffff7, 0x7, 0x5}, {0x511, 0x7, 0x1, 0xed6, 0x1, 0x5}, {0x9, 0x800, 0x0, 0xffffffff, 0x8000, 0x5}, {0xd, 0x4, 0x7, 0x4, 0x3, 0x8}, {0x7fffffff, 0xe81, 0x0, 0x8298, 0x1, 0x4}, {0x9ab, 0x9, 0x51, 0x401, 0x7, 0x1}, {0x8, 0x8, 0x419, 0x6, 0x0, 0x24}, {0x8, 0x400, 0x7, 0x4, 0x2, 0x9}, {0xff, 0x3, 0x384a116d, 0x2, 0x5, 0xffffffff}, {0x200, 0x7fff, 0x0, 0x8, 0x6, 0xffffffff}, {0x17, 0x1, 0x5, 0x4, 0xa}, {0x1, 0x9, 0x6, 0xffffffff, 0x8, 0x9}, {0x3ff, 0x7f, 0x1, 0x2, 0x10000}, {0x6, 0x1, 0x3, 0x1000, 0x9, 0x8}, {0x8000, 0xe00000, 0x9, 0x6, 0x3fe9, 0x9}, {0x4, 0x400, 0x7, 0x361, 0x20, 0x4}, {0x3, 0x7ff, 0x0, 0x7, 0x7, 0x80}, {0x0, 0x0, 0xfff, 0x5, 0x1ff, 0x8}, {0xb, 0x3, 0x8b, 0x6, 0x3, 0x3}, {0x7, 0x7, 0x8, 0x7, 0x101}, {0x7, 0x9, 0x5, 0x200, 0x9, 0x6}, {0x7, 0x9, 0x7fff, 0x2, 0x9, 0x9}, {0x5, 0x8, 0x10000, 0x10001, 0x6323, 0x7}, {0x48, 0x3800, 0x2, 0x7, 0x0, 0xc05}, {0x80, 0x400, 0x9, 0x11c6000, 0xb8, 0x3fc00}, {0x9, 0xc54f, 0x6, 0x6, 0x1526, 0x5}, {0x0, 0x0, 0x101, 0x5, 0x9, 0x2}, {0x1, 0x1, 0x3, 0xa0c, 0xa611, 0xe54}, {0x6, 0x5, 0xffffffff, 0x1, 0x4}], [{0x2}, {0x4}, {0x2}, {0x5}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x3}, {0x5}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0xcf6a80e2f4c10d26}, {0x1}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {}, {0x2}, {}, {}, {0x3}, {0x1}, {0x2}, {0x4}, {0x1}, {0x1}, {0x5}, {}, {0x5}, {0x3}, {0x5, 0x1}, {0x3}, {0x2}, {0x9, 0x1}, {0x2}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x3e9d26c699403636}, {0x2, 0x1}, {0x5}, {0x2}, {0x4}, {0x3, 0x622c36c2123ea3ae}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x3}, {0x1, 0x1}, {0x1}, {0x1}, {0xa}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}], 0x1}}]}, {0xc3, 0x6, "18f3514d574e7447b00103fc650a29e2fcdc7f9e10833577fd0975116a3f9b6a6215c5d99a96fcdf9e51ce1bd4d4d86f6f89fb4e05d9620cf3bab273184d72ce446036cd1a884f973ac34d052b477b964d63f1a15bc5b3420954889882db3e882227f4a7058d14079554a18642a14dcc97fcd9cf50804da10879a24d680d1a2368b3a598f85fd85ecc01a787b538d4e2619350eecf730e3450be9c608363b3fdd1b29e27f36d6bc40075367a8740efba6d7152d69342806923a0a44b29526c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x178, 0x4, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xe}, @TCA_MPLS_LABEL={0x8, 0x5, 0x7e64d}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x5, 0x0, 0x5, 0x7}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6006}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x94000000, 0x1, 0xffffffffffffffff, 0x81, 0x8}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1c}]}, {0xe2, 0x6, "f46fa12863cc9f6c560a15b60fb7e45a22ded0670830d7c286d7ee2e81fb4d90d53e9025afa2d566f73877f13ee746bfba55692202808fda72104c7ff17c63c9033f9174fc45f915c51376ccbaea81a6784728070439d4c79a451900e880bef5e20edb8c58b42d326f2888376c11dbfdd3429a6507aa74fbc11836b191697469d87c2662b1c7bb852f58ec092132edb5cd48da991f60dff52013bd4a799104a229caaaa73b4da2a8ac141eeda1748356d27acad5debb6bb38b4b8108b26bfc83d1fecd9e68df7e33faf7f1fb502731d40e9414d86adc0ecfba568bfa3c39"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ife={0x130, 0x6, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0xe9, 0x6, "fd95c7d4534d359dc061f00fba7fdd7ca98b7b761466dc15d9b7d03f428316552fa61d3a4d92913bdd050a3bd6320e9c0c8e5fadd0a479c9028039e8770dcce5fe124b1f392d299ea749265b2091494fcf9ae81fe4db812e9d4f25472292ee4a4c8777f415fba872d3212e18ec24ca352751ddffcd29bb1086d461b7e9c48273741465fbfb672ca5a09d74c7cd9288a799ec5089b76f2b21728c073886074247dc16807191affd9c27e7bce077cff720dce5e672b2d2f268fa6884bf2c0d18f7a5e585eebb658d3db9a1899553ed42abdaa5d2e1fb700c04055546d3d24b9b0f83fa76aa84"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0xfc, 0x10, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '*)()*\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x4, 0x1, 0xc3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x5, 0xc5405a617f833c95, 0xfffffff7, 0x5}}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_DATA={0xc, 0x3, '%@\xdf{++.\x00'}]}, {0x74, 0x6, "4ed88d534210a72ba80878e1719d75baa4b3772f300230ae7e957ebf2d85af9d9e11ab3e8f5b41a5d6dc489872bd34daa5d3f7ec55befaab80d6231980e5ac60de64ea76982a68c5ac87e9748d37876b483d92f91c581025b95883d8153baba93b742464376be378f6e12136f6a3035f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x188, 0xd, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7, 0x2, 0x1000, 0x1000}}, @TCA_DEF_DATA={0xd, 0x3, '-[%.\'${!\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x4, 0xffffffffffffffff, 0x80000000, 0x401}}, @TCA_DEF_PARMS={0x18, 0x2, {0x100, 0x0, 0x4, 0x1, 0x5}}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x20000000, 0x7, 0x4, 0x9, 0x6ee}}, @TCA_DEF_DATA={0x7, 0x3, ')+\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x9, 0x10000000, 0xffffe91f, 0x10}}]}, {0xb6, 0x6, "a4b1f3ca767aea4f9ad6747bf25eaf7a31187f5cb0ad73f56746a37a208973ad0f4e1680b089a8706a4c79f62093faa356dea5eb62260fff164271eb27e4f11ea11a6010aae362aca360018b2735056572c3250669797e9e25db6926185b35324a54fa3128ccfd7ffc34df537a358a7a4032ca11073a67fd134216f00bbec9c9201d6d968183bc610e41869d8bbd6da67f9fa474fcc4278853b339e11450e2397a75bff38f715c43a61fdf411db13cf85569"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xa8, 0x3, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x8f4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xe83}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2653, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x1000, 0xffffffffffffffff, 0x9, 0x7fffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xdf6, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0xffffffffffffffff, 0x2, 0x6c6e}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xa69, 0x2}}]}, {0xd, 0x6, "a489ed2306fdfd32d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0xb8, 0x1f, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x40}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x87d2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xa9c8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3bb}]}, {0x39, 0x6, "98bf1200527e65a7c307d2f750b46f5b8538adaa5a59d1a427d29a9087e24808584557c56fd5ba204259995b42c7d9941dd20c5a2c"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x3b8c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 6m22.244184874s ago: executing program 5 (id=1744): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1, &(0x7f0000000300)={0x0, &(0x7f00000001c0)}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0xc, @val=@netfilter={0x5, 0x1, 0x7ff, 0x1}}, 0x20) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0xfffffff9) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[], 0x90}}, 0x4004800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000b2b2d9c7a09d831c09faa69562a30a32e4e07b42463c1e1a556702518328df68ef40be28590aae47016ec3fb193fa7db05f04e9bb6cb1c80cb09c0ddc39a73a01d3a922d36904575819f93e9f1e441bdc624f276a4cfbfcb2a881cf86100afb6cc13083df7bdc6e6192fe748fe8bee8b7c", @ANYRES16=r5, @ANYBLOB="01002dbd7000ff"], 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x5, 0x0, 0xffffffffffffffee, 0x1ff, 'syz0\x00', 0x0}) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r2, 0xb) 6m20.590149815s ago: executing program 3 (id=1745): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x7, 0x3, {r0}, {r3}, 0x10, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioprio_set$uid(0x3, 0x0, 0x0) gettid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e7cc6120c4108a818f7d0102030109021b00010000c005090423000103"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') dup3(r5, r6, 0x0) 6m20.5520905s ago: executing program 8 (id=1746): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0xfffffdef}}, 0x0) write(r2, &(0x7f0000000240)="57d99c", 0x3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0xe503, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6m19.751951579s ago: executing program 9 (id=1747): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000000004000000010000800000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000380)=""/196) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) accept(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x27) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="aeeb01005ffc00000000000000"], 0x0, 0xfc5f}, 0x28) 6m19.462564134s ago: executing program 8 (id=1748): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000380), 0x917) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) 6m18.122236219s ago: executing program 5 (id=1749): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) get_mempolicy(0x0, &(0x7f0000000100), 0x3, &(0x7f000000f000/0x2000)=nil, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x400000000fffd, 0xffffffffffff7d0d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setrlimit(0x6, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c", 0xc7}], 0x3}], 0x1, 0x40800) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x4000000000002a0, 0x40004000) 6m16.564702257s ago: executing program 8 (id=1750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000780), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r6, 0x25, 0x2}, 0x14) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x14) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000040)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, @tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}, 0x2}}, @l2={0x1f, 0x5, @none, 0x2, 0x1}, 0x8e67, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='team0\x00', 0x9, 0x1, 0x4}) 6m16.110843307s ago: executing program 3 (id=1751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYBLOB], 0x4c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000b1c0)="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", 0x2000, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'ovf\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3, 0xcd}}, 0x44) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r8, r9, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r5) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20) 6m15.063682295s ago: executing program 3 (id=1752): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1000006) socket(0x11, 0xa, 0x5) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/235) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0xfffd, 0xa00, 0x0, 0x2}]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48090) 6m14.813767059s ago: executing program 5 (id=1753): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1000006) socket(0x11, 0xa, 0x5) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/235) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0xfffd, 0xa00, 0x0, 0x2}]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48090) 5m59.711666097s ago: executing program 37 (id=1741): ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000280)={0x2, 0x0, 0x3, 0x7, 0x2, [0x3, 0x200, 0x85, 0xa8]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x200000020000009, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100000, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) close_range(r3, 0xffffffffffffffff, 0x0) 5m59.473525729s ago: executing program 38 (id=1750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000780), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r6, 0x25, 0x2}, 0x14) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x14) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000040)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, @tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}, 0x2}}, @l2={0x1f, 0x5, @none, 0x2, 0x1}, 0x8e67, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='team0\x00', 0x9, 0x1, 0x4}) 5m59.344235205s ago: executing program 39 (id=1747): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000000004000000010000800000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000380)=""/196) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) accept(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x27) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="aeeb01005ffc00000000000000"], 0x0, 0xfc5f}, 0x28) 5m59.133746449s ago: executing program 40 (id=1752): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1000006) socket(0x11, 0xa, 0x5) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/235) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0xfffd, 0xa00, 0x0, 0x2}]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48090) 5m58.994994682s ago: executing program 41 (id=1753): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1000006) socket(0x11, 0xa, 0x5) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/235) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0xfffd, 0xa00, 0x0, 0x2}]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48090) 2m16.902431838s ago: executing program 4 (id=2813): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x38}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_unlink(0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x57, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58}, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) 2m15.70301269s ago: executing program 4 (id=2817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 2m13.412444353s ago: executing program 4 (id=2824): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f00010000000009040000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x7, 0x3, {r0}, {r4}, 0x10, 0x2}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioprio_set$uid(0x3, 0x0, 0x0) gettid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e7cc6120c4108a818f7d0102030109021b00010000c005090423000103"], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') dup3(r6, r7, 0x0) 2m7.107191197s ago: executing program 4 (id=2838): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="58000000140019", 0x7}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r4 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt(r4, 0x8, 0x3, &(0x7f0000000300)="c9325e40e67017229facd2b9", 0xc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001000)={'vlan0\x00', &(0x7f0000000fc0)=@ethtool_test={0x1a, 0x7, 0x5, 0x1, [0x2]}}) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{0x0}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb, 0x3}) 2m6.507675308s ago: executing program 0 (id=2840): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, 0x0) 2m5.890546039s ago: executing program 4 (id=2841): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="20160e0000004ab9cc84"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m5.66319098s ago: executing program 0 (id=2842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 2m5.500960248s ago: executing program 0 (id=2843): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x38}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_unlink(0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x57, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58}, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)=0x1) 2m5.372229224s ago: executing program 0 (id=2844): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0xe, 0x6, "1ec8646db9d3"}, 0x0, 0x0, 0x0, 0x0}) 2m5.10451042s ago: executing program 0 (id=2846): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1, &(0x7f0000000300)={0x0, &(0x7f00000001c0)}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0xc, @val=@netfilter={0x5, 0x1, 0x7ff, 0x1}}, 0x20) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0xfffffff9) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[], 0x90}}, 0x4004800) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000b2b2d9c7a09d831c09faa69562a30a32e4e07b42463c1e1a556702518328df68ef40be28590aae47016ec3fb193fa7db05f04e9bb6cb1c80cb09c0ddc39a73a01d3a922d36904575819f93e9f1e441bdc624f276a4cfbfcb2a881cf86100afb6cc13083df7bdc6e6192fe748fe8bee8b7c", @ANYRES16=r4, @ANYBLOB="01002dbd7000ff"], 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x5, 0x0, 0xffffffffffffffee, 0x1ff, 'syz0\x00', 0x0}) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r2, 0xb) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2m4.949153076s ago: executing program 0 (id=2847): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r0], 0x9) 2m2.48456027s ago: executing program 4 (id=2852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 1m46.234966983s ago: executing program 42 (id=2852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 18.711223362s ago: executing program 2 (id=2988): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 15.528256421s ago: executing program 2 (id=2994): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000001c0)={0xb, {{0xa, 0x4e20, 0x5, @mcast2, 0x81}}, {{0xa, 0x4e20, 0xfffffffb, @empty, 0x8000}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newqdisc={0x28, 0x14, 0xf0b, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, {0xc}, {0x8, 0xfff2}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x200000) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000002c0)={0x1, 0xff, 0xa, 