last executing test programs: 9.986158622s ago: executing program 4 (id=674): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = dup(r0) read$FUSE(r1, 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x304, 0x14, 0x8, 0x70bd29, 0x25dfdbfb, {0x23, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "805bd4db1e01aad254605ea84bc05c8e28524c486efdbcfa92ba5911133c2cb0445f2d29785678b34917594c669505cdf01ddc051ea0359dd10ca754768a0c0a2a9c57abb13879f4b321cf60688e120ad27ca487e17b434186d202d2befb1f12b48822368d2e115d57f5b28452dafc5f5ce61d094f5161c77c8f9cbc953019c41e83e0a6266a27397ad3d74f8a7f4aaa5cfacb8ecd27d715eed6fb68fd2d05c880dd7d"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "84217960a3848622759b00d3433619ee1150f20dce61a159ab51d234db773fecaa8ff9563f4c178b1a06b49e4a07d9ab3691a82fab71a3ec24b7244daa4b85d5714e7f0fd8c8ecf30d09fd255eb046c892438e7f7bc09e5abb7536385be07fb85c6fce8e13a5eb89afc0e8ff954121d2e7c9edbaa54658a14582a6d6d61debd937a89a9e5b5bdbfed5b64e340e5291cc5d5c26d6ae51558e7fdb4256dbef7f37617381ae787bf08f8b6fc22bfecaed1495b186ee1156c60fd41af89a1bda"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "ecd8e0e38b59edf3"}, @INET_DIAG_REQ_BYTECODE={0x48, 0x1, "2f99d6f242a4c01e458bdc878edac9885299139f7bc5746fbb2706e57b1a7a8dee673d9292b4a2241d401b9116f07947b8851a7eeded6bcb51ce39a15eebc3dd80347b4c"}, @INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "0e3bcd2d052d3f17d242ae4b1917910524fe961f4ea5dfcb746f35b42ce20737d1067ad7e623dbd9133b66621effffc948c0a39afd462503abbbffd52645899a5379321bbdf8c752abf5e461aa34330d42edb0f8a1b1c35e3f8cca687ab7f8941744a06c6e14962606972897cb06c4c220a65a280feefa28f2a0b17a5fe21d36413ca5d1f2e2fd2e6788ccc49dd940684898ce58af06a4071c1cfc4b63678dc3d5d01f4e72"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "185b1c89f556156d16bd58de83359d1c3f11b4d2446c0551b15dffabc59fa4e36081c53ce6c17a589a821dfedca51dc9181c1f21f4a1fb989ce9dbf67c7a47640f582a0699845d18e8f24c05b3a52c337610a1587fe097f9539e482f5b30daa86950ba1afd06d6b85dc9c2c36f319761312cbf3efc2c5d7969f79e305e16"}]}, 0x304}, 0x1, 0x0, 0x0, 0x40040}, 0x44021) 9.661130466s ago: executing program 4 (id=675): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e80cb79677030006000718000002004909c722deee1edb0e4f20000000080012000200010000d20000006544f62c006c540203000100000000000080b20200000000152c000000cdff00000001020014bb000001000000202300001300030005000020"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) socket(0x80000000000000a, 0x2, 0x0) move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000001020101"], 0x18}}, 0x20000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/235) pwritev(r7, &(0x7f00000002c0)=[{&(0x7f00000010c0)}, {&(0x7f0000000400)="9b2f7e9dd799fe2bb80020307877a48044bdf07025b476cc9127b6e1eff4f9fa6fa5d37f1aea08d69d9bcdf479048e3555947e65a377a8001e3d8bf10f2e7a5dafd0d19abf7200cc32ff58e90d413f6351ea9069253f916aeb15306392cd85d7cb00825ad0147d323c474d8b32f3d98fc3ac9092b4491263", 0x78}, {0x0}, {0x0}], 0x4, 0x8, 0x5) ioctl$TCFLSH(r4, 0x540b, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@RTM_GETMDB={0x18, 0x56, 0x2fe, 0x70bd2a, 0x25dfdbfc, {0x7, r8}, ["", "", "", ""]}, 0x18}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.031620993s ago: executing program 4 (id=679): socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fchdir(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000000000791207000000000095", @ANYRESHEX=r0, @ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) inotify_init1(0x80800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x80, 0x4, 0x2, 0x2068, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffff}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x18, 0x0, 0x0, "d569e8e1dd2f1ae97ee8580001f44000c04b1410b2eafa4496ba216b1e8ac11e"}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r4, 0xffffffffffffffff, 0x14, 0x0, 0x0, @link_id}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x0, 0x0, 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x7, 0x0, &(0x7f0000000000)) 8.496239135s ago: executing program 0 (id=682): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x10) inotify_init1(0x0) ptrace$getsig(0x4202, 0x0, 0x10, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f00000002c0)=@nullb, 0x0, 0x0, 0x1000, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) setuid(0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000440)="721d5b8b99607655e73dd3e6a41d502d77d172d1a8d42cd4b6deded32f3293ada26e1d8c15a48e45b677e11d96c32684578ec8074a6171bb146552d04ff3411d1b2bf2139b113567f5348f6e6016904e671d4034bab5c68a69de4c80d9f6788e9bfb263efb5d31c0356d0e23980f2d02fd7c57d3f5c18b8e7fa4efe29d537ddae653e68618ed39c654a901d76ac487c00474978e69df04afe52a7bed8bb0eea4ff9eb18c", &(0x7f0000000380)="694ce6f443bdc30876b748cd61c5a1a9caa84077720740f5f535c1ca3c56bcdbee22e1ded7680e64bae6d7dbc8f710026e82575c6de449b2bdfc621bba51d26028b6e29765b391ce52f810523431ebd4fc1f12f530a06a7d4b0a17"}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pwritev2(r4, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}, {&(0x7f0000000140)='(', 0xfffffed3}], 0x2, 0x1ffffff, 0x80000, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x40047452, &(0x7f0000000100)) 7.557246561s ago: executing program 0 (id=688): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000"], 0x310) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6, @in=@local}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x1}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[@ANYBLOB="abbbbbbbbbbbaaaaaaaaaa008100000008004500001400000002003443524233fafc4f00000083308fb8d41220c3c365718a970ed2f277c20fe0a6722f57ca7d8c2bb6d849bd4072ee0daefee7c4f5f420a87fac278e26324d820488cdeffaee8a2a372a647423cebeffa42bba5801b12bb63b936a8939eb14de4ebfd4aafd05a84e"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x2, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) personality(0x8000000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r4, 0x5459, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x5c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0) 6.368216247s ago: executing program 2 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002880)={{0x14, 0x10, 0x1, 0xfffffff5}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}], {0x14, 0x10}}, 0x6c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 6.14344103s ago: executing program 0 (id=692): syz_usb_connect(0x0, 0x33, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xec, 0x13, 0xb2, 0x10, 0x46d, 0x8d3, 0xb28, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5}, @as_header={0x7, 0x24, 0x1, 0x7, 0x9, 0x3}]}]}}]}}]}}, 0x0) clock_getres(0x9, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 6.081181741s ago: executing program 2 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x76dc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$media(&(0x7f0000000280), 0xb, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000080)={{}, {}, 0x2, [0x40000000]}) 4.996001171s ago: executing program 2 (id=694): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) r0 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002200)={0x0, 0x3, 0xa, 0x0, 0x8, 0x2}, &(0x7f0000002240)=0x14) r1 = syz_io_uring_setup(0x4171, &(0x7f0000000780)={0x0, 0x0, 0x20}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x9, 0x0, 0x0, 0x0, 0x15, 0x1, {0x1}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00000000009f3d355d57b22b69f6eb890764e340e6388aa3bfc07d7305892c82067c70"], 0x3c}}, 0x0) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000dfffffff00000000bbfc812622d4cefeff9b3900f5ffffff"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0xc0, &(0x7f00000021c0)=0x9, 0x0, 0x4) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r8, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffff7ffffffffe, 0x0, 0x100, 0x4, 0x8, 0x1}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r6, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB="cc0000001b00000000000000a9f90000000000000000000000000000000000000000ff02000000000000000000004000000100000000000000000000000000000000362f5ad7c89a672ee1e377c1bfe90171a97339104d6f3117c67a73d9b1ec6f9594c30e000000000a80481013dc5609286e2a53e566bacc8a138085b91e853dc17707b2674282af5398b767312724", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ff0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000c0015000000000000000000"], 0xcc}}, 0x0) 4.572511183s ago: executing program 2 (id=696): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1a"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.333286346s ago: executing program 2 (id=698): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0xa20000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x30000, 0x129) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x7fc, 0x3ff}) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) io_setup(0x4, &(0x7f00000019c0)=0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) io_submit(r1, 0x1, &(0x7f0000001b40)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffe, r2, &(0x7f0000001a00)="c1", 0x1, 0x7fffffffffffffff}]) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0x0) lseek(r3, 0xfffffffffffffffc, 0x3) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) socket$unix(0x1, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = signalfd4(r2, &(0x7f0000000080)={[0x3]}, 0x8, 0x80000) r5 = dup(r4) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) 3.61611864s ago: executing program 0 (id=704): r0 = socket$inet6(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) (async) r1 = socket(0x0, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0220000000000000140003006272696467653000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="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"], 0x3c}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000380)={'wg2\x00'}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000020", @ANYRES16=r1, @ANYBLOB="000126bd70000000000017000000"], 0x14}}, 0x20008800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="df00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00500000000000000bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000700)=""/106, 0x6a}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/169, 0xa9}], 0x3, 0x0, 0x0) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000640)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x18) chdir(&(0x7f00000006c0)='./file1\x00') (async, rerun: 32) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) (rerun: 32) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 3.545162984s ago: executing program 4 (id=705): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xa89) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400c0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) fanotify_init(0x0, 0x0) write(r5, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) getpid() r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8915, 0x0) 3.544907371s ago: executing program 1 (id=706): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) r0 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002200)={0x0, 0x3, 0xa, 0x0, 0x8, 0x2}, &(0x7f0000002240)=0x14) r1 = syz_io_uring_setup(0x4171, &(0x7f0000000780)={0x0, 0x0, 