0x0}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x3]}}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x5}]}}]}, 0x44}}, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) 10.467566027s ago: executing program 6 (id=3001): openat$comedi(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x10, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 9.889756094s ago: executing program 6 (id=3003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.344403778s ago: executing program 6 (id=3005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r4 = socket$netlink(0x10, 0x3, 0xb) r5 = memfd_secret(0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000340)={r6, 0x2, 0x3, 0x1, &(0x7f0000000300)=[{0x5, 0x4, 0x3, 0x2}]}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$key(0xf, 0x3, 0x2) 6.829096603s ago: executing program 1 (id=3006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000003c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x0, 0x7e3875a1, 0x40, 0x2, 0x1, 0x5}}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r7 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r8, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r7}, 0x20) r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x8000, 0xfffffffc, 'syz0\x00', 0x4}, 0x2, 0x10000000, 0x5, r2, 0x0, 0x1ff, 'syz0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000002340)=0x0) io_cancel(r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0xffc, r10, &(0x7f00000000c0)="60aef82168907fb9c1f06f463801c6e6262ef76095781faaa0047f5620e3940fb4b38f60ace4f9105c941977b15aa113f4398e2b1081202ef1649f2e29c805e25a", 0x41, 0x6, 0x0, 0x1, r10}, &(0x7f00000001c0)) 5.77057189s ago: executing program 2 (id=3007): r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) 5.634026496s ago: executing program 2 (id=3008): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f00000000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x7, 0x3, {r0}, {r4}, 0x10, 0x2}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) gettid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e7cc6120c4108a818f7d0102030109021b00010000c005090423000103"], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') dup3(r6, r7, 0x0) 3.703195784s ago: executing program 6 (id=3009): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x0, 0x60, 0xbf, 0x7}, {0x7, 0x7f, 0xd3, 0x4}, {0x1, 0x9, 0x10, 0x8}, {0xfffb, 0xf9, 0x80, 0xfffffffb}, {0x6, 0xc, 0x6}, {0xa, 0x0, 0x4, 0x8}]}) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) ioprio_set$pid(0x1, 0x0, 0x2000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) chdir(&(0x7f0000000440)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rmdir(&(0x7f0000000240)='./file1\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 3.645787848s ago: executing program 1 (id=3010): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x48) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xa00}]) 3.011853923s ago: executing program 6 (id=3011): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x13, 0x2, 0x125, 0x0}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 2.952382217s ago: executing program 1 (id=3012): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x0, 0x60, 0xbf, 0x7}, {0x7, 0x7f, 0xd3, 0x4}, {0x1, 0x9, 0x10, 0x8}, {0xfffb, 0xf9, 0x80, 0xfffffffb}, {0x6, 0xc, 0x6}, {0xa, 0x0, 0x4, 0x8}]}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) chdir(&(0x7f0000000440)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) rmdir(&(0x7f0000000240)='./file1\x00') 2.036947593s ago: executing program 2 (id=3013): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x2, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1000, 0xd7b4591d6f0333b9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2e}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040015}, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ptrace$peekuser(0x3, 0x0, 0x5) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80101) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000300)={0x1}) syz_emit_ethernet(0x3a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) poll(&(0x7f0000002d40)=[{r6, 0x4080}], 0x1, 0x5) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) unshare(0x2040c00) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) mkdir(0x0, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x408, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=binD=relative:7-5:', @ANYRESOCT]) 254.544589ms ago: executing program 1 (id=3014): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000003c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x10000, 0x0, r1, 0x319b5a, 0x8, 0x8, 0x7}) 203.657015ms ago: executing program 6 (id=3015): add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x4, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x8, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8026, 0x82, 0x6, 0x1a449, 0x9, 0xffff69b7, 0x9, 0xcaa7, 0x0, 0x20001e5c, 0x8000000b, 0xffc00004, 0x1, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ad"}, 0xaa) close(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000440)=@svm={0x0, 0x1, 0x1080, {0xeeef0000}, {"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"}}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@empty, @in=@initdev}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) 148.607681ms ago: executing program 2 (id=3016): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62000000) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 85.510498ms ago: executing program 1 (id=3017): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x5}) 0s ago: executing program 1 (id=3018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) r4 = socket$netlink(0x10, 0x3, 0xb) r5 = memfd_secret(0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000340)={r6, 0x2, 0x3, 0x1, &(0x7f0000000300)=[{0x5, 0x4, 0x3, 0x2}]}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$key(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): 2.669123][ T5086] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.985279][ T5086] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.667728][ T5954] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1383.825938][ T5086] bridge_slave_1: left allmulticast mode [ 1383.825965][ T5086] bridge_slave_1: left promiscuous mode [ 1383.826213][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.847423][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 1383.858260][ T5954] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1383.858289][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.889685][ T5954] usb 2-1: config 0 descriptor?? [ 1383.958632][ T5086] bridge_slave_0: left allmulticast mode [ 1383.958661][ T5086] bridge_slave_0: left promiscuous mode [ 1383.958894][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.027797][ T5846] usb 5-1: USB disconnect, device number 24 [ 1384.096866][ T5954] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1384.142591][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1384.143377][ T5954] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1384.143444][ T5954] usb 2-1: media controller created [ 1384.202387][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1384.306489][ T5954] DVB: Unable to find symbol dib7000p_attach() [ 1384.306506][ T5954] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1384.868702][ T5954] rc_core: IR keymap rc-dib0700-rc5 not found [ 1384.868723][ T5954] Registered IR keymap rc-empty [ 1384.869012][ T5954] dvb-usb: could not initialize remote control. [ 1384.869022][ T5954] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1384.971347][ T5954] usb 2-1: USB disconnect, device number 22 [ 1385.128412][ T5954] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1387.227742][ T9856] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1387.399227][ T9856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1387.399272][ T9856] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1387.399297][ T9856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.451322][ T9856] usb 5-1: config 0 descriptor?? [ 1387.482654][ T9856] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1388.107853][ T9856] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1388.275130][ T9856] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1388.275162][ T9856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.300072][ T9856] usb 2-1: config 0 descriptor?? [ 1388.305952][ T9856] cp210x 2-1:0.0: cp210x converter detected [ 1388.650729][ T5086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.713643][ T9856] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1388.738486][ T9856] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1388.738517][ T5086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.781045][ T5086] bond0 (unregistering): Released all slaves [ 1388.942680][ T5911] usb 2-1: USB disconnect, device number 23 [ 1388.954699][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1389.077964][ T5911] cp210x 2-1:0.0: device disconnected [ 1389.405497][ T5846] usb 5-1: USB disconnect, device number 25 [ 1389.507339][ T5086] hsr_slave_0: left promiscuous mode [ 1389.565920][ T5086] hsr_slave_1: left promiscuous mode [ 1389.566565][ T5086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.566583][ T5086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.598608][ T5086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.598636][ T5086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1390.521943][ T5086] veth1_macvtap: left promiscuous mode [ 1390.522047][ T5086] veth0_macvtap: left promiscuous mode [ 1390.524916][ T5086] veth1_vlan: left promiscuous mode [ 1390.525103][ T5086] veth0_vlan: left promiscuous mode [ 1391.048458][ T5846] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1391.197777][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 1391.231401][ T5846] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1391.231433][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.244985][ T5846] usb 2-1: config 0 descriptor?? [ 1391.461953][ T5846] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1391.475207][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1391.492507][ T5846] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1391.492568][ T5846] usb 2-1: media controller created [ 1391.522071][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1391.733134][ T5846] DVB: Unable to find symbol dib7000p_attach() [ 1391.733145][ T5846] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1391.841259][ T5846] rc_core: IR keymap rc-dib0700-rc5 not found [ 1391.841273][ T5846] Registered IR keymap rc-empty [ 1391.841446][ T5846] dvb-usb: could not initialize remote control. [ 1391.841761][ T5846] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1392.028172][ T5846] usb 2-1: USB disconnect, device number 24 [ 1392.115079][ T5846] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1394.179365][ T5086] team0 (unregistering): Port device team_slave_1 removed [ 1394.948532][ T5086] team0 (unregistering): Port device team_slave_0 removed [ 1402.572834][T13684] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1403.700209][T13684] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1403.914772][T13684] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1404.856744][T13684] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1405.179224][T10007] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1405.317501][T13690] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1405.332796][T10007] usb 5-1: Using ep0 maxpacket: 32 [ 1405.335639][T10007] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1405.335665][T10007] usb 5-1: config 0 has no interface number 0 [ 1405.335718][T10007] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1405.340676][T10007] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1405.340711][T10007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.340731][T10007] usb 5-1: Product: syz [ 1405.340745][T10007] usb 5-1: Manufacturer: syz [ 1405.340759][T10007] usb 5-1: SerialNumber: syz [ 1405.346179][T10007] usb 5-1: config 0 descriptor?? [ 1405.350167][T14801] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1405.508497][T13690] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1405.555346][T14801] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1405.569521][T13690] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1405.673368][T13690] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1405.877723][T10007] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1405.877888][T10007] asix 5-1:0.188: probe with driver asix failed with error -61 [ 1406.456192][T13684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.521842][T13690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.533755][T13684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.583216][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.583457][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.587337][T13690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.618696][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.618966][ T5086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.633769][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.633896][ T5086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.645611][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.645745][ T5086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.670398][ T5954] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1406.846627][ T5954] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1406.846656][ T5954] usb 2-1: config 0 has no interface number 0 [ 1406.846694][ T5954] usb 2-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1406.846706][ T5954] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1406.884585][ T5954] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1406.884614][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.884635][ T5954] usb 2-1: Product: syz [ 1406.884649][ T5954] usb 2-1: Manufacturer: syz [ 1406.884664][ T5954] usb 2-1: SerialNumber: syz [ 1406.894608][ T5954] usb 2-1: config 0 descriptor?? [ 1406.915152][ T5954] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 1407.401662][ T5846] usb 2-1: USB disconnect, device number 25 [ 1407.517050][T13684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.584560][T13690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.652047][T13684] veth0_vlan: entered promiscuous mode [ 1408.381064][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1408.402665][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1408.403925][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1408.469068][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1408.469840][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1408.710663][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1408.726473][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1408.736679][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1408.755609][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1408.756284][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1408.936233][ T5846] usb 5-1: USB disconnect, device number 26 [ 1409.921032][T12005] Bluetooth: hci2: command 0x0406 tx timeout [ 1410.784105][T12005] Bluetooth: hci4: command tx timeout [ 1410.920136][T12005] Bluetooth: hci5: command tx timeout [ 1412.814419][ T5853] Bluetooth: hci4: command tx timeout [ 1412.977811][T13309] Bluetooth: hci5: command tx timeout [ 1415.145650][T13309] Bluetooth: hci7: command 0x0406 tx timeout [ 1415.145686][T13309] Bluetooth: hci3: command 0x0406 tx timeout [ 1415.145708][T13309] Bluetooth: hci4: command tx timeout [ 1415.145727][T13309] Bluetooth: hci5: command tx timeout [ 1415.527761][T10007] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1415.688093][ T5846] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1415.713541][T10007] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1415.713578][T10007] usb 2-1: can't read configurations, error -61 [ 1415.856010][ T5846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.856065][ T5846] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1415.856106][ T5846] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1415.856129][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.867701][T10007] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1415.919016][ T5846] usb 5-1: config 0 descriptor?? [ 1415.926687][ T5846] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1416.049148][T10007] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1416.049187][T10007] usb 2-1: can't read configurations, error -61 [ 1416.049560][T10007] usb usb2-port1: attempt power cycle [ 1416.388030][T10007] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1416.413872][T10007] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1416.413908][T10007] usb 2-1: can't read configurations, error -61 [ 