0x20}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x9, 0x0, 0x0, 0x0, 0x15, 0x1, {0x1}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00000000009f3d355d57b22b69f6eb890764e340e6388aa3bfc07d7305892c82067c70"], 0x3c}}, 0x0) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000dfffffff00000000bbfc812622d4cefeff9b3900f5ffffff"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0xc0, &(0x7f00000021c0)=0x9, 0x0, 0x4) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r8, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffff7ffffffffe, 0x0, 0x100, 0x4, 0x8, 0x1}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r6, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB="cc0000001b00000000000000a9f90000000000000000000000000000000000000000ff02000000000000000000004000000100000000000000000000000000000000362f5ad7c89a672ee1e377c1bfe90171a97339104d6f3117c67a73d9b1ec6f9594c30e000000000a80481013dc5609286e2a53e566bacc8a138085b91e853dc17707b2674282af5398b767312724", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ff0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000c0015000000000000000000"], 0xcc}}, 0x0) 3.455639675s ago: executing program 2 (id=707): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080), 0x1) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000400)='./file0/file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x8000, 0x1, 0xfffffff7, 0xfffffffd, {{0x15, 0x4, 0x2, 0x9, 0x54, 0x64, 0x0, 0xf7, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@ssrr={0x89, 0xb, 0xcb, [@dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010102]}, @cipso={0x86, 0x32, 0x3, [{0x6, 0xa, "b7e3561fe0ef92f1"}, {0x1, 0x3, "18"}, {0x5, 0xd, "9a3d102780f4a8b270572b"}, {0x1, 0xb, "5e4a502263995579c5"}, {0x0, 0x7, "1ed1b9122d"}]}]}}}}}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x10, r1, 0x1, 0x1f, 0x6, @local}, 0x14) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) chdir(&(0x7f00000001c0)='./bus\x00') r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 3.221298699s ago: executing program 0 (id=709): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000200), 0x0) clock_adjtime(0x3f420f0000000000, &(0x7f0000000040)={0xd54}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 3.034776622s ago: executing program 1 (id=710): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) shutdown(r1, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r3 = epoll_create1(0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2275, &(0x7f00000018c0)) 3.004003485s ago: executing program 3 (id=711): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x141681, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000c, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r3, 0x8208200) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r4, 0x0) mbind(&(0x7f0000042000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xf, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x164) r5 = getpid() sched_setscheduler(r5, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r6, 0x0, 0x0) 2.649316119s ago: executing program 1 (id=712): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(0xffffffffffffffff, 0x8, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x200002d0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.619826862s ago: executing program 3 (id=713): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e80cb79677030006000718000002004909c722deee1edb0e4f20000000080012000200010000d20000006544f62c006c540203000100000000000080b20200000000152c000000cdff00000001020014bb000001000000202300001300030005000020"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) socket(0x80000000000000a, 0x2, 0x0) move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000001020101"], 0x18}}, 0x20000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/235) pwritev(r7, &(0x7f00000002c0)=[{&(0x7f00000010c0)}, {&(0x7f0000000400)="9b2f7e9dd799fe2bb80020307877a48044bdf07025b476cc9127b6e1eff4f9fa6fa5d37f1aea08d69d9bcdf479048e3555947e65a377a8001e3d8bf10f2e7a5dafd0d19abf7200cc32ff58e90d413f6351ea9069253f916aeb15306392cd85d7cb00825ad0147d323c474d8b32f3d98fc3ac9092b4491263", 0x78}, {&(0x7f0000000dc0)}, {0x0}], 0x4, 0x8, 0x5) ioctl$TCFLSH(r4, 0x540b, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@RTM_GETMDB={0x18, 0x56, 0x2fe, 0x70bd2a, 0x25dfdbfc, {0x7, r8}, ["", "", "", ""]}, 0x18}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.52179825s ago: executing program 4 (id=714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_sigsuspend(0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000180)=0x10) mknodat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4, 0x101) r1 = dup3(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r2}, 0x8) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000080)) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x10, @broadcast, 'vxcan1\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x7fffffff) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f000034d000/0x1000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000002c0)={0x18, 0x0, {0xc, @link_local, 'sit0\x00'}}, 0x1e) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r5, 0x0) 2.305245936s ago: executing program 1 (id=715): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) unshare(0x2000680) unshare(0x20040000) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 2.1141021s ago: executing program 3 (id=716): r0 = fanotify_init(0x200, 0x0) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x4800107b, r2, 0x0) (async, rerun: 64) preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000180100002020692500000000002420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000200051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.021079415s ago: executing program 1 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x54}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x3}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "9e973aa9c0910148b1606ac79ee9b7d7cde280956ee9b6ae94b6dedb3afe327806521bf01a53c154ee43828d7d7f00ec903a77eb119a1a43c22e2c4a71c69c54896e6928df8a7f57bb1df595679dba4799e40581b12ecf5419783a665bbc8c3dd86101fb43b0d35551d566c7d4faf162e42c79c7e2d8f6d2a147e861c03e9f4f89fff55fc9c9f0f6ed74b1bda721334cd2e799a131843ca9da799f055f79f6ab5ecfa6a91e9ed06c74689a96b611d4411bf0df697351aa"}, 0xc2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000000000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028004000100000000002c00018014000300ff020000000000000000000000000001cb00040020010000000000000000000000000001080007400000000018000680140004000000000000000000000000000000000133b95c66136afcb47b"], 0xac}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x10d, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$vim2m(&(0x7f0000000100), 0x1000007ff, 0x2) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 1.693332702s ago: executing program 3 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008095}, 0x4008005) 1.526499652s ago: executing program 3 (id=719): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000540)=0x2000000, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs(r1, &(0x7f0000000080)='fd/4\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c) dup2(0xffffffffffffffff, r5) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000500)=0x2, 0x4) 478.461837ms ago: executing program 1 (id=720): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) r0 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002200)={0x0, 0x3, 0xa, 0x0, 0x8, 0x2}, &(0x7f0000002240)=0x14) r1 = syz_io_uring_setup(0x4171, &(0x7f0000000780)={0x0, 0x0, 0x20}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x9, 0x0, 0x0, 0x0, 0x15, 0x1, {0x1}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00000000009f3d355d57b22b69f6eb890764e340e6388aa3bfc07d7305892c82067c70"], 0x3c}}, 0x0) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000dfffffff00000000bbfc812622d4cefeff9b3900f5ffffff"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0xc0, &(0x7f00000021c0)=0x9, 0x0, 0x4) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r8, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffff7ffffffffe, 0x0, 0x100, 0x4, 0x8, 0x1}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r6, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB="cc0000001b00000000000000a9f90000000000000000000000000000000000000000ff02000000000000000000004000000100000000000000000000000000000000362f5ad7c89a672ee1e377c1bfe90171a97339104d6f3117c67a73d9b1ec6f9594c30e000000000a80481013dc5609286e2a53e566bacc8a138085b91e853dc17707b2674282af5398b767312724", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ff0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000c0015000000000000000000"], 0xcc}}, 0x0) 285.193167ms ago: executing program 3 (id=721): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff16) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="1c000000400009000000000000000000020000000800020000000000aa8bd3d25b5c5f51a1fc42c61e63c3cf23f8e47fc551f8d6f330e20a5bda595a77b8cacc12ff42bf7b5b136684d0a9e1b4b82098a2db258c35c6ef5a0cf55de10faf76cf71a4c00039605f190ea4b66e2e1015c4d9cd93d99b84cb761856fed5fdb5"], 0x1c}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "28d7b07d54891881fe02c1203fe49607b9f26fdae8161583f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r3 = request_key(0x0, &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)=',\x00', r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000013c0)='net/ip6_tables_targets\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) keyctl$update(0x2, r3, &(0x7f0000001200)="11393c91c2306b5336505f8de37d77a170cb77311669e9c131beeef040e96671feea949feb871ec811041a8dd822c1e226609732225b2ea553d1cce449955a07a0f53dc6ee3a8a8aa97ee00e9f2f3e6ce344d8e1b9f4b3c80204a3e955046cbaf201b1292be257789a7985", 0x6b) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000), 0x4) connect$inet6(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) read$FUSE(r7, &(0x7f0000001400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000801, r8, &(0x7f0000003440)={0xeb194a5, 0x1, 0xa488, 0x9, 0x800, 0x8, 0x1, 0xfffffffffffffffb, 0xd}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001300), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000001340)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @exit], &(0x7f0000001280)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x4d, '\x00', 0x0, 0x15, r9}, 0x90) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r10, 0x5405, &(0x7f0000000140)) 149.787126ms ago: executing program 4 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f0000000340)='\x13vkoxnet0\x00\xc4\xeb1\xa4\x17\xd5\xf2|\xad\xc8\xde\xc2\xfe\xfad\xf9\xfa\xd2 >\xb85\x1b\f\xc4\xb9\x14^\x88\xd7F0\x99\xb5B\xed\xaa\x92[\x14\xc0\x1a\x8a\x96\x0f\xa8U\xae\xbc\xa4^\x95\xc3\xc5d\x8a\x91\xaa\xfe\x98\xb8\xc7\xc5\xbeRDT`\f/,l\b\xa3\xa6\xbd\x05\xa7 K\x153\x02\x12\xc8Y\xa8\xabB\x18\xc3\b\xe7\x0ei\x98\x1e \x04\xf4\xb7\xd51\xc6\x8c\xc5\xd9.8\x1b\xec/}\xd3M\xef\xc6.\xe8\xf5>.\x9f|\xa4\vF\n\x11I&\x1e\xbd\x06\xa2\xed\x01H\x12~\x9f\x0e\xb0\xf1Y\xda\xc4i\xf8\xae\x1eC\x9bs\xf8E\xee?