1416.537754][T10007] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1416.561197][T10007] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1416.561235][T10007] usb 2-1: can't read configurations, error -61 [ 1416.561623][T10007] usb usb2-port1: unable to enumerate USB device [ 1416.977986][T14917] chnl_net:caif_netlink_parms(): no params data found [ 1417.208497][ T5853] Bluetooth: hci5: command tx timeout [ 1417.208542][ T5853] Bluetooth: hci4: command tx timeout [ 1417.341842][T14927] chnl_net:caif_netlink_parms(): no params data found [ 1417.704628][T14917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.704794][T14917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.704950][T14917] bridge_slave_0: entered allmulticast mode [ 1417.707059][T14917] bridge_slave_0: entered promiscuous mode [ 1417.766471][T14917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.766593][T14917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.766813][T14917] bridge_slave_1: entered allmulticast mode [ 1417.787477][T14917] bridge_slave_1: entered promiscuous mode [ 1418.010834][T14927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.011001][T14927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.011178][T14927] bridge_slave_0: entered allmulticast mode [ 1418.013624][T14927] bridge_slave_0: entered promiscuous mode [ 1418.021239][T14917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.076064][T14917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.076270][T14927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.076376][T14927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.076556][T14927] bridge_slave_1: entered allmulticast mode [ 1418.079203][T14927] bridge_slave_1: entered promiscuous mode [ 1418.191910][ T5938] bridge_slave_1: left allmulticast mode [ 1418.191939][ T5938] bridge_slave_1: left promiscuous mode [ 1418.192163][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.304954][ T5938] bridge_slave_0: left allmulticast mode [ 1418.304984][ T5938] bridge_slave_0: left promiscuous mode [ 1418.305238][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.439605][ T6062] usb 5-1: USB disconnect, device number 27 [ 1420.688200][ T5955] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1420.824176][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 1420.824355][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 1420.825250][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 1420.825431][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 1420.852778][ T5955] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1420.852804][ T5955] usb 2-1: config 0 has no interface number 0 [ 1420.852833][ T5955] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1420.854887][ T5955] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 1420.854913][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.854924][ T5955] usb 2-1: Product: syz [ 1420.854931][ T5955] usb 2-1: Manufacturer: syz [ 1420.854939][ T5955] usb 2-1: SerialNumber: syz [ 1420.865090][ T5955] usb 2-1: config 0 descriptor?? [ 1421.041531][T15217] ceph: No mds server is up or the cluster is laggy [ 1421.090995][ T6062] libceph: connect (1)[c::]:6789 error -101 [ 1421.112789][ T6062] libceph: mon0 (1)[c::]:6789 connect error [ 1421.642460][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 1421.642595][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 1421.905625][ T5955] msi2500 2-1:0.1: Registered as swradio24 [ 1421.905648][ T5955] msi2500 2-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 1421.918812][ T5955] usb 2-1: USB disconnect, device number 30 [ 1423.718329][ T6062] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1424.250085][ T6062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.250120][ T6062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1424.250158][ T6062] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1424.250181][ T6062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.300225][ T6062] usb 2-1: config 0 descriptor?? [ 1424.487769][ T5911] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1424.661414][ T5911] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1424.661452][ T5911] usb 5-1: can't read configurations, error -61 [ 1424.709512][ T6062] cp2112 0003:10C4:EA90.002C: item fetching failed at offset 5/7 [ 1424.712764][ T6062] cp2112 0003:10C4:EA90.002C: parse failed [ 1424.712895][ T6062] cp2112 0003:10C4:EA90.002C: probe with driver cp2112 failed with error -22 [ 1424.768429][ T5938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.797681][ T5911] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1424.854701][ T5938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.891580][ T5938] bond0 (unregistering): Released all slaves [ 1424.950563][ T5911] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1424.950601][ T5911] usb 5-1: can't read configurations, error -61 [ 1424.950988][ T5911] usb usb5-port1: attempt power cycle [ 1425.095817][T14927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.112533][T14917] team0: Port device team_slave_0 added [ 1425.125925][T14927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.139086][T14917] team0: Port device team_slave_1 added [ 1425.297674][ T5911] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1425.320796][ T5911] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1425.320834][ T5911] usb 5-1: can't read configurations, error -61 [ 1425.447664][ T5911] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1425.470677][ T5911] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1425.470715][ T5911] usb 5-1: can't read configurations, error -61 [ 1425.471112][ T5911] usb usb5-port1: unable to enumerate USB device [ 1425.510267][ T5938] hsr_slave_0: left promiscuous mode [ 1425.554390][ T5938] hsr_slave_1: left promiscuous mode [ 1425.555356][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.599740][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.707059][ T5938] veth0_vlan: left promiscuous mode [ 1427.022949][ T5955] usb 2-1: USB disconnect, device number 31 [ 1428.303717][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.303788][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.796048][T15422] netlink: 'syz.4.2357': attribute type 1 has an invalid length. [ 1428.796430][T15422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2357'. [ 1429.137768][ T9856] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1429.340639][ T9856] usb 5-1: Using ep0 maxpacket: 8 [ 1429.344106][ T9856] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1429.344122][ T9856] usb 5-1: config 179 has no interface number 0 [ 1429.344156][ T9856] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1429.344171][ T9856] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1429.344186][ T9856] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1429.344200][ T9856] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1429.344213][ T9856] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1429.344227][ T9856] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1429.344245][ T9856] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1429.344257][ T9856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.488241][ T9856] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input48 [ 1429.803175][ T5911] usb 5-1: USB disconnect, device number 32 [ 1430.163105][ T5938] team0 (unregistering): Port device team_slave_1 removed [ 1432.227143][ T5938] team0 (unregistering): Port device team_slave_0 removed [ 1432.332109][T15471] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1432.928107][ T5955] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1433.103906][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 1433.105656][ T5955] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1433.105681][ T5955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.105700][ T5955] usb 5-1: config 0 has no interface number 0 [ 1433.105744][ T5955] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1433.108276][ T5955] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1433.108292][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.108302][ T5955] usb 5-1: Product: syz [ 1433.108310][ T5955] usb 5-1: Manufacturer: syz [ 1433.108317][ T5955] usb 5-1: SerialNumber: syz [ 1433.134776][ T5955] usb 5-1: config 0 descriptor?? [ 1433.213254][ T5955] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 1433.213303][ T5955] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 1433.747998][ T5955] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1433.748836][ T5955] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 1434.818536][ T5846] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1434.972680][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.972709][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1434.972731][ T5846] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1434.972747][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.984182][ T5846] usb 2-1: config 0 descriptor?? [ 1435.106387][ T5955] usb 5-1: USB disconnect, device number 33 [ 1436.131947][ T5846] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 1436.168447][ T5846] cp2112 0003:10C4:EA90.002D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1436.284655][ T5846] cp2112 0003:10C4:EA90.002D: error requesting version [ 1436.287136][ T5846] cp2112 0003:10C4:EA90.002D: probe with driver cp2112 failed with error -5 [ 1436.869678][T14927] team0: Port device team_slave_0 added [ 1436.870502][T14917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1436.870515][T14917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1436.870542][T14917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1436.986920][T14917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1436.986937][T14917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1436.986964][T14917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1437.049961][T14927] team0: Port device team_slave_1 added [ 1438.357226][T14927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1438.357243][T14927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1438.357267][T14927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.371734][T14927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.371750][T14927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1438.371778][T14927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1439.629738][ T5846] usb 2-1: USB disconnect, device number 32 [ 1440.965926][T15548] vlan0: entered promiscuous mode [ 1441.065603][T15548] team0: Port device vlan0 added [ 1441.490194][T14917] hsr_slave_0: entered promiscuous mode [ 1441.492395][T14917] hsr_slave_1: entered promiscuous mode [ 1442.609199][ T36] audit: type=1326 audit(2000000796.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15545 comm="syz.1.2403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa85461c629 code=0x0 [ 1442.673554][T14927] hsr_slave_0: entered promiscuous mode [ 1442.674323][T14927] hsr_slave_1: entered promiscuous mode [ 1442.674842][T14927] debugfs: 'hsr0' already exists in 'hsr' [ 1442.674857][T14927] Cannot create hsr debugfs directory [ 1444.766772][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 1444.766969][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 1444.792659][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 1444.792850][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 1445.248539][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 1445.248757][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 1445.489935][T15595] ceph: No mds server is up or the cluster is laggy [ 1447.473954][T15621] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 1447.473985][T15621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2423'. [ 1447.708026][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1453.763221][ T5938] bridge_slave_1: left allmulticast mode [ 1453.763250][ T5938] bridge_slave_1: left promiscuous mode [ 1453.763493][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.862146][ T5938] bridge_slave_0: left allmulticast mode [ 1453.862172][ T5938] bridge_slave_0: left promiscuous mode [ 1453.862401][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.248058][T10006] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1458.252346][ T5938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.308187][ T5938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.349879][ T5938] bond0 (unregistering): Released all slaves [ 1458.404095][T10006] usb 2-1: Using ep0 maxpacket: 8 [ 1458.406379][T10006] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1458.407530][T10006] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1458.407705][T10006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1458.407734][T10006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1458.407755][T10006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1458.407781][T10006] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1458.407804][T10006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1458.407824][T10006] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1458.413777][T10006] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1458.413803][T10006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.413822][T10006] usb 2-1: Product: syz [ 1458.413835][T10006] usb 2-1: Manufacturer: syz [ 1458.413849][T10006] usb 2-1: SerialNumber: syz [ 1458.424393][T10006] usb 2-1: config 0 descriptor?? [ 1458.427695][T15770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1458.440106][T10006] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.548039][T10006] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1458.571367][T15757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1458.697284][T14759] udevd[14759]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1459.058153][T15809] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1459.067803][T15809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.068326][T15809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.537894][T10244] usb 2-1: USB disconnect, device number 34 [ 1460.305848][ T5938] hsr_slave_0: left promiscuous mode [ 1460.372692][ T5938] hsr_slave_1: left promiscuous mode [ 1460.373644][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.445489][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.457767][ T5954] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1460.623408][ T5954] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1460.623437][ T5954] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1460.623456][ T5954] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1460.623505][ T5954] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1460.623532][ T5954] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1460.625266][ T5954] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1460.625292][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1460.625312][ T5954] usb 2-1: Product: syz [ 1460.625326][ T5954] usb 2-1: Manufacturer: syz [ 1460.739986][ T5954] cdc_wdm 2-1:1.0: skipping garbage [ 1460.740006][ T5954] cdc_wdm 2-1:1.0: skipping garbage [ 1460.762759][ T5954] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1460.762779][ T5954] cdc_wdm 2-1:1.0: Unknown control protocol [ 1461.017687][ T5954] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1461.189127][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 1461.191935][ T5954] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1461.207683][ T5954] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1461.207736][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1461.207763][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1461.207785][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1461.207812][ T5954] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1461.207834][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1461.207856][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1461.230018][ T5954] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1461.230046][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.230065][ T5954] usb 5-1: Product: syz [ 1461.230079][ T5954] usb 5-1: Manufacturer: syz [ 1461.230092][ T5954] usb 5-1: SerialNumber: syz [ 1461.235079][ T5954] usb 5-1: config 0 descriptor?? [ 1461.238183][T15858] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1461.243733][ T5954] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1461.402330][ T5954] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1461.676674][T14759] udevd[14759]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1461.715046][T15895] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1461.724553][T15895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.725078][T15895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.148071][ T9585] usb 5-1: USB disconnect, device number 34 [ 1462.609148][ T5938] team0 (unregistering): Port device team_slave_1 removed [ 1462.981075][ T5938] team0 (unregistering): Port device team_slave_0 removed [ 1463.053009][ T9585] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1463.190472][T10006] usb 2-1: USB disconnect, device number 35 [ 1463.205944][ T9585] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.205984][ T9585] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.206022][ T9585] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1463.206046][ T9585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.285462][ T9585] usb 5-1: config 0 descriptor?? [ 1464.827913][ T9585] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 1464.833025][ T9585] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1465.027066][ T9585] cp2112 0003:10C4:EA90.002E: Part Number: 0x82 Device Version: 0xFE [ 1465.245566][ T9585] cp2112 0003:10C4:EA90.002E: error requesting SMBus config [ 1465.248426][ T9585] cp2112 0003:10C4:EA90.002E: probe with driver cp2112 failed with error -32 [ 1465.987756][T10006] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1466.160397][T10006] usb 2-1: Using ep0 maxpacket: 8 [ 1466.185935][T10006] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1466.193908][T10006] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1466.193958][T10006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1466.193984][T10006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1466.194005][T10006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1466.194029][T10006] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1466.194051][T10006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1466.194072][T10006] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1466.198925][T10006] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1466.198951][T10006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.198970][T10006] usb 2-1: Product: syz [ 1466.198984][T10006] usb 2-1: Manufacturer: syz [ 1466.198998][T10006] usb 2-1: SerialNumber: syz [ 1466.211174][T10006] usb 2-1: config 0 descriptor?? [ 1466.212308][T15987] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1466.325163][T10006] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1466.332351][T10244] usb 5-1: USB disconnect, device number 35 [ 1466.638798][T15987] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1466.651091][T15987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.651568][T15987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.724432][T10006] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1466.751327][T10006] usb 2-1: USB disconnect, device number 36 [ 1466.827672][T10244] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1466.832865][T14759] udevd[14759]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1466.985229][T10244] usb 5-1: Using ep0 maxpacket: 32 [ 1466.987177][T10244] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1466.987204][T10244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.997529][T10244] usb 5-1: config 0 descriptor?? [ 1467.212679][T10244] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1467.314124][T10244] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1467.314907][T10244] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1467.314976][T10244] usb 5-1: media controller created [ 1467.334507][T10244] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1467.508870][T10244] DVB: Unable to find symbol dib7000p_attach() [ 1467.508885][T10244] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1467.608330][T10244] rc_core: IR keymap rc-dib0700-rc5 not found [ 1467.608351][T10244] Registered IR keymap rc-empty [ 1467.608643][T10244] dvb-usb: could not initialize remote control. [ 1467.608654][T10244] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1467.711624][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2597'. [ 1467.749298][T10244] usb 5-1: USB disconnect, device number 36 [ 1467.860555][T10244] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1468.329289][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1468.332778][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1468.334089][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1468.335425][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1468.336211][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1470.413877][ T5853] Bluetooth: hci0: command tx timeout [ 1471.852311][T12005] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1471.870450][T12005] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1471.871829][T12005] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1471.873027][T12005] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1471.874120][T12005] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1472.367640][T10860] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1472.387682][ T9856] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1472.497650][T12005] Bluetooth: hci0: command tx timeout [ 1472.544006][ T9856] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1472.544035][ T9856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.552914][T10860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.552945][T10860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.552982][T10860] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1472.553005][T10860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.561465][ T9856] usb 5-1: config 0 descriptor?? [ 1472.572392][T10860] usb 2-1: config 0 descriptor?? [ 1472.636213][ T9856] cp210x 5-1:0.0: cp210x converter detected [ 1472.718931][T16066] chnl_net:caif_netlink_parms(): no params data found [ 1473.012744][T10860] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0 [ 1473.028030][ T9856] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1473.038159][ T9856] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 1473.038210][ T9856] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 1473.044556][T10860] cp2112 0003:10C4:EA90.002F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1473.049687][ T9856] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1473.197175][T10860] cp2112 0003:10C4:EA90.002F: Part Number: 0x82 Device Version: 0xFE [ 1473.248775][T10007] usb 5-1: USB disconnect, device number 37 [ 1473.397721][T10860] cp2112 0003:10C4:EA90.002F: error requesting SMBus config [ 1473.410643][T10007] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1473.415345][T10860] cp2112 0003:10C4:EA90.002F: probe with driver cp2112 failed with error -32 [ 1473.417035][T10007] cp210x 5-1:0.0: device disconnected [ 1475.227629][T12005] Bluetooth: hci1: command tx timeout [ 1475.227629][ T5115] Bluetooth: hci0: command tx timeout [ 1475.244186][ T9585] usb 2-1: USB disconnect, device number 37 [ 1477.291316][T12005] Bluetooth: hci1: command tx timeout [ 1477.657841][T12005] Bluetooth: hci0: command tx timeout [ 1478.048128][T16184] netlink: 'syz.1.2632': attribute type 1 has an invalid length. [ 1478.048276][T16184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2632'. [ 1478.442193][T16066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.449270][T16066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.449525][T16066] bridge_slave_0: entered allmulticast mode [ 1478.452094][T16066] bridge_slave_0: entered promiscuous mode [ 1478.500939][T16066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.501050][T16066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.501261][T16066] bridge_slave_1: entered allmulticast mode [ 1478.510116][T16066] bridge_slave_1: entered promiscuous mode [ 1478.627663][ T9585] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1478.788257][ T9585] usb 2-1: Using ep0 maxpacket: 8 [ 1478.791152][ T9585] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1478.791179][ T9585] usb 2-1: config 179 has no interface number 0 [ 1478.791230][ T9585] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1478.791258][ T9585] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1478.791286][ T9585] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1478.791310][ T9585] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1478.791332][ T9585] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1478.791358][ T9585] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1478.791391][ T9585] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1478.791413][ T9585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.931423][ T9585] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input50 [ 1479.023397][T16066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.080725][T16066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.370128][T12005] Bluetooth: hci1: command tx timeout [ 1479.460143][ T9585] usb 2-1: USB disconnect, device number 38 [ 1479.656808][T16066] team0: Port device team_slave_0 added [ 1479.710220][T16066] team0: Port device team_slave_1 added [ 1479.717962][T16088] chnl_net:caif_netlink_parms(): no params data found [ 1480.448454][T16066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.448490][T16066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.448515][T16066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.578278][T16066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.578289][T16066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.578304][T16066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.005293][T12005] Bluetooth: hci1: command tx timeout [ 1482.309300][T16088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.309426][T16088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.309605][T16088] bridge_slave_0: entered allmulticast mode [ 1482.312051][T16088] bridge_slave_0: entered promiscuous mode [ 1482.337120][T16088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.337233][T16088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.337395][T16088] bridge_slave_1: entered allmulticast mode [ 1482.340086][T16088] bridge_slave_1: entered promiscuous mode [ 1483.372578][T16066] hsr_slave_0: entered promiscuous mode [ 1483.373863][T16066] hsr_slave_1: entered promiscuous mode [ 1483.374827][T16066] debugfs: 'hsr0' already exists in 'hsr' [ 1483.374851][T16066] Cannot create hsr debugfs directory [ 1485.224221][T16088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.401864][T16088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1486.174441][T16088] team0: Port device team_slave_0 added [ 1486.221314][T16088] team0: Port device team_slave_1 added [ 1486.414775][T16278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1486.692559][T16088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.692571][T16088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.692586][T16088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1487.408786][T16088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1487.408804][T16088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1487.408829][T16088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.985269][T16088] hsr_slave_0: entered promiscuous mode [ 1489.409060][T16088] hsr_slave_1: entered promiscuous mode [ 1489.411093][T16088] debugfs: 'hsr0' already exists in 'hsr' [ 1489.411117][T16088] Cannot create hsr debugfs directory [ 1489.669078][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.669176][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.928842][T10007] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1489.969517][T10860] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1490.095076][T10007] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1490.095103][T10007] usb 2-1: config 0 has no interface number 0 [ 1490.095134][T10007] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1490.101355][T10007] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 1490.101384][T10007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.101404][T10007] usb 2-1: Product: syz [ 1490.101418][T10007] usb 2-1: Manufacturer: syz [ 1490.101432][T10007] usb 2-1: SerialNumber: syz [ 1490.163899][T10007] usb 2-1: config 0 descriptor?? [ 1490.167766][T10860] usb 5-1: Using ep0 maxpacket: 32 [ 1490.186617][T10860] usb 5-1: config 0 has no interfaces? [ 1490.203010][T10860] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1490.203039][T10860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.203060][T10860] usb 5-1: Product: syz [ 1490.203075][T10860] usb 5-1: Manufacturer: syz [ 1490.203090][T10860] usb 5-1: SerialNumber: syz [ 1490.263506][T10860] usb 5-1: config 0 descriptor?? [ 1490.328719][ T5938] bridge_slave_1: left allmulticast mode [ 1490.328747][ T5938] bridge_slave_1: left promiscuous mode [ 1490.328957][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.409404][ T5938] bridge_slave_0: left allmulticast mode [ 1490.409430][ T5938] bridge_slave_0: left promiscuous mode [ 1490.413672][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.505948][T10007] msi2500 2-1:0.1: Registered as swradio24 [ 1490.505970][T10007] msi2500 2-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 1490.537939][T10007] usb 2-1: USB disconnect, device number 39 [ 1490.557107][ T5938] bridge_slave_1: left allmulticast mode [ 1490.557133][ T5938] bridge_slave_1: left promiscuous mode [ 1490.557367][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.639086][ T5938] bridge_slave_0: left allmulticast mode [ 1490.639112][ T5938] bridge_slave_0: left promiscuous mode [ 1490.639335][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.273031][ T5938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.388351][ T5938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.854224][ T5938] bond0 (unregistering): Released all slaves [ 1492.332318][ T5938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1492.440977][ T5938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1492.532880][ T5938] bond0 (unregistering): Released all slaves [ 1492.587698][ T9856] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1492.751769][ T9856] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1492.751804][ T9856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.769684][ T9856] usb 2-1: config 0 descriptor?? [ 1492.803334][T10860] usb 5-1: USB disconnect, device number 38 [ 1492.805741][ T9856] cp210x 2-1:0.0: cp210x converter detected [ 1493.225833][ T9856] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1493.232199][ T9856] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 1493.247082][ T9856] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1494.048628][T10244] usb 2-1: USB disconnect, device number 40 [ 1494.068014][T10244] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1494.074462][T10244] cp210x 2-1:0.0: device disconnected [ 1496.019170][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 1496.627920][ T5938] hsr_slave_0: left promiscuous mode [ 1496.671023][ T5938] hsr_slave_1: left promiscuous mode [ 1496.671969][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1496.908430][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1497.133743][T10244] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1497.277680][T10244] usb 5-1: Using ep0 maxpacket: 32 [ 1497.280068][T10244] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1497.280093][T10244] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.280113][T10244] usb 5-1: config 0 has no interface number 0 [ 1497.282719][T10244] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1497.282746][T10244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.282766][T10244] usb 5-1: Product: syz [ 1497.282781][T10244] usb 5-1: Manufacturer: syz [ 1497.282795][T10244] usb 5-1: SerialNumber: syz [ 1497.310358][T10244] usb 5-1: config 0 descriptor?? [ 1497.335255][T10244] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1497.362224][ T5938] hsr_slave_0: left promiscuous mode [ 1497.399125][ T5938] hsr_slave_1: left promiscuous mode [ 1497.400525][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.438509][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1497.522213][T10244] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 1497.522409][T10244] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 1497.738381][T10006] usb 5-1: USB disconnect, device number 39 [ 1499.794319][ T5938] team0 (unregistering): Port device team_slave_1 removed [ 1499.932865][ T5938] team0 (unregistering): Port device team_slave_0 removed [ 1500.437701][ T9585] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1500.617982][ T9585] usb 2-1: Using ep0 maxpacket: 32 [ 1500.621335][ T9585] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1500.621360][ T9585] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.621380][ T9585] usb 2-1: config 0 has no interface number 0 [ 1500.637157][ T9585] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1500.637185][ T9585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.637205][ T9585] usb 2-1: Product: syz [ 1500.637219][ T9585] usb 2-1: Manufacturer: syz [ 1500.637233][ T9585] usb 2-1: SerialNumber: syz [ 1500.647410][ T9585] usb 2-1: config 0 descriptor?? [ 1500.664107][ T9585] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1500.897967][ T9585] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 1500.898194][ T9585] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 1501.095996][ T9585] usb 2-1: USB disconnect, device number 41 [ 1501.200732][ T5938] team0 (unregistering): Port device team_slave_1 removed [ 1501.358384][ T5938] team0 (unregistering): Port device team_slave_0 removed [ 1503.737653][ T6062] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1503.888405][ T6062] usb 2-1: Using ep0 maxpacket: 32 [ 1503.891142][ T6062] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1503.891168][ T6062] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.891188][ T6062] usb 2-1: config 0 has no interface number 0 [ 1503.896777][ T6062] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1503.896805][ T6062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.896826][ T6062] usb 2-1: Product: syz [ 1503.896841][ T6062] usb 2-1: Manufacturer: syz [ 1503.896856][ T6062] usb 2-1: SerialNumber: syz [ 1503.994488][ T6062] usb 2-1: config 0 descriptor?? [ 1504.015345][ T6062] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1504.237795][ T6062] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 1504.238097][ T6062] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 1504.444346][ T6062] usb 2-1: USB disconnect, device number 42 [ 1505.387828][ T9585] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1505.547688][ T9585] usb 2-1: Using ep0 maxpacket: 8 [ 1505.556089][ T9585] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1505.557287][ T9585] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 1505.557313][ T9585] usb 2-1: config 4 has an invalid descriptor of length 244, skipping remainder of the config [ 1505.557334][ T9585] usb 2-1: config 4 has no interface number 0 [ 1505.560603][ T9585] usb 2-1: string descriptor 0 read error: -22 [ 1505.560735][ T9585] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1505.560758][ T9585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.658416][ T9585] uvcvideo 2-1:4.147: probe with driver uvcvideo failed with error -22 [ 1505.865798][ T5954] usb 2-1: USB disconnect, device number 43 [ 1507.267659][T10860] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1507.451856][T10860] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1507.451889][T10860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.472609][T10860] usb 2-1: config 0 descriptor?? [ 1507.518829][T10860] cp210x 2-1:0.0: cp210x converter detected [ 1508.270034][T10860] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1508.270061][T10860] cp210x 2-1:0.0: querying part number failed [ 1508.274173][T10860] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1508.877684][ T5954] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1509.042279][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.042335][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1509.042362][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1509.045166][ T5954] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1509.045195][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.045217][ T5954] usb 5-1: Product: syz [ 1509.045233][ T5954] usb 5-1: Manufacturer: syz [ 1509.045247][ T5954] usb 5-1: SerialNumber: syz [ 1509.051882][ T5954] usb 5-1: config 0 descriptor?? [ 1509.052821][T16763] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1509.055971][ T5954] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1509.243110][T16066] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1509.260583][T10860] usb 5-1: USB disconnect, device number 40 [ 1509.334291][T16066] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1509.415888][T16066] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1509.540280][T16066] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1509.721961][T16088] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1509.776336][T16088] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1509.824028][T16088] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1509.885974][T16088] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1509.965591][ T6062] usb 2-1: USB disconnect, device number 44 [ 1510.029027][ T6062] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1510.029753][ T6062] cp210x 2-1:0.0: device disconnected [ 1510.947687][ T5846] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1511.281517][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.281551][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.281588][ T5846] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1511.281612][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.347903][ T5846] usb 2-1: config 0 descriptor?? [ 1511.476809][T16088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.505359][T16066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.662194][T16066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.667033][T16088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.734424][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.734714][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.776714][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.777281][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.813755][ T5846] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 1511.843164][ T5846] cp2112 0003:10C4:EA90.0030: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1511.871454][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.871590][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.877157][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.877301][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.004141][ T5846] cp2112 0003:10C4:EA90.0030: Part Number: 0x82 Device Version: 0xFE [ 1512.629210][ T5846] cp2112 0003:10C4:EA90.0030: error reading lock byte: -71 [ 1512.686639][ T5846] usb 2-1: USB disconnect, device number 45 [ 1513.497050][T16066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.579916][T16066] veth0_vlan: entered promiscuous mode [ 1513.599050][T16066] veth1_vlan: entered promiscuous mode [ 1513.648942][T16066] veth0_macvtap: entered promiscuous mode [ 1513.654184][T16066] veth1_macvtap: entered promiscuous mode [ 1514.021701][T16872] vlan0: entered promiscuous mode [ 1514.032372][T16872] team0: Port device vlan0 added [ 1514.724113][T16088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1514.774679][T16066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.792003][T16066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1515.708891][ T6280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.709854][ T6280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.743734][ T6025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.780359][ T6025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.928155][T10006] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1516.090413][T10006] usb 5-1: Using ep0 maxpacket: 8 [ 1516.096305][T10006] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1516.110832][T10006] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.134677][T10006] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1516.134705][T10006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.134725][T10006] usb 5-1: Product: syz [ 1516.134747][T10006] usb 5-1: Manufacturer: syz [ 1516.134763][T10006] usb 5-1: SerialNumber: syz [ 1516.173566][T10006] usb 5-1: config 0 descriptor?? [ 1516.430971][ T6244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.430994][ T6244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.744321][T16917] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1516.803812][T16917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.804349][T16917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1517.972986][ T6244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.973006][ T6244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.100638][T16088] veth0_vlan: entered promiscuous mode [ 1518.178254][T16088] veth1_vlan: entered promiscuous mode [ 1519.570686][ T6062] usb 5-1: USB disconnect, device number 41 [ 1519.628848][T16088] veth0_macvtap: entered promiscuous mode [ 1519.674540][T16088] veth1_macvtap: entered promiscuous mode [ 1519.789563][T16088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1519.818679][T16088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1519.852068][ T6025] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.852846][ T6025] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.029772][ T6025] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.054776][ T6025] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.227711][ T5846] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1521.384909][ T6003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.384930][ T6003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.404590][ T5846] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1521.404620][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.442091][ T5846] usb 5-1: config 0 descriptor?? [ 1521.459420][ T5846] cp210x 5-1:0.0: cp210x converter detected [ 1521.665042][ T5846] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1521.665071][ T5846] cp210x 5-1:0.0: querying part number failed [ 1521.672697][ T5846] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1521.689981][ T6003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.689999][ T6003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.769360][ T36] audit: type=1326 audit(2000000875.390:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16956 comm="syz.1.2845" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa85461c629 code=0x0 [ 1523.268929][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1523.281199][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1523.409104][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1524.136267][T10860] usb 5-1: USB disconnect, device number 42 [ 1524.153381][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1524.154399][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1524.157314][T10860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1524.161412][T10860] cp210x 5-1:0.0: device disconnected [ 1525.328085][ T5846] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1525.616255][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1525.616336][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1525.616596][ T5846] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1525.616643][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.911304][T16996] overlayfs: failed to resolve './file0': -2 [ 1525.951541][ T5846] usb 7-1: config 0 descriptor?? [ 1526.247951][T12005] Bluetooth: hci4: command tx timeout [ 1526.390857][ T5846] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 1526.408176][ T5846] cp2112 0003:10C4:EA90.0031: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1526.572328][ T5846] cp2112 0003:10C4:EA90.0031: Part Number: 0x82 Device Version: 0xFE [ 1527.191499][ T5846] cp2112 0003:10C4:EA90.0031: error reading lock byte: -71 [ 1527.241754][ T5846] usb 7-1: USB disconnect, device number 25 [ 1527.549911][ T6024] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.960786][ T6024] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.906677][T12005] Bluetooth: hci4: command tx timeout [ 1529.063919][T10860] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1529.217937][T10860] usb 2-1: Using ep0 maxpacket: 8 [ 1529.612102][T10860] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1529.614651][T10860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.614700][T10860] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1529.676443][T10860] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1529.677602][T10860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.677624][T10860] usb 2-1: Product: syz [ 1529.677637][T10860] usb 2-1: Manufacturer: syz [ 1529.677649][T10860] usb 2-1: SerialNumber: syz [ 1529.723259][T10860] usb 2-1: config 0 descriptor?? [ 1529.748474][T10860] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1529.863346][T10860] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1529.873548][ T6024] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.904649][T17026] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1531.043007][T12005] Bluetooth: hci4: command tx timeout [ 1531.238569][T17026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.239404][T17026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.116875][T17028] udevd[17028]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1532.288176][ T5954] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1533.089988][T12005] Bluetooth: hci4: command tx timeout [ 1533.091928][ T5954] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1533.091958][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.167731][T10006] usb 2-1: USB disconnect, device number 46 [ 1533.222951][ T5954] usb 3-1: config 0 descriptor?? [ 1533.223343][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 1533.223535][ T5954] usb 3-1: can't set config #0, error -32 [ 1533.330212][ T5954] usb 3-1: USB disconnect, device number 10 [ 1534.178689][ T5954] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1534.423398][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.423434][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.423472][ T5954] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1534.423496][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.465204][ T5954] usb 3-1: config 0 descriptor?? [ 1534.606539][ T6024] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.540649][ T5954] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 1535.658478][ T5954] cp2112 0003:10C4:EA90.0032: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1535.718603][ T5954] cp2112 0003:10C4:EA90.0032: Part Number: 0x82 Device Version: 0xFE [ 1536.712263][ T5954] cp2112 0003:10C4:EA90.0032: error reading lock byte: -71 [ 1537.075147][ T5954] usb 3-1: USB disconnect, device number 11 [ 1537.306410][T16974] chnl_net:caif_netlink_parms(): no params data found [ 1537.723186][T17056] fido_id[17056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1540.831844][T16974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.845702][T16974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.845929][T16974] bridge_slave_0: entered allmulticast mode [ 1540.872303][T16974] bridge_slave_0: entered promiscuous mode [ 1540.898066][ T6024] bridge_slave_1: left allmulticast mode [ 1540.898085][ T6024] bridge_slave_1: left promiscuous mode [ 1540.898238][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.035708][ T6024] bridge_slave_0: left allmulticast mode [ 1541.035727][ T6024] bridge_slave_0: left promiscuous mode [ 1541.035875][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.191286][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1541.206782][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1541.216097][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1541.228679][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1541.235191][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1543.295773][ T5853] Bluetooth: hci3: command tx timeout [ 1545.518946][ T5853] Bluetooth: hci3: command tx timeout [ 1545.777690][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1545.808177][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1545.888182][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1545.909861][ T6024] bond0 (unregistering): Released all slaves [ 1545.928795][ T5846] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1545.935723][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.935755][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.935791][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1545.935812][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.979762][ T9] usb 3-1: config 0 descriptor?? [ 1545.998508][T17082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1545.999616][T16974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.999784][T16974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.000135][T16974] bridge_slave_1: entered allmulticast mode [ 1546.003960][T16974] bridge_slave_1: entered promiscuous mode [ 1546.117041][ T5846] usb 2-1: not running at top speed; connect to a high speed hub [ 1546.158106][ T5846] usb 2-1: config 14 has an invalid interface number: 227 but max is 1 [ 1546.158136][ T5846] usb 2-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 1546.158156][ T5846] usb 2-1: config 14 has an invalid interface number: 208 but max is 1 [ 1546.158227][ T5846] usb 2-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 1546.158246][ T5846] usb 2-1: config 14 has an invalid descriptor of length 