\xd5;\x80O\x80z\xb9\xc5\x02>\x006\xacgU\xd2\xa8l\x86\xb8\xa0\x96c\xf0\xc2\xe8a\x00\x00\x8fU\xb0\xad\x1e\xf4\x87iU:\xc0\x9c*\xf7&\xb2\xc7\xecpu{3\xd5\x11\xee\xc30=\x8ey\"\xb0\x85)\xd0\xb4\xd7@\xc7\xb6\xc61\xd7z\x02\x8cSq\xe5\x13\x8e\x158\x95\xad\x92\x8aJJ\x9d\x88D]\xc4\xcd\xa3\xe3\xc4\xbc\xd0\x83\x01\xff', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0xec902, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) splice(r3, 0x0, r2, 0x0, 0x600, 0x0) fgetxattr(r1, &(0x7f0000003b80)=@known='trusted.overlay.opaque\x00', 0x0, 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES8=r1]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) chmod(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000030803000000000000000000000000000c0004800800064000000000000000"], 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r8, &(0x7f00000001c0)=""/200, 0xc8, 0x0) fcntl$setstatus(r8, 0x4, 0xc00) 0s ago: executing program 0 (id=723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendfile(r3, r4, 0x0, 0x7ffff000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0xff, 0x1, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast1, 0x20, 0x0, 0x5, 0x40}}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x2c0, 0x24, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x7, 0xfff1}, {0xffff, 0x5}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x8}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @qdisc_kind_options=@q_gred={{0x9}, {0x23c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x8}, @TCA_GRED_MAX_P={0x8, 0x4, 0x7a8b}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6b}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_LIMIT={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x200}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0xd, 0x1}}}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x200}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)='\'', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080), 0x4) lsetxattr$security_capability(&(0x7f0000000a40)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): hub 2-1:0.0: bad descriptor, ignoring hub [ 174.953923][ T8] hub 2-1:0.0: probe with driver hub failed with error -5 [ 174.968970][ T6355] kvm: emulating exchange as write [ 175.577407][ T8] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 175.818021][ T2562] usb 2-1: Failed to submit usb control message: -113 [ 175.874416][ T2562] usb 2-1: unable to send the bmi data to the device: -113 [ 175.923615][ T2562] usb 2-1: unable to get target info from device [ 175.960153][ T2562] usb 2-1: could not get target info (-113) [ 175.966119][ T2562] usb 2-1: could not probe fw (-113) [ 176.154684][ T5341] usb 2-1: USB disconnect, device number 10 [ 177.826552][ T6393] netlink: 'syz.4.287': attribute type 10 has an invalid length. [ 178.102943][ T6393] team0: Device hsr_slave_0 failed to register rx_handler [ 194.489900][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.496270][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.804098][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 206.808303][ T5240] Bluetooth: hci3: command 0x0406 tx timeout [ 206.814417][ T4611] Bluetooth: hci0: command 0x0406 tx timeout [ 227.005493][ T6461] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 227.424163][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.673607][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.683636][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.692785][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.703180][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.730930][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 227.738508][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.992076][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.541721][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.697093][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.718589][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.729365][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.755401][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.781578][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 228.791946][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.835010][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.843753][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.844644][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.861663][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.870489][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.878628][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 228.888553][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.889297][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.911324][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.927968][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.946071][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 228.964807][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.005624][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.015717][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.024229][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.034584][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.044849][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.054568][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.065243][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.567470][ T12] bridge_slave_1: left allmulticast mode [ 229.575870][ T12] bridge_slave_1: left promiscuous mode [ 229.585617][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.600832][ T12] bridge_slave_0: left allmulticast mode [ 229.606604][ T12] bridge_slave_0: left promiscuous mode [ 229.613458][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.842747][ T5232] Bluetooth: hci0: command tx timeout [ 230.012544][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.030356][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.041313][ T12] bond0 (unregistering): Released all slaves [ 230.474649][ T6465] chnl_net:caif_netlink_parms(): no params data found [ 230.564529][ T6471] chnl_net:caif_netlink_parms(): no params data found [ 230.623595][ T6475] chnl_net:caif_netlink_parms(): no params data found [ 230.635665][ T6469] chnl_net:caif_netlink_parms(): no params data found [ 230.649165][ T6473] chnl_net:caif_netlink_parms(): no params data found [ 230.762167][ T12] hsr_slave_0: left promiscuous mode [ 230.770992][ T12] hsr_slave_1: left promiscuous mode [ 230.777265][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.784904][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.796499][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.805165][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.829871][ T12] veth1_macvtap: left promiscuous mode [ 230.836088][ T12] veth0_macvtap: left promiscuous mode [ 230.842170][ T12] veth1_vlan: left promiscuous mode [ 230.847810][ T12] veth0_vlan: left promiscuous mode [ 230.890392][ T5232] Bluetooth: hci1: command tx timeout [ 231.048902][ T5238] Bluetooth: hci3: command tx timeout [ 231.054715][ T5232] Bluetooth: hci2: command tx timeout [ 231.120755][ T5232] Bluetooth: hci4: command tx timeout [ 231.385929][ T12] team0 (unregistering): Port device team_slave_1 removed [ 231.430241][ T12] team0 (unregistering): Port device team_slave_0 removed [ 231.919175][ T5232] Bluetooth: hci0: command tx timeout [ 232.200996][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.208669][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.215968][ T6471] bridge_slave_0: entered allmulticast mode [ 232.238999][ T6471] bridge_slave_0: entered promiscuous mode [ 232.250429][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.257607][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.267114][ T6471] bridge_slave_1: entered allmulticast mode [ 232.275159][ T6471] bridge_slave_1: entered promiscuous mode [ 232.332992][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.346070][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.353911][ T6465] bridge_slave_0: entered allmulticast mode [ 232.362541][ T6465] bridge_slave_0: entered promiscuous mode [ 232.454785][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.464441][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.475832][ T6469] bridge_slave_0: entered allmulticast mode [ 232.487466][ T6469] bridge_slave_0: entered promiscuous mode [ 232.536932][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.557070][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.578058][ T6465] bridge_slave_1: entered allmulticast mode [ 232.598554][ T6465] bridge_slave_1: entered promiscuous mode [ 232.608012][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.620569][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.630567][ T6475] bridge_slave_0: entered allmulticast mode [ 232.644901][ T6475] bridge_slave_0: entered promiscuous mode [ 232.674772][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.696590][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.707783][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.718507][ T6469] bridge_slave_1: entered allmulticast mode [ 232.731812][ T6469] bridge_slave_1: entered promiscuous mode [ 232.771368][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.779185][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.786537][ T6475] bridge_slave_1: entered allmulticast mode [ 232.794750][ T6475] bridge_slave_1: entered promiscuous mode [ 232.819611][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.896249][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.907447][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.915488][ T6473] bridge_slave_0: entered allmulticast mode [ 232.924481][ T6473] bridge_slave_0: entered promiscuous mode [ 232.958289][ T5232] Bluetooth: hci1: command tx timeout [ 232.971848][ T6475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.000891][ T6471] team0: Port device team_slave_0 added [ 233.034115][ T6469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.048095][ T6469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.058265][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.065483][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.073254][ T6473] bridge_slave_1: entered allmulticast mode [ 233.081322][ T6473] bridge_slave_1: entered promiscuous mode [ 233.105331][ T6465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.118315][ T5232] Bluetooth: hci2: command tx timeout [ 233.118786][ T5238] Bluetooth: hci3: command tx timeout [ 233.129961][ T6465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.145470][ T6475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.171101][ T6471] team0: Port device team_slave_1 added [ 233.198670][ T5238] Bluetooth: hci4: command tx timeout [ 233.291283][ T6475] team0: Port device team_slave_0 added [ 233.306837][ T6469] team0: Port device team_slave_0 added [ 233.317774][ T6469] team0: Port device team_slave_1 added [ 233.333077][ T6473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.346613][ T6473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.381787][ T6465] team0: Port device team_slave_0 added [ 233.423492][ T6475] team0: Port device