100, skipping remainder of the config [ 1546.158267][ T5846] usb 2-1: config 14 has no interface number 0 [ 1546.158284][ T5846] usb 2-1: config 14 has no interface number 1 [ 1546.158390][ T5846] usb 2-1: config 14 interface 227 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1546.158419][ T5846] usb 2-1: config 14 interface 227 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1546.158442][ T5846] usb 2-1: config 14 interface 227 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 1023 [ 1546.158470][ T5846] usb 2-1: config 14 interface 227 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1546.158546][ T5846] usb 2-1: config 14 interface 227 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1546.158568][ T5846] usb 2-1: config 14 interface 227 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1546.158591][ T5846] usb 2-1: config 14 interface 227 altsetting 2 endpoint 0x9 has invalid maxpacket 6726, setting to 1023 [ 1546.158616][ T5846] usb 2-1: config 14 interface 227 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1546.158637][ T5846] usb 2-1: config 14 interface 227 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1546.158709][ T5846] usb 2-1: config 14 interface 227 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 1546.158731][ T5846] usb 2-1: config 14 interface 227 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 1546.158750][ T5846] usb 2-1: config 14 interface 227 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1546.158784][ T5846] usb 2-1: config 14 interface 208 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1546.158810][ T5846] usb 2-1: config 14 interface 227 has no altsetting 0 [ 1546.349073][ T5846] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=f9.2c [ 1546.356439][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.356454][ T5846] usb 2-1: Product: syz [ 1546.356463][ T5846] usb 2-1: Manufacturer: ➘흯졓箥⪺붛椁䯈鹣೪驊僥꣼䅓汻愎垦ⷝ౐ [ 1546.356472][ T5846] usb 2-1: SerialNumber: syz [ 1546.419497][ T9] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 1546.454476][ T9] cp2112 0003:10C4:EA90.0033: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1546.471784][T17099] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1546.719099][ T9] cp2112 0003:10C4:EA90.0033: Part Number: 0x82 Device Version: 0xFE [ 1547.422954][ T5846] kvaser_usb 2-1:14.227: error -ENODEV: Cannot get usb endpoint(s) [ 1547.462084][ T5846] kvaser_usb 2-1:14.208: error -ENODEV: Cannot get usb endpoint(s) [ 1547.480364][ T5846] usb 2-1: USB disconnect, device number 47 [ 1547.537637][ T5853] Bluetooth: hci3: command tx timeout [ 1547.623759][ T9] cp2112 0003:10C4:EA90.0033: error reading lock byte: -71 [ 1547.645680][ T9] usb 3-1: USB disconnect, device number 12 [ 1548.909513][T17112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1548.973437][T16974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.021173][T16974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.093818][T16974] team0: Port device team_slave_0 added [ 1550.130034][T16974] team0: Port device team_slave_1 added [ 1550.183993][ T5853] Bluetooth: hci3: command tx timeout [ 1550.479438][T10007] libceph: connect (1)[c::]:6789 error -101 [ 1550.479627][T10007] libceph: mon0 (1)[c::]:6789 connect error [ 1550.480141][T10007] libceph: connect (1)[c::]:6789 error -101 [ 1550.480433][T10007] libceph: mon0 (1)[c::]:6789 connect error [ 1550.618241][ T5954] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1551.519774][T10007] libceph: connect (1)[c::]:6789 error -101 [ 1551.519965][T10007] libceph: mon0 (1)[c::]:6789 connect error [ 1552.591465][T17140] syz.6.2888 (17140) used greatest stack depth: 14408 bytes left [ 1552.846702][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.846786][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.865802][T10860] libceph: connect (1)[c::]:6789 error -101 [ 1552.865919][T10860] libceph: mon0 (1)[c::]:6789 connect error [ 1552.899468][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.899501][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.899535][ T5954] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1552.899548][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.931140][T17131] ceph: No mds server is up or the cluster is laggy [ 1552.982867][ T5954] usb 3-1: config 0 descriptor?? [ 1553.487005][ T5954] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 1553.498472][T16974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1553.498487][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.498512][T16974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1553.563375][T16974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1553.563391][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.563416][T16974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.565092][ T5954] cp2112 0003:10C4:EA90.0034: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1553.658734][ T5954] cp2112 0003:10C4:EA90.0034: Part Number: 0x82 Device Version: 0xFE [ 1553.807662][T10007] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1553.807819][ T6024] hsr_slave_0: left promiscuous mode [ 1553.831710][ T6024] hsr_slave_1: left promiscuous mode [ 1553.832528][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1553.832553][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.858373][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1553.858400][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.859638][ T5954] cp2112 0003:10C4:EA90.0034: error requesting SMBus config [ 1553.862797][ T5954] cp2112 0003:10C4:EA90.0034: probe with driver cp2112 failed with error -32 [ 1553.926802][ T6024] veth1_macvtap: left promiscuous mode [ 1553.926867][ T6024] veth0_macvtap: left promiscuous mode [ 1553.927006][ T6024] veth1_vlan: left promiscuous mode [ 1553.927131][ T6024] veth0_vlan: left promiscuous mode [ 1553.987782][T10007] usb 2-1: Using ep0 maxpacket: 8 [ 1553.990743][T10007] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1553.991831][T10007] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1553.991880][T10007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1553.991908][T10007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1553.991931][T10007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1553.991956][T10007] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1553.991990][T10007] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1553.994550][T10007] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1553.994577][T10007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.994597][T10007] usb 2-1: Product: syz [ 1553.994606][T10007] usb 2-1: Manufacturer: syz [ 1553.994614][T10007] usb 2-1: SerialNumber: syz [ 1554.042466][T10007] usb 2-1: config 0 descriptor?? [ 1554.043576][T17144] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1554.124486][T10007] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1554.241692][T10007] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1554.383953][T15265] udevd[15265]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1554.598583][T17148] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1555.373538][ T5954] usb 3-1: USB disconnect, device number 13 [ 1555.781458][ T5954] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1555.961181][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.961215][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.961253][ T5954] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1555.961266][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.964798][ T5954] usb 3-1: config 0 descriptor?? [ 1556.401130][ T5954] cp2112 0003:10C4:EA90.0035: unknown main item tag 0x0 [ 1556.405920][ T5954] cp2112 0003:10C4:EA90.0035: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1556.623555][ T5954] cp2112 0003:10C4:EA90.0035: Part Number: 0x82 Device Version: 0xFE [ 1556.628797][T10007] usb 2-1: USB disconnect, device number 48 [ 1556.946478][T17154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1557.430911][ T5954] cp2112 0003:10C4:EA90.0035: error reading lock byte: -71 [ 1557.451676][ T5954] usb 3-1: USB disconnect, device number 14 [ 1557.808512][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1558.171292][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1559.167661][T17169] hub 8-0:1.0: USB hub found [ 1559.168029][T17169] hub 8-0:1.0: 1 port detected [ 1562.661699][T17163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1562.748018][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1562.769467][T16974] hsr_slave_0: entered promiscuous mode [ 1562.770756][T16974] hsr_slave_1: entered promiscuous mode [ 1562.898113][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1562.900588][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1562.900616][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.911651][ T9] usb 2-1: config 0 descriptor?? [ 1563.131750][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1563.156159][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1563.167838][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1563.167903][ T9] usb 2-1: media controller created [ 1563.207867][T10244] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1563.215902][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1563.492318][T10244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.492415][T10244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.492453][T10244] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1563.492477][T10244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.543959][ T9] DVB: Unable to find symbol dib7000p_attach() [ 1563.543974][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1563.570410][T10244] usb 3-1: config 0 descriptor?? [ 1563.668029][T17078] chnl_net:caif_netlink_parms(): no params data found [ 1563.807710][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 1563.807732][ T9] Registered IR keymap rc-empty [ 1563.808170][ T9] dvb-usb: could not initialize remote control. [ 1563.808181][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1563.872328][ T9] usb 2-1: USB disconnect, device number 49 [ 1564.043512][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1564.073564][T10244] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 1564.161794][T10244] cp2112 0003:10C4:EA90.0036: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1564.220430][T10244] cp2112 0003:10C4:EA90.0036: Part Number: 0x82 Device Version: 0xFE [ 1564.823580][T10244] cp2112 0003:10C4:EA90.0036: error reading lock byte: -71 [ 1564.866547][T10244] usb 3-1: USB disconnect, device number 15 [ 1565.175199][T17078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.175270][T17078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.175387][T17078] bridge_slave_0: entered allmulticast mode [ 1565.184859][T17078] bridge_slave_0: entered promiscuous mode [ 1565.265724][T17078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.265918][T17078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.266101][T17078] bridge_slave_1: entered allmulticast mode [ 1565.292186][T17078] bridge_slave_1: entered promiscuous mode [ 1565.600816][T17078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1565.604931][T17227] hub 8-0:1.0: USB hub found [ 1565.605236][T17227] hub 8-0:1.0: 1 port detected [ 1565.658898][T17078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.203430][T17078] team0: Port device team_slave_0 added [ 1567.415952][ T6024] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.907373][T17078] team0: Port device team_slave_1 added [ 1569.544118][ T6024] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.605530][T17078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.605546][T17078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.605705][T17078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.653047][T17078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.653062][T17078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.653090][T17078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.818551][ T5846] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1569.967809][ T5846] usb 7-1: Using ep0 maxpacket: 32 [ 1569.984093][ T5846] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1569.984112][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.005951][ T5846] usb 7-1: config 0 descriptor?? [ 1570.045533][ T6024] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.147980][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1570.222602][ T5846] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1570.246906][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1570.257993][ T5846] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1570.258028][ T5846] usb 7-1: media controller created [ 1570.299585][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.299604][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1570.299625][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1570.299638][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.303895][ T9] usb 3-1: config 0 descriptor?? [ 1570.366841][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1570.503195][ T6024] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.647435][ T5846] DVB: Unable to find symbol dib7000p_attach() [ 1570.647446][ T5846] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1570.773589][ T9] cp2112 0003:10C4:EA90.0037: unknown main item tag 0x0 [ 1570.783176][T17078] hsr_slave_0: entered promiscuous mode [ 1570.784419][T17078] hsr_slave_1: entered promiscuous mode [ 1570.805889][ T9] cp2112 0003:10C4:EA90.0037: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1570.810891][T17078] debugfs: 'hsr0' already exists in 'hsr' [ 1570.810916][T17078] Cannot create hsr debugfs directory [ 1570.817229][T16974] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1570.912378][T16974] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1570.948532][ T5846] rc_core: IR keymap rc-dib0700-rc5 not found [ 1570.948554][ T5846] Registered IR keymap rc-empty [ 1570.949007][ T5846] dvb-usb: could not initialize remote control. [ 1570.949018][ T5846] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1570.970183][ T9] cp2112 0003:10C4:EA90.0037: Part Number: 0x82 Device Version: 0xFE [ 1570.980419][ T5846] usb 7-1: USB disconnect, device number 26 [ 1571.297088][T16974] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1571.402164][ T5846] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1571.566133][T16974] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1571.572583][ T9] cp2112 0003:10C4:EA90.0037: error reading lock byte: -71 [ 1571.600263][ T9] usb 3-1: USB disconnect, device number 16 [ 1575.253204][T17289] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2917'. [ 1577.019996][ T6024] bridge_slave_1: left allmulticast mode [ 1577.020024][ T6024] bridge_slave_1: left promiscuous mode [ 1577.020257][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.986523][ T6024] bridge_slave_0: left allmulticast mode [ 1577.986551][ T6024] bridge_slave_0: left promiscuous mode [ 1577.986803][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.190242][T10007] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1579.347801][T10007] usb 7-1: Using ep0 maxpacket: 8 [ 1579.351641][T10007] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1579.352726][T10007] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1579.352776][T10007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1579.352804][T10007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1579.352819][T10007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1579.352836][T10007] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1579.352848][T10007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1579.352860][T10007] usb 7-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1579.355098][T10007] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1579.355124][T10007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.355135][T10007] usb 7-1: Product: syz [ 1579.355142][T10007] usb 7-1: Manufacturer: syz [ 1579.355150][T10007] usb 7-1: SerialNumber: syz [ 1579.360546][T10007] usb 7-1: config 0 descriptor?? [ 1579.416213][T17312] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1579.422615][T10007] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1579.532424][T10007] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1579.549251][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.594718][T15265] udevd[15265]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1579.649241][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.670906][ T6024] bond0 (unregistering): Released all slaves [ 1580.595441][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 1580.595634][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 1580.596607][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 