team_slave_1 added [ 233.494897][ T6465] team0: Port device team_slave_1 added [ 233.502446][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.510769][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.540313][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.594560][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.601696][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.629202][ T6469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.669226][ T6473] team0: Port device team_slave_0 added [ 233.736509][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.748745][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.791404][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.845457][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.852951][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.883009][ T6475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.896568][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.904874][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.932463][ T6469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.948488][ T6473] team0: Port device team_slave_1 added [ 233.964255][ T6465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.971912][ T6465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.002083][ T5238] Bluetooth: hci0: command tx timeout [ 234.007690][ T6465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.023623][ T6465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.030750][ T6465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.057057][ T6465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.070567][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.079904][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.106995][ T6475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.231138][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.241917][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.268247][ T6473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.282937][ T6473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.290152][ T6473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.316868][ T6473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.357007][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.397384][ T6471] hsr_slave_0: entered promiscuous mode [ 234.404555][ T6471] hsr_slave_1: entered promiscuous mode [ 234.412115][ T6471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.421356][ T6471] Cannot create hsr debugfs directory [ 234.447811][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.576745][ T6465] hsr_slave_0: entered promiscuous mode [ 234.583399][ T6465] hsr_slave_1: entered promiscuous mode [ 234.592177][ T6465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.599948][ T6465] Cannot create hsr debugfs directory [ 234.611460][ T6475] hsr_slave_0: entered promiscuous mode [ 234.618042][ T6475] hsr_slave_1: entered promiscuous mode [ 234.624717][ T6475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.633367][ T6475] Cannot create hsr debugfs directory [ 234.663037][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.699706][ T6469] hsr_slave_0: entered promiscuous mode [ 234.706513][ T6469] hsr_slave_1: entered promiscuous mode [ 234.713487][ T6469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.721547][ T6469] Cannot create hsr debugfs directory [ 234.825512][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.980325][ T6473] hsr_slave_0: entered promiscuous mode [ 234.987023][ T6473] hsr_slave_1: entered promiscuous mode [ 235.001107][ T6473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.010087][ T6473] Cannot create hsr debugfs directory [ 235.038444][ T5238] Bluetooth: hci1: command tx timeout [ 235.198396][ T5238] Bluetooth: hci2: command tx timeout [ 235.198622][ T5232] Bluetooth: hci3: command tx timeout [ 235.278290][ T5232] Bluetooth: hci4: command tx timeout [ 235.737262][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.913866][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.048067][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.079581][ T5232] Bluetooth: hci0: command tx timeout [ 236.117417][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.382885][ T6471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.492078][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.626002][ T6471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.676710][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.771859][ T6471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.805657][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.877015][ T6471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.913374][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.119143][ T5232] Bluetooth: hci1: command tx timeout [ 237.127546][ T12] bridge_slave_1: left allmulticast mode [ 237.135705][ T12] bridge_slave_1: left promiscuous mode [ 237.141830][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.153926][ T12] bridge_slave_0: left allmulticast mode [ 237.160309][ T12] bridge_slave_0: left promiscuous mode [ 237.166116][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.180690][ T12] bridge_slave_1: left allmulticast mode [ 237.186402][ T12] bridge_slave_1: left promiscuous mode [ 237.192879][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.206489][ T12] bridge_slave_0: left allmulticast mode [ 237.214916][ T12] bridge_slave_0: left promiscuous mode [ 237.228537][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.278390][ T5232] Bluetooth: hci2: command tx timeout [ 237.278659][ T5238] Bluetooth: hci3: command tx timeout [ 237.368252][ T5238] Bluetooth: hci4: command tx timeout [ 238.304931][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.317268][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.330566][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 238.344987][ T12] bond0 (unregistering): Released all slaves [ 238.447256][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.459796][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.472290][ T12] bond0 (unregistering): Released all slaves [ 238.492522][ T12] bond1 (unregistering): Released all slaves [ 238.596814][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.608299][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.620137][ T12] bond0 (unregistering): Released all slaves [ 238.764526][ T6471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.791616][ T6471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.824924][ T6471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.940067][ T6471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.509891][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.657872][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.803769][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.810967][ T6431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.833662][ T6469] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.867187][ T6469] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.961388][ T6469] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.036282][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.043703][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.064006][ T6469] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.115940][ T12] hsr_slave_0: left promiscuous mode [ 240.125204][ T12] hsr_slave_1: left promiscuous mode [ 240.140944][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.158766][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.178847][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.186319][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.199923][ T12] hsr_slave_0: left promiscuous mode [ 240.205918][ T12] hsr_slave_1: left promiscuous mode [ 240.213303][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.222013][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.233252][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.241736][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.256132][ T12] hsr_slave_0: left promiscuous mode [ 240.263668][ T12] hsr_slave_1: left promiscuous mode [ 240.272159][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.280231][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.288551][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.295978][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.352543][ T12] veth1_macvtap: left promiscuous mode [ 240.358279][ T12] veth0_macvtap: left promiscuous mode [ 240.364071][ T12] veth1_vlan: left promiscuous mode [ 240.369623][ T12] veth0_vlan: left promiscuous mode [ 240.376136][ T12] veth1_macvtap: left promiscuous mode [ 240.381823][ T12] veth0_macvtap: left promiscuous mode [ 240.387503][ T12] veth1_vlan: left promiscuous mode [ 240.392872][ T12] veth0_vlan: left promiscuous mode [ 240.401057][ T12] veth1_macvtap: left promiscuous mode [ 240.406632][ T12] veth0_macvtap: left promiscuous mode [ 240.412594][ T12] veth1_vlan: left promiscuous mode [ 240.417894][ T12] veth0_vlan: left promiscuous mode [ 241.134219][ T12] team0 (unregistering): Port device team_slave_1 removed [ 241.170755][ T12] team0 (unregistering): Port device team_slave_0 removed [ 241.876714][ T12] team0 (unregistering): Port device team_slave_1 removed [ 241.929531][ T12] team0 (unregistering): Port device team_slave_0 removed [ 242.645945][ T12] team0 (unregistering): Port device team_slave_1 removed [ 242.687173][ T12] team0 (unregistering): Port device team_slave_0 removed [ 243.539262][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.653436][ T6465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.692810][ T6465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.723659][ T6465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.777799][ T6469] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.803656][ T6465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.842132][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.849348][ T6427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.915964][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.923248][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.069143][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.110623][ T6469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.137051][ T6469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.611654][ T6471] veth0_vlan: entered promiscuous mode [ 244.662163][ T6471] veth1_vlan: entered promiscuous mode [ 244.686070][ T6475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.722516][ T6475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.734784][ T6475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.745968][ T6475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.825318][ T6469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.894234][ T6465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.967828][ T6473] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 244.985599][ T6473] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.038032][ T6473] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.065958][ T6471] veth0_macvtap: entered promiscuous mode [ 245.090810][ T6465] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.115644][ T6471] veth1_macvtap: entered promiscuous mode [ 245.150387][ T6473] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.197504][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.204736][ T6433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.310877][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.318073][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.355788][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.376126][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.397501][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.423280][ T6469] veth0_vlan: entered promiscuous mode [ 245.475725][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.490226][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.503344][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.541448][ T6469] veth1_vlan: entered promiscuous mode [ 245.575549][ T6471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.585106][ T6471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.596034][ T6471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.604962][ T6471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.722667][ T6475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.866139][ T6475] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.925576][ T6469] veth0_macvtap: entered promiscuous mode [ 245.987041][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.994299][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.046421][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.053681][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.111324][ T6473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.123857][ T6469] veth1_macvtap: entered promiscuous mode [ 246.157602][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.178892][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.217810][ T6473] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.269550][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.292587][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.303242][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.314103][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.327978][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.351635][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.369545][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.380893][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.392892][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.404789][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.422903][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.430136][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.453878][ T6469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.463981][ T6469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.473066][ T6469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.482543][ T6469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.495290][ T6433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.506714][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.513912][ T6432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.518674][ T6433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.621747][ T6465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.808278][ T6431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.824328][ T6431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.937736][ T6431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.960964][ T6431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.123352][ T6465] veth0_vlan: entered promiscuous mode [ 247.148992][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 247.161004][ T6475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.398741][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.569938][ T58] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 247.629484][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.755217][ T6465] veth1_vlan: entered promiscuous mode [ 247.813954][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 247.898294][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 247.977262][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.069887][ T58] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf [ 248.091315][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.107035][ T25] usb 3-1: config 0 descriptor?? [ 248.123545][ T58] usb 2-1: Product: syz [ 248.134152][ T58] usb 2-1: SerialNumber: syz [ 248.159607][ T58] usb 2-1: config 0 descriptor?? [ 248.163988][ T6465] veth0_macvtap: entered promiscuous mode [ 248.209824][ T6465] veth1_macvtap: entered promiscuous mode [ 248.296225][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.309690][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.320157][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.348272][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.368225][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.379276][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.391999][ T6465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.441344][ T6473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.463301][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.497437][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.528280][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.548265][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.568234][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.584349][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.597747][ T6465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.164389][ T25] usbhid 3-1:0.0: can't add hid device: -32 [ 254.172046][ T5307] usb 2-1: USB disconnect, device number 11 [ 254.178284][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 255.939181][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.945544][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.716027][ T6465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.728802][ T9] usb 3-1: USB disconnect, device number 11 [ 258.749140][ T6465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.770060][ T6465] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.781157][ T6465] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.986407][ T6475] veth0_vlan: entered promiscuous mode [ 259.066368][ T6473] veth0_vlan: entered promiscuous mode [ 259.097404][ T6430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.124490][ T6430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.154270][ T6475] veth1_vlan: entered promiscuous mode [ 259.194055][ T6430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.196297][ T6473] veth1_vlan: entered promiscuous mode [ 259.211004][ T6430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.311677][ T6473] veth0_macvtap: entered promiscuous mode [ 259.377257][ T6473] veth1_macvtap: entered promiscuous mode [ 259.396058][ T6475] veth0_macvtap: entered promiscuous mode [ 259.435810][ T6475] veth1_macvtap: entered promiscuous mode [ 259.491931][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.513308][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.525184][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.536513][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.546853][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.560215][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.570539][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.582504][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.595450][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.606415][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.625449][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.636082][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.654871][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.665100][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.688625][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.709388][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.727121][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.737415][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.755325][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.782672][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.803192][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.822157][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.836065][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.861979][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.875736][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.897677][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.907988][ T6475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.920000][ T6475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.931968][ T6475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.956839][ T6475] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.974558][ T6475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.987715][ T6475] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.997131][ T6475] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.021057][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.032005][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.043464][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.054603][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.064820][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.077657][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.090194][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.101061][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.112421][ T6473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.123228][ T6473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.135602][ T6473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.179826][ T6473] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.190781][ T6473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.200392][ T6473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.209517][ T6473] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.394819][ T6435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.421558][ T6435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.492603][ T6435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.517284][ T6435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.562227][ T6430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.584124][ T6430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.600789][ T6435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.616679][ T6435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.790442][ T6790] 9pnet_fd: Insufficient options for proto=fd [ 263.235428][ T6802] random: crng reseeded on system resumption [ 264.060017][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.073223][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.084740][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.094226][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.103292][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 