1580.596795][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 1580.679302][T17337] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1580.689245][T17337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.689764][T17337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.717399][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 1581.717518][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 1581.838823][T17327] ceph: No mds server is up or the cluster is laggy [ 1582.356417][ T6062] libceph: connect (1)[c::]:6789 error -101 [ 1582.356615][ T6062] libceph: mon0 (1)[c::]:6789 connect error [ 1582.427686][T17338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1582.977703][T10860] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1583.062866][T12005] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1583.069733][ T5851] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1583.099278][T12005] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1583.108836][T12005] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1583.126835][T12005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1583.133585][T12005] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1583.208893][T10860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1583.208928][T10860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1583.208969][T10860] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1583.208992][T10860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.252280][T10860] usb 2-1: config 0 descriptor?? [ 1583.257253][ T5851] usb 3-1: not running at top speed; connect to a high speed hub [ 1583.259230][ T5851] usb 3-1: config 14 has an invalid interface number: 227 but max is 1 [ 1583.259255][ T5851] usb 3-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 1583.259276][ T5851] usb 3-1: config 14 has an invalid interface number: 208 but max is 1 [ 1583.259295][ T5851] usb 3-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 1583.259312][ T5851] usb 3-1: config 14 has an invalid descriptor of length 100, skipping remainder of the config [ 1583.259331][ T5851] usb 3-1: config 14 has no interface number 0 [ 1583.259348][ T5851] usb 3-1: config 14 has no interface number 1 [ 1583.259400][ T5851] usb 3-1: config 14 interface 227 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1583.259427][ T5851] usb 3-1: config 14 interface 227 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1583.259451][ T5851] usb 3-1: config 14 interface 227 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 1023 [ 1583.259478][ T5851] usb 3-1: config 14 interface 227 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1583.259503][ T5851] usb 3-1: config 14 interface 227 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1583.259524][ T5851] usb 3-1: config 14 interface 227 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1583.259547][ T5851] usb 3-1: config 14 interface 227 altsetting 2 endpoint 0x9 has invalid maxpacket 6726, setting to 1023 [ 1583.259573][ T5851] usb 3-1: config 14 interface 227 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1583.259596][ T5851] usb 3-1: config 14 interface 227 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1583.259621][ T5851] usb 3-1: config 14 interface 227 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 1583.259643][ T5851] usb 3-1: config 14 interface 227 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 1583.259665][ T5851] usb 3-1: config 14 interface 227 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1583.259699][ T5851] usb 3-1: config 14 interface 208 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1583.259725][ T5851] usb 3-1: config 14 interface 227 has no altsetting 0 [ 1583.262191][ T5851] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=f9.2c [ 1583.262217][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.262236][ T5851] usb 3-1: Product: syz [ 1583.262250][ T5851] usb 3-1: Manufacturer: ➘흯졓箥⪺붛椁䯈鹣೪驊僥꣼䅓汻愎垦ⷝ౐ [ 1583.262268][ T5851] usb 3-1: SerialNumber: syz [ 1583.335281][T17350] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1583.779709][ T5851] kvaser_usb 3-1:14.227: error -ENODEV: Cannot get usb endpoint(s) [ 1583.872384][T10860] cp2112 0003:10C4:EA90.0038: unknown main item tag 0x0 [ 1583.968042][T10860] cp2112 0003:10C4:EA90.0038: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1583.980598][ T5851] kvaser_usb 3-1:14.208: error -ENODEV: Cannot get usb endpoint(s) [ 1584.035367][T10860] cp2112 0003:10C4:EA90.0038: Part Number: 0x82 Device Version: 0xFE [ 1584.044431][ T5851] usb 3-1: USB disconnect, device number 17 [ 1584.470563][T10006] usb 7-1: USB disconnect, device number 27 [ 1584.646813][T10860] cp2112 0003:10C4:EA90.0038: error reading lock byte: -71 [ 1584.685001][T10860] usb 2-1: USB disconnect, device number 50 [ 1584.987693][ T6024] hsr_slave_0: left promiscuous mode [ 1585.030207][ T6024] hsr_slave_1: left promiscuous mode [ 1585.100254][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1585.100279][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.210930][ T5853] Bluetooth: hci2: command tx timeout [ 1585.478853][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1585.478880][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.971537][ T6024] veth1_macvtap: left promiscuous mode [ 1586.971644][ T6024] veth0_macvtap: left promiscuous mode [ 1586.971894][ T6024] veth1_vlan: left promiscuous mode [ 1587.324579][ T5853] Bluetooth: hci2: command tx timeout [ 1587.607197][T17406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2933'. [ 1587.830007][T17407] netlink: 'syz.2.2933': attribute type 10 has an invalid length. [ 1589.338380][ T6024] team0 (unregistering): Port device vlan0 removed [ 1589.367668][ T5853] Bluetooth: hci2: command tx timeout [ 1590.568193][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1590.829919][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1591.447654][ T5853] Bluetooth: hci2: command tx timeout [ 1593.041604][T17407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.101490][T17407] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1594.101145][T13309] Bluetooth: hci1: command 0x0406 tx timeout [ 1594.101185][T13309] Bluetooth: hci0: command 0x0406 tx timeout [ 1594.436977][T17430] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2936'. [ 1594.627708][ T5846] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1594.864163][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 1595.009077][ T5846] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1595.183198][ T5846] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1595.183262][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1595.183292][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1595.183315][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1595.183342][ T5846] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1595.183367][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1595.183389][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1596.458018][ T5846] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1596.458050][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.458071][ T5846] usb 3-1: Product: syz [ 1596.458085][ T5846] usb 3-1: Manufacturer: syz [ 1596.458099][ T5846] usb 3-1: SerialNumber: syz [ 1596.706208][T17440] netlink: 'syz.1.2936': attribute type 10 has an invalid length. [ 1597.586185][ T5846] usb 3-1: config 0 descriptor?? [ 1598.497718][ T5846] usb 3-1: can't set config #0, error -71 [ 1598.509079][ T5846] usb 3-1: USB disconnect, device number 18 [ 1598.633072][T17440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1598.653052][T17440] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1599.333262][ T5846] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1599.429215][T17078] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1599.545843][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.545878][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.545916][ T5846] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1599.545940][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.558234][T17078] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1599.561466][ T5846] usb 3-1: config 0 descriptor?? [ 1599.819484][T17078] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1600.013963][ T5846] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 1600.048423][ T5846] cp2112 0003:10C4:EA90.0039: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1600.238430][ T5846] cp2112 0003:10C4:EA90.0039: Part Number: 0x82 Device Version: 0xFE [ 1600.922967][ T5846] cp2112 0003:10C4:EA90.0039: error reading lock byte: -71 [ 1600.973149][ T5846] usb 3-1: USB disconnect, device number 19 [ 1600.978933][T17078] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1601.036952][T17468] fido_id[17468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1601.360467][T12005] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1601.367027][T12005] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1601.437465][T12005] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1601.452234][T12005] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1601.452752][ T6024] IPVS: stop unused estimator thread 0... [ 1601.456404][T12005] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1602.188019][T17353] chnl_net:caif_netlink_parms(): no params data found [ 1602.517868][T10860] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1602.709857][T10860] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1602.709885][T10860] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.709904][T10860] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1602.709955][T10860] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.709980][T10860] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1602.719296][T10860] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1602.719324][T10860] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1602.719344][T10860] usb 3-1: Product: syz [ 1602.719358][T10860] usb 3-1: Manufacturer: syz [ 1602.736983][T10860] cdc_wdm 3-1:1.0: skipping garbage [ 1602.737001][T10860] cdc_wdm 3-1:1.0: skipping garbage [ 1602.753556][T10860] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1602.753575][T10860] cdc_wdm 3-1:1.0: Unknown control protocol [ 1603.411792][T17509] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 1603.457966][T10860] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1603.951174][T10860] usb 2-1: Using ep0 maxpacket: 8 [ 1603.961083][T10860] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1603.962596][T10860] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1603.962643][T10860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1603.962671][T10860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1603.962691][T10860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1603.962715][T10860] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1603.962738][T10860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1603.962759][T10860] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1603.965452][T10860] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1603.965478][T10860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.965497][T10860] usb 2-1: Product: syz [ 1603.965512][T10860] usb 2-1: Manufacturer: syz [ 1603.965527][T10860] usb 2-1: SerialNumber: syz [ 1603.975223][T10860] usb 2-1: config 0 descriptor?? [ 1603.976519][T17505] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1604.003352][T10860] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1604.007715][T12005] Bluetooth: hci4: command tx timeout [ 1604.314590][T10860] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1604.526214][T17353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.526344][T17353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.526548][T17353] bridge_slave_0: entered allmulticast mode [ 1604.556209][T17353] bridge_slave_0: entered promiscuous mode [ 1604.560228][T17526] udevd[17526]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1605.226439][ T5846] usb 3-1: USB disconnect, device number 20 [ 1605.230717][T17353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.230876][T17353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.231125][T17353] bridge_slave_1: entered allmulticast mode [ 1605.293563][T17353] bridge_slave_1: entered promiscuous mode [ 1605.435717][T17537] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1605.476219][T17537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.476801][T17537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.782055][T12005] Bluetooth: hci4: command tx timeout [ 1606.964780][T17553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1606.992484][T17353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.171031][T17353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1607.388514][T17353] team0: Port device team_slave_0 added [ 1607.428809][T17353] team0: Port device team_slave_1 added [ 1607.611919][T17353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1607.611938][T17353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1607.611964][T17353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1607.614256][T17353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1607.614270][T17353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1607.614296][T17353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1607.840016][T17353] hsr_slave_0: entered promiscuous mode [ 1607.841414][T17353] hsr_slave_1: entered promiscuous mode [ 1607.842502][T17353] debugfs: 'hsr0' already exists in 'hsr' [ 1607.842525][T17353] Cannot create hsr debugfs directory [ 1608.132090][ T6062] usb 2-1: USB disconnect, device number 51 [ 1608.564675][T17476] chnl_net:caif_netlink_parms(): no params data found [ 1608.817708][T12005] Bluetooth: hci4: command tx timeout [ 1609.206281][ T6024] bridge_slave_1: left allmulticast mode [ 1609.206308][ T6024] bridge_slave_1: left promiscuous mode [ 1609.206524][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.333965][ T6024] bridge_slave_0: left allmulticast mode [ 1609.333993][ T6024] bridge_slave_0: left promiscuous mode [ 1609.334248][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.888085][T12005] Bluetooth: hci4: command tx timeout [ 1611.548283][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1611.718721][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1611.809593][ T6024] bond0 (unregistering): Released all slaves [ 1612.210675][T17614] can0: slcan on pty24. [ 1612.551643][T17476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.551875][T17476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.552045][T17476] bridge_slave_0: entered allmulticast mode [ 1612.553857][T17614] can0 (unregistered): slcan off pty24. [ 1612.554392][T17476] bridge_slave_0: entered promiscuous mode [ 1612.659023][T17476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.659094][T17476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.659234][T17476] bridge_slave_1: entered allmulticast mode [ 1612.795820][T17476] bridge_slave_1: entered promiscuous mode [ 1613.602544][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1613.748028][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1613.750492][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1613.751838][ T9] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1613.751889][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1613.751917][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1613.751939][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1613.751966][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1613.751990][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1613.752011][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1613.755514][ T9] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1613.755541][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.755563][ T9] usb 7-1: Product: syz [ 1613.755577][ T9] usb 7-1: Manufacturer: syz [ 1613.755591][ T9] usb 7-1: SerialNumber: syz [ 1613.901307][ T9] usb 7-1: config 0 descriptor?? [ 1613.902239][T17621] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1613.931616][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1613.933486][ T6024] hsr_slave_0: left promiscuous mode [ 1613.979446][ T6024] hsr_slave_1: left promiscuous mode [ 1613.980418][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1614.031293][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1614.055235][ T9] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1614.235670][T17434] udevd[17434]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1617.214425][ T9856] usb 7-1: USB disconnect, device number 28 [ 1617.952416][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.952459][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1619.008463][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 1619.208760][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 1621.947805][T10006] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1622.107621][T10006] usb 2-1: Using ep0 maxpacket: 16 [ 1622.109972][T10006] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1622.112640][T10006] usb 2-1: config 3 has an invalid interface number: 106 but max is 0 [ 1622.112665][T10006] usb 2-1: config 3 has no interface number 0 [ 1622.112699][T10006] usb 2-1: config 3 interface 106 has no altsetting 0 [ 1622.115002][T10006] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 1622.115029][T10006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.115050][T10006] usb 2-1: Product: syz [ 1622.115065][T10006] usb 2-1: Manufacturer: syz [ 1622.115079][T10006] usb 2-1: SerialNumber: syz [ 1622.249639][T17476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1622.270721][T17476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1622.397217][T10006] kobil_sct 2-1:3.106: required endpoints missing [ 1622.457792][T10006] usb 2-1: USB disconnect, device number 52 [ 1622.642048][T17476] team0: Port device team_slave_0 added [ 1622.930016][T17476] team0: Port device team_slave_1 added [ 1623.084105][T10006] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1623.691635][T10006] usb 7-1: Using ep0 maxpacket: 8 [ 1623.694461][T10006] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1623.695838][T10006] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1623.695891][T10006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1623.695920][T10006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1623.695941][T10006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1623.695968][T10006] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1623.695993][T10006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1623.696015][T10006] usb 7-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1623.824564][T10006] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1623.824592][T10006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.824604][T10006] usb 7-1: Product: syz [ 1623.824611][T10006] usb 7-1: Manufacturer: syz [ 1623.824619][T10006] usb 7-1: SerialNumber: syz [ 1623.834909][T10006] usb 7-1: config 0 descriptor?? [ 1623.882420][T17667] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1623.921219][T10006] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1623.937664][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1624.032465][T17476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1624.032482][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1624.032509][T17476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1624.099759][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1624.099786][ T9] usb 2-1: config 0 has no interface number 0 [ 1624.099817][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1624.102782][ T9] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 1624.102808][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.102829][ T9] usb 2-1: Product: syz [ 1624.102843][ T9] usb 2-1: Manufacturer: syz [ 1624.102857][ T9] usb 2-1: SerialNumber: syz [ 1624.291124][T17476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1624.291141][T17476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1624.291170][T17476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.308575][ T9] usb 2-1: config 0 descriptor?? [ 1626.147263][T10006] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1626.173788][T10006] usb 7-1: USB disconnect, device number 29 [ 1626.803436][T17695] udevd[17695]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1626.942403][ T6062] libceph: connect (1)[c::]:6789 error -101 [ 1626.969054][ T6062] libceph: mon0 (1)[c::]:6789 connect error [ 1626.969202][T17698] ceph: No mds server is up or the cluster is laggy [ 1627.303154][ T6062] libceph: connect (1)[c::]:6789 error -101 [ 1627.303329][ T6062] libceph: mon0 (1)[c::]:6789 connect error [ 1627.596366][T17476] hsr_slave_0: entered promiscuous mode [ 1627.597923][T17476] hsr_slave_1: entered promiscuous mode [ 1627.610617][ T9] msi2500 2-1:0.1: Registered as swradio24 [ 1627.610637][ T9] msi2500 2-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 1627.659956][ T9] usb 2-1: USB disconnect, device number 53 [ 1629.147802][ T9] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1629.300244][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1629.300275][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.336144][ T9] usb 2-1: config 0 descriptor?? [ 1629.355679][ T9] cp210x 2-1:0.0: cp210x converter detected [ 1629.683685][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1630.655201][T17740] overlayfs: missing 'lowerdir' [ 1630.920336][T17353] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1630.926454][T10006] usb 2-1: USB disconnect, device number 54 [ 1630.942091][T10006] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1630.945439][T10006] cp210x 2-1:0.0: device disconnected [ 1631.177796][ T5851] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1631.177990][T17353] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1631.341105][ T5851] usb 7-1: Using ep0 maxpacket: 8 [ 1631.684305][ T5851] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1631.687461][ T5851] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1631.687492][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1631.687507][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1631.687519][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1631.687609][ T5851] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1631.687633][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1631.687654][ T5851] usb 7-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1631.694537][ T5851] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1631.694554][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.694565][ T5851] usb 7-1: Product: syz [ 1631.694573][ T5851] usb 7-1: Manufacturer: syz [ 1631.694580][ T5851] usb 7-1: SerialNumber: syz [ 1631.710413][ T5851] usb 7-1: config 0 descriptor?? [ 1631.714450][T17744] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1631.745623][ T5851] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1632.220284][T17762] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1632.327841][T17762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.361949][T17762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.061873][ T5851] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1633.193572][T17696] udevd[17696]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1633.308633][T17353] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1633.509493][T17353] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1635.373369][T17788] Can't find ip_set type hash:ma [ 1635.597216][ T36] audit: type=1326 audit(2000000989.230:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17776 comm="syz.2.2994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9740dc629 code=0x0 [ 1635.649655][ T5955] usb 7-1: USB disconnect, device number 30 [ 1636.406658][T17806] overlayfs: missing 'lowerdir' [ 1636.660591][T17353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1636.746520][T17353] 8021q: adding VLAN 0 to HW filter on device team0 [ 1636.785653][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.799914][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1636.829566][T17155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.829757][T17155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1637.072071][T17820] hub 8-0:1.0: USB hub found [ 1637.074895][T17820] hub 8-0:1.0: 1 port detected [ 1639.970261][ T6024] bridge_slave_1: left allmulticast mode [ 1639.970290][ T6024] bridge_slave_1: left promiscuous mode [ 1639.970529][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.194814][ T6024] bridge_slave_0: left allmulticast mode [ 1640.194835][ T6024] bridge_slave_0: left promiscuous mode [ 1640.195010][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.268860][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.348430][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.367711][T10244] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1641.419333][ T6024] bond0 (unregistering): Released all slaves [ 1641.527830][T10244] usb 3-1: Using ep0 maxpacket: 8 [ 1641.529854][T10244] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1641.531008][T10244] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1641.531400][T10244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1641.531417][T10244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1641.531429][T10244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1641.531443][T10244] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1641.531456][T10244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1641.531469][T10244] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1641.533539][T10244] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1641.533565][T10244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.533580][T10244] usb 3-1: Product: syz [ 1641.533588][T10244] usb 3-1: Manufacturer: syz [ 1641.533595][T10244] usb 3-1: SerialNumber: syz [ 1641.536597][T10244] usb 3-1: config 0 descriptor?? [ 1641.539355][T17841] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1641.673226][T10244] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1642.019487][T17843] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1642.122503][T17843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.126915][T17843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.396020][T10244] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1642.870316][T17696] udevd[17696]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1643.606462][T17849] overlayfs: missing 'lowerdir' [ 1643.657764][ T6024] hsr_slave_0: left promiscuous mode [ 1643.697832][ T6024] hsr_slave_1: left promiscuous mode [ 1643.698869][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1643.760195][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1643.787918][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1643.789809][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1643.790859][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1643.791567][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1643.791987][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.920913][T17855] overlayfs: failed to resolve './file0': -2 [ 1644.581043][T10007] usb 3-1: USB disconnect, device number 21 [ 1645.602906][T17862] hub 8-0:1.0: USB hub found [ 1645.608579][T17862] hub 8-0:1.0: 1 port detected [ 1646.417953][T12005] Bluetooth: hci3: command tx timeout [ 1646.991367][T17873] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 1650.307789][T10244] ------------[ cut here ]------------ [ 1650.307800][T10244] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1650.307815][T10244] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:5/10244 [ 1650.307922][T10244] Modules linked in: [ 1650.307947][T10244] CPU: 0 UID: 0 PID: 10244 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1650.307966][T10244] Tainted: [L]=SOFTLOCKUP [ 1650.307970][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1650.307978][T10244] Workqueue: events drm_fb_helper_damage_work [ 1650.308014][T10244] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1650.308026][T10244] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1650.308036][T10244] RSP: 0018:ffffc90004eb78e0 EFLAGS: 00010246 [ 1650.308044][T10244] RAX: 1ffff11004968800 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 1650.308052][T10244] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 1650.308060][T10244] RBP: ffffc90004eb79c8 R08: 0000000000000000 R09: 0000000000000000 [ 1650.308067][T10244] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 1650.308074][T10244] R13: ffff888024b44000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 1650.308082][T10244] FS: 0000000000000000(0000) GS:ffff888126595000(0000) knlGS:0000000000000000 [ 1650.308090][T10244] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1650.308097][T10244] CR2: 0000200001000000 CR3: 000000009b780000 CR4: 00000000003526f0 [ 1650.308107][T10244] Call Trace: [ 1650.308115][T10244] [ 1650.308125][T10244] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1650.308135][T10244] ? rt_spin_unlock+0x14f/0x200 [ 1650.308237][T10244] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1650.308273][T10244] ? rt_spin_unlock+0x160/0x200 [ 1650.308285][T10244] ? drm_vblank_get+0x147/0x260 [ 1650.308322][T10244] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1650.308339][T10244] drm_fb_helper_damage_work+0x131/0x6f0 [ 1650.308351][T10244] ? process_scheduled_works+0xa0f/0x17a0 [ 1650.308366][T10244] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1650.308379][T10244] ? process_scheduled_works+0xa0f/0x17a0 [ 1650.308390][T10244] ? process_scheduled_works+0xa0f/0x17a0 [ 1650.308403][T10244] process_scheduled_works+0xaec/0x17a0 [ 1650.308430][T10244] ? __pfx_process_scheduled_works+0x10/0x10 [ 1650.308446][T10244] ? assign_work+0x3d5/0x5e0 [ 1650.308460][T10244] worker_thread+0xa50/0xfc0 [ 1650.308487][T10244] kthread+0x388/0x470 [ 1650.308503][T10244] ? __pfx_worker_thread+0x10/0x10 [ 1650.308514][T10244] ? __pfx_kthread+0x10/0x10 [ 1650.308529][T10244] ret_from_fork+0x51e/0xb90 [ 1650.308554][T10244] ? __pfx_ret_from_fork+0x10/0x10 [ 1650.308566][T10244] ? __switch_to+0xc7d/0x1400 [ 1650.308597][T10244] ? __pfx_kthread+0x10/0x10 [ 1650.308612][T10244] ret_from_fork_asm+0x1a/0x30 [ 1650.308644][T10244] [ 1650.308655][T10244] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1650.308664][T10244] CPU: 0 UID: 0 PID: 10244 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1650.308678][T10244] Tainted: [L]=SOFTLOCKUP [ 1650.308682][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1650.308688][T10244] Workqueue: events drm_fb_helper_damage_work [ 1650.308699][T10244] Call Trace: [ 1650.308704][T10244] [ 1650.308708][T10244] vpanic+0x1e0/0x670 [ 1650.308730][T10244] panic+0xc5/0xd0 [ 1650.308744][T10244] ? __pfx_panic+0x10/0x10 [ 1650.308763][T10244] ? ret_from_fork_asm+0x1a/0x30 [ 1650.308781][T10244] __warn+0x315/0x4a0 [ 1650.308799][T10244] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1650.308810][T10244] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1650.308825][T10244] __report_bug+0x29a/0x540 [ 1650.308896][T10244] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1650.308907][T10244] ? __pfx___report_bug+0x10/0x10 [ 1650.308930][T10244] report_bug_entry+0x19a/0x290 [ 1650.308943][T10244] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1650.308952][T10244] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1650.308961][T10244] handle_bug+0xca/0x200 [ 1650.309017][T10244] exc_invalid_op+0x1a/0x50 [ 1650.309032][T10244] asm_exc_invalid_op+0x1a/0x20 [ 1650.309054][T10244] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1650.309065][T10244] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1650.309073][T10244] RSP: 0018:ffffc90004eb78e0 EFLAGS: 00010246 [ 1650.309082][T10244] RAX: 1ffff11004968800 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 1650.309090][T10244] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 1650.309097][T10244] RBP: ffffc90004eb79c8 R08: 0000000000000000 R09: 0000000000000000 [ 1650.309104][T10244] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 1650.309111][T10244] R13: ffff888024b44000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 1650.309130][T10244] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1650.309139][T10244] ? rt_spin_unlock+0x14f/0x200 [ 1650.309150][T10244] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1650.309164][T10244] ? rt_spin_unlock+0x160/0x200 [ 1650.309176][T10244] ? drm_vblank_get+0x147/0x260 [ 1650.309193][T10244] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1650.309208][T10244] drm_fb_helper_damage_work+0x131/0x6f0 [ 1650.309220][T10244] ? process_scheduled_works+0xa0f/0x17a0 [ 1650.309234][T10244] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1650.309251][T10244] ? process_scheduled_works+0xa0f/0x17a0 [ 1650.309262][T10244] ? process_scheduled_works+0xa0f/0x17a0 [ 1650.309275][T10244] process_scheduled_works+0xaec/0x17a0 [ 1650.309301][T10244] ? __pfx_process_scheduled_works+0x10/0x10 [ 1650.309316][T10244] ? assign_work+0x3d5/0x5e0 [ 1650.309331][T10244] worker_thread+0xa50/0xfc0 [ 1650.309357][T10244] kthread+0x388/0x470 [ 1650.309371][T10244] ? __pfx_worker_thread+0x10/0x10 [ 1650.309383][T10244] ? __pfx_kthread+0x10/0x10 [ 1650.309402][T10244] ret_from_fork+0x51e/0xb90 [ 1650.309416][T10244] ? __pfx_ret_from_fork+0x10/0x10 [ 1650.309428][T10244] ? __switch_to+0xc7d/0x1400 [ 1650.309440][T10244] ? __pfx_kthread+0x10/0x10 [ 1650.309456][T10244] ret_from_fork_asm+0x1a/0x30 [ 1650.309480][T10244] [ 1650.309815][T10244] Kernel Offset: disabled