264.122414][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.130262][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 264.144598][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 264.162496][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 264.177898][ T5229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 264.190848][ T5229] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 264.201348][ T5229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 264.576379][ T6817] __nla_validate_parse: 1 callbacks suppressed [ 264.576416][ T6817] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.310'. [ 264.614380][ T6817] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.310'. [ 264.723480][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.941678][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.560669][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.214631][ T5232] Bluetooth: hci5: command tx timeout [ 266.238421][ T5232] Bluetooth: hci6: command tx timeout [ 266.432364][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.523658][ T6835] netlink: 72 bytes leftover after parsing attributes in process `syz.0.314'. [ 266.672377][ T6829] warning: `syz.4.312' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 266.844048][ T6688] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 266.893576][ T6807] chnl_net:caif_netlink_parms(): no params data found [ 266.974627][ T12] bridge_slave_1: left allmulticast mode [ 266.986062][ T12] bridge_slave_1: left promiscuous mode [ 267.002385][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.031889][ T12] bridge_slave_0: left allmulticast mode [ 267.045513][ T12] bridge_slave_0: left promiscuous mode [ 267.065872][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.078302][ T6688] usb 5-1: Using ep0 maxpacket: 16 [ 267.086302][ T6688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 267.106708][ T6688] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 267.140511][ T6688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.176673][ T6688] usb 5-1: config 0 descriptor?? [ 267.475581][ T6688] usbhid 5-1:0.0: can't add hid device: -71 [ 267.481693][ T6688] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 267.534451][ T6688] usb 5-1: USB disconnect, device number 9 [ 268.238487][ T5232] Bluetooth: hci5: command tx timeout [ 268.311657][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.321773][ T5232] Bluetooth: hci6: command tx timeout [ 268.341336][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.369048][ T12] bond0 (unregistering): Released all slaves [ 268.606484][ T6850] netlink: 'syz.0.316': attribute type 10 has an invalid length. [ 269.476762][ T6850] team0: Port device netdevsim0 added [ 269.549650][ T6810] chnl_net:caif_netlink_parms(): no params data found [ 270.135752][ T6867] netlink: 'syz.4.320': attribute type 1 has an invalid length. [ 270.318508][ T5232] Bluetooth: hci5: command tx timeout [ 270.341403][ T5277] libceph: connect (1)[c::]:6789 error -101 [ 270.377213][ T5277] libceph: mon0 (1)[c::]:6789 connect error [ 270.398478][ T5232] Bluetooth: hci6: command tx timeout [ 270.413735][ T5277] libceph: connect (1)[c::]:6789 error -101 [ 270.421370][ T6875] ceph: No mds server is up or the cluster is laggy [ 270.425454][ T5277] libceph: mon0 (1)[c::]:6789 connect error [ 270.773487][ T5277] libceph: connect (1)[c::]:6789 error -101 [ 270.808328][ T5277] libceph: mon0 (1)[c::]:6789 connect error [ 270.871319][ T6810] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.896997][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.912559][ T6810] bridge_slave_0: entered allmulticast mode [ 270.934702][ T6810] bridge_slave_0: entered promiscuous mode [ 271.407260][ T12] hsr_slave_0: left promiscuous mode [ 271.425376][ T12] hsr_slave_1: left promiscuous mode [ 272.026628][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.210589][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.399818][ T5232] Bluetooth: hci5: command tx timeout [ 272.481304][ T5232] Bluetooth: hci6: command tx timeout [ 273.073139][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.109916][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.359109][ T12] veth1_macvtap: left promiscuous mode [ 274.364722][ T12] veth0_macvtap: left promiscuous mode [ 274.383062][ T6901] netlink: 236 bytes leftover after parsing attributes in process `syz.0.323'. [ 274.396249][ T12] veth1_vlan: left promiscuous mode [ 274.407248][ T12] veth0_vlan: left promiscuous mode [ 274.413044][ T6901] netlink: 236 bytes leftover after parsing attributes in process `syz.0.323'. [ 274.738293][ T6688] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 274.764842][ T6907] binder: 6905:6907 ioctl 4018620d 0 returned -22 [ 274.943488][ T6688] usb 1-1: Using ep0 maxpacket: 8 [ 274.976374][ T6688] usb 1-1: config 64 has an invalid interface number: 19 but max is 0 [ 274.984819][ T6688] usb 1-1: config 64 has no interface number 0 [ 274.998285][ T6688] usb 1-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 136 [ 275.012980][ T6688] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 275.032812][ T6688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.077178][ T6901] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 275.122159][ T6688] usb 1-1: probing VID:PID(2201:012C) [ 275.153634][ T6688] usb 1-1: vub300 testing BULK OUT EndPoint(0) 02 [ 275.173589][ T5307] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 275.182738][ T6688] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 275.235020][ T6688] vub300 1-1:64.19: probe with driver vub300 failed with error -22 [ 275.427258][ T5307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.428446][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.449457][ T5307] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.459773][ T5307] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 275.490321][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.492853][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.522936][ T12] team0 (unregistering): Port device team_slave_1 removed [ 275.540511][ T5307] usb 4-1: config 0 descriptor?? [ 275.591916][ T5277] usb 1-1: USB disconnect, device number 14 [ 275.637847][ T12] team0 (unregistering): Port device team_slave_0 removed [ 276.415107][ T6810] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.440885][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.458820][ T6810] bridge_slave_1: entered allmulticast mode [ 276.479871][ T6810] bridge_slave_1: entered promiscuous mode [ 276.505749][ T6903] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.324'. [ 276.542025][ T6807] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.575905][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.598849][ T6807] bridge_slave_0: entered allmulticast mode [ 276.624652][ T6807] bridge_slave_0: entered promiscuous mode [ 276.668612][ T6807] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.683537][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.692714][ T6807] bridge_slave_1: entered allmulticast mode [ 276.706971][ T6807] bridge_slave_1: entered promiscuous mode [ 276.884951][ T6810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.917003][ T6810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.948653][ T6807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.070429][ T6807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.098926][ T6810] team0: Port device team_slave_0 added [ 277.259015][ T6810] team0: Port device team_slave_1 added [ 278.529873][ T6807] team0: Port device team_slave_0 added [ 278.550779][ T6807] team0: Port device team_slave_1 added [ 278.693412][ T6810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.785494][ T6933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.879068][ T6810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.905004][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.596173][ T6810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.672237][ T6810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.684619][ T6810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.737535][ T6810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.975879][ T46] usb 4-1: USB disconnect, device number 16 [ 280.072448][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.089471][ T6942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.331'. [ 280.100316][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.126229][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.171074][ T6807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.509721][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.618977][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.005341][ T6807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.191120][ T6810] hsr_slave_0: entered promiscuous mode [ 281.237408][ T6810] hsr_slave_1: entered promiscuous mode [ 281.256768][ T6810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.264976][ T6810] Cannot create hsr debugfs directory [ 281.270934][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 281.388863][ T5277] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 281.452677][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.488481][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 281.571640][ T6967] random: crng reseeded on system resumption [ 281.825294][ T6807] hsr_slave_0: entered promiscuous mode [ 281.840710][ T6807] hsr_slave_1: entered promiscuous mode [ 281.856013][ T6807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.867881][ T6807] Cannot create hsr debugfs directory [ 281.916940][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.952193][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.977644][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.996303][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.028303][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.082537][ T46] usb 5-1: config 0 descriptor?? [ 282.159763][ T5277] usb 1-1: Using ep0 maxpacket: 32 [ 282.177133][ T5277] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 175 [ 282.200418][ T5277] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 282.210420][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.218614][ T5277] usb 1-1: Product: syz [ 282.222901][ T5277] usb 1-1: Manufacturer: syz [ 282.226072][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.227510][ T5277] usb 1-1: SerialNumber: syz [ 282.244650][ T5277] usb 1-1: config 0 descriptor?? [ 282.270047][ T6955] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.317261][ T5277] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 282.445561][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.524042][ T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 282.551656][ T46] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 282.579673][ T46] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 282.589759][ T6953] loop0: detected capacity change from 0 to 128 [ 282.633129][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.701634][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.785928][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.868636][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.043266][ T12] bridge_slave_1: left allmulticast mode [ 283.073224][ T6434] usb 1-1: Failed to submit usb control message: -71 [ 283.074525][ T5277] usb 1-1: USB disconnect, device number 15 [ 283.080310][ T6434] usb 1-1: unable to send the bmi data to the device: -71 [ 283.080357][ T6434] usb 1-1: unable to get target info from device [ 283.080374][ T6434] usb 1-1: could not get target info (-71) [ 283.080724][ T6434] usb 1-1: could not probe fw (-71) [ 283.111931][ T12] bridge_slave_1: left promiscuous mode [ 283.117801][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.159896][ T12] bridge_slave_0: left allmulticast mode [ 283.205956][ T12] bridge_slave_0: left promiscuous mode [ 283.231030][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.901538][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.927348][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.952186][ T12] bond0 (unregistering): Released all slaves [ 284.982220][ T7000] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 285.190874][ T6688] usb 5-1: USB disconnect, device number 10 [ 285.550742][ T12] hsr_slave_0: left promiscuous mode [ 285.561853][ T12] hsr_slave_1: left promiscuous mode [ 285.574453][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.592795][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.627685][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.648484][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.770720][ T12] veth1_macvtap: left promiscuous mode [ 285.776339][ T12] veth0_macvtap: left promiscuous mode [ 285.818620][ T12] veth1_vlan: left promiscuous mode [ 285.830837][ T12] veth0_vlan: left promiscuous mode [ 287.615808][ T12] team0 (unregistering): Port device team_slave_1 removed [ 287.661132][ T12] team0 (unregistering): Port device team_slave_0 removed [ 287.686606][ T7033] binder: 7031:7033 ioctl c0306201 20001a80 returned -14 [ 287.989469][ T29] audit: type=1326 audit(1724511140.605:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cb79e79 code=0x7ffc0000 [ 288.025881][ T29] audit: type=1326 audit(1724511140.625:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cb79e79 code=0x7ffc0000 [ 288.057401][ T29] audit: type=1326 audit(1724511140.625:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6c9cb79e79 code=0x7ffc0000 [ 288.087201][ T29] audit: type=1326 audit(1724511140.625:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cb79e79 code=0x7ffc0000 [ 288.122932][ T29] audit: type=1326 audit(1724511140.625:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c9cb79e79 code=0x7ffc0000 [ 288.145613][ T29] audit: type=1326 audit(1724511140.625:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cb79e79 code=0x7ffc0000 [ 288.167143][ T29] audit: type=1326 audit(1724511140.625:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cb79e79 code=0x7ffc0000 [ 288.414147][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 288.881896][ T6810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 288.901378][ T6810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.046990][ T6810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.077829][ T6810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.339432][ T5277] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 290.155209][ T6810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.251339][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 290.266746][ T6810] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.289509][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.306857][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.314092][ T6430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.329521][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.361415][ T5277] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 290.377913][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.423660][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.425733][ T5277] usb 1-1: config 0 descriptor?? [ 290.430892][ T6430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.662575][ T6807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.683060][ T6807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 290.716982][ T6807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 290.746963][ T6807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 290.788649][ T6688] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 290.917971][ T5277] mcp2200 0003:04D8:00DF.0007: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.0-1/input0 [ 291.002764][ T6688] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 291.038459][ T6688] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 291.046614][ T6688] usb 5-1: Product: syz [ 291.075274][ T6807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.079091][ T6688] usb 5-1: Manufacturer: syz [ 291.086533][ T6688] usb 5-1: SerialNumber: syz [ 291.119589][ T58] usb 1-1: USB disconnect, device number 16 [ 291.130043][ T6688] usb 5-1: config 0 descriptor?? [ 291.187023][ T6807] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.251549][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.258866][ T6430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.281850][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.289125][ T6430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.355846][ T7090] random: crng reseeded on system resumption [ 291.358568][ T6688] hso 5-1:0.0: Failed to find INT IN ep [ 291.368679][ T6810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.376404][ T6688] usb-storage 5-1:0.0: USB Mass Storage device detected [ 291.415672][ T6807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.433317][ T6807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.647378][ T6688] usb 5-1: USB disconnect, device number 11 [ 291.827464][ T6810] veth0_vlan: entered promiscuous mode [ 291.875161][ T6810] veth1_vlan: entered promiscuous mode [ 292.005125][ T6810] veth0_macvtap: entered promiscuous mode [ 292.046309][ T6810] veth1_macvtap: entered promiscuous mode [ 292.170032][ T6810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.197558][ T6810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.228459][ T6810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.259359][ T6810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.286500][ T6810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.317612][ T6810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.347143][ T6810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.374341][ T6810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.426220][ T6810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.497245][ T6807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.526354][ T6810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.578292][ T6810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.614414][ T6810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.653660][ T6810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.696626][ T6810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.718047][ T6810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.735330][ T6810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.747406][ T6810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.776779][ T6810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.832936][ T6810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.851234][ T6810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.867276][ T6810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.886161][ T6810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.306355][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.354824][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.392205][ T6807] veth0_vlan: entered promiscuous mode [ 293.539118][ T6807] veth1_vlan: entered promiscuous mode [ 293.593504][ T6434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.617322][ T6434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.751823][ T6807] veth0_macvtap: entered promiscuous mode [ 293.797279][ T6807] veth1_macvtap: entered promiscuous mode [ 293.903710][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.965537][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.044390][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.126402][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.136594][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.549935][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.748199][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.819934][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.905568][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.957342][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.007882][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.392298][ T7148] netlink: 276 bytes leftover after parsing attributes in process `syz.4.366'. [ 296.729254][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.760928][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.798618][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.825232][ T7146] process 'syz.4.366' launched './file0' with NULL argv: empty string added [ 296.878948][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.898070][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.938197][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.948060][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.988219][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.008428][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.045574][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.088860][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.129692][ T58] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 297.154202][ T6807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.192958][ T6807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.238156][ T6807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.259729][ T6807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.318354][ T29] audit: type=1326 audit(1724511149.915:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7156 comm="syz.0.369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f003e379e79 code=0x0 [ 297.364627][ T58] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 297.410867][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.444750][ T58] usb 5-1: Product: syz [ 297.465405][ T58] usb 5-1: Manufacturer: syz [ 297.480752][ T58] usb 5-1: SerialNumber: syz [ 297.521715][ T58] usb 5-1: config 0 descriptor?? [ 297.766915][ T58] usb 5-1: Firmware version (0.0) predates our first public release. [ 297.809279][ T58] usb 5-1: Please update to version 0.2 or newer [ 297.821220][ T6427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.867896][ T6427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.962017][ T58] usb 5-1: USB disconnect, device number 12 [ 297.989985][ T6427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.000244][ T5273] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 298.023103][ T6427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.252476][ T5273] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.294596][ T5273] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 298.321781][ T5273] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.342344][ T5273] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.354981][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.395872][ T5273] usb 3-1: Product: syz [ 298.410884][ T5273] usb 3-1: Manufacturer: syz [ 298.613944][ T5273] usb 3-1: SerialNumber: syz [ 300.095688][ T58] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 300.281533][ T58] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 300.984910][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.022904][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.090120][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 301.348297][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.361879][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.450992][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 301.598286][ T5232] Bluetooth: hci0: command 0x0406 tx timeout [ 301.775010][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.828451][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.841082][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 301.957368][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.224011][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.237394][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.276358][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.293340][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 302.324199][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.363213][ T58] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.796929][ T58] usb 2-1: config 0 interface 0 has no altsetting 0 [ 302.867557][ T58] usb 2-1: unable to read config index 5 descriptor/start: -71 [ 302.920321][ T7236] random: crng reseeded on system resumption [ 303.139954][ T58] usb 2-1: can't read configurations, error -71 [ 303.224125][ T5273] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 303.269879][ T5273] cdc_ncm 3-1:1.0: bind() failure [ 303.323927][ T5273] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 303.370156][ T5273] cdc_ncm 3-1:1.1: bind() failure [ 303.421451][ T5273] usb 3-1: USB disconnect, device number 12 [ 304.068753][ T7245] netlink: 'syz.2.386': attribute type 3 has an invalid length. [ 304.129722][ T7245] netlink: 'syz.2.386': attribute type 11 has an invalid length. [ 304.191505][ T7245] netlink: 120028 bytes leftover after parsing attributes in process `syz.2.386'. [ 304.640020][ T5229] Bluetooth: hci6: command tx timeout [ 307.834449][ T7298] team0: entered promiscuous mode [ 307.856293][ T7298] team_slave_0: entered promiscuous mode [ 307.907525][ T7298] team_slave_1: entered promiscuous mode [ 307.990006][ T7306] netlink: 172 bytes leftover after parsing attributes in process `syz.1.399'. [ 308.011416][ T7298] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 308.045378][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.399'. [ 308.089760][ T7298] team0: left promiscuous mode [ 308.106913][ T7298] team_slave_0: left promiscuous mode [ 308.133158][ T7298] team_slave_1: left promiscuous mode [ 308.163945][ T7298] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 310.385640][ T7331] sp0: Synchronizing with TNC [ 311.268237][ T6688] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 312.198979][ T6688] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.268314][ T6688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.307020][ T6688] usb 1-1: Product: syz [ 312.337626][ T6688] usb 1-1: Manufacturer: syz [ 312.353025][ T6688] usb 1-1: SerialNumber: syz [ 312.844959][ T6688] cdc_ncm 1-1:1.0: bind() failure [ 312.930008][ T6688] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 312.995086][ T6688] cdc_ncm 1-1:1.1: bind() failure [ 313.111284][ T6688] usb 1-1: USB disconnect, device number 17 [ 313.768381][ T29] audit: type=1326 audit(1724511166.365:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7378 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cb79e79 code=0x7fc00000 [ 314.752412][ T29] audit: type=1326 audit(1724511167.355:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7378 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c9cb79e79 code=0x7fc00000 [ 315.560576][ T58] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 315.678273][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 315.768351][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 315.783554][ T58] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 315.801512][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.824217][ T58] usb 1-1: config 0 descriptor?? [ 315.835449][ T58] usb 1-1: bad CDC descriptors [ 316.019417][ T7441] sp0: Synchronizing with TNC [ 316.075523][ T7418] netlink: 'syz.0.424': attribute type 21 has an invalid length. [ 316.188314][ T7447] xt_bpf: check failed: parse error [ 317.368802][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.375397][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.542263][ T6688] usb 1-1: USB disconnect, device number 18 [ 317.645933][ T7466] VFS: could not find a valid V7 on nullb0. [ 320.327401][ T7497] program syz.0.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.085723][ T7553] UBIFS error (pid: 7553): cannot open "./file0", error -22 [ 323.269233][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.452'. [ 323.659654][ T6688] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 323.715810][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 323.733034][ T7576] netlink: 44 bytes leftover after parsing attributes in process `syz.4.455'. [ 323.768167][ T6431] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 323.887596][ T6688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.929443][ T6688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.958821][ T6688] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 323.967925][ T6688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.012356][ T6688] usb 3-1: config 0 descriptor?? [ 324.057067][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 324.456711][ T6688] usbhid 3-1:0.0: can't add hid device: -71 [ 324.467770][ T6688] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 324.524785][ T6688] usb 3-1: USB disconnect, device number 13 [ 324.799899][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 325.229287][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 325.252159][ T7618] netlink: 'syz.2.467': attribute type 4 has an invalid length. [ 325.277013][ T7618] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.467'. [ 325.450322][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 325.483761][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.521914][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 325.568341][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.609847][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 325.630798][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 325.647209][ T25] usb 5-1: Product: syz [ 325.652249][ T25] usb 5-1: Manufacturer: syz [ 325.677189][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 325.690141][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 325.719233][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 325.746899][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 325.816675][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 325.867904][ T7630] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 328.020664][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 328.295262][ T25] usb 5-1: USB disconnect, device number 13 [ 328.534931][ T7658] netlink: 64 bytes leftover after parsing attributes in process `syz.2.478'. [ 328.816450][ T5273] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 329.020360][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.036923][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.057235][ T5273] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 329.075443][ T7667] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 329.324011][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.596639][ T5229] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 332.606809][ T5229] Bluetooth: hci3: Injecting HCI hardware error event [ 332.615447][ T5229] Bluetooth: hci3: hardware error 0x00 [ 332.693289][ T5273] usb 5-1: config 0 descriptor?? [ 332.870591][ T5273] usb 5-1: can't set config #0, error -71 [ 332.910959][ T5273] usb 5-1: USB disconnect, device number 14 [ 333.421496][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 333.651811][ T7683] netlink: 'syz.2.484': attribute type 16 has an invalid length. [ 333.716865][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 333.727826][ T7685] netlink: 44 bytes leftover after parsing attributes in process `syz.4.485'. [ 334.283835][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 335.388975][ T5229] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 335.458289][ T5280] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 335.622013][ T7705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.493'. [ 335.730591][ T5280] usb 4-1: Using ep0 maxpacket: 8 [ 335.894103][ T5280] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 336.756049][ T5280] usb 4-1: config 0 has no interface number 0 [ 336.768600][ T5280] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.795225][ T5280] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 336.825303][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.871261][ T5280] usb 4-1: config 0 descriptor?? [ 336.914132][ T5280] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 336.999411][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 337.037491][ T5280] usb 4-1: USB disconnect, device number 18 [ 337.053163][ T7716] netlink: 44 bytes leftover after parsing attributes in process `syz.0.497'. [ 337.087520][ T5280] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 337.253471][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.499'. [ 337.280024][ T7724] netlink: 72 bytes leftover after parsing attributes in process `syz.3.500'. [ 337.287269][ T7727] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.501'. [ 337.337993][ T7724] dvmrp0: entered allmulticast mode [ 338.740141][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 339.054128][ T7747] xt_HMARK: spi-set and port-set can't be combined [ 339.153126][ T7748] syz.2.506: attempt to access beyond end of device [ 339.153126][ T7748] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 339.166918][ T7748] hpfs: hpfs_map_sector(): read error [ 340.034392][ T29] audit: type=1326 audit(2000000014.390:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7756 comm="syz.0.511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f003e379e79 code=0x0 [ 340.122715][ T6688] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 340.169515][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 340.185387][ T7762] netlink: 'syz.4.513': attribute type 1 has an invalid length. [ 340.197127][ T7762] netlink: 9116 bytes leftover after parsing attributes in process `syz.4.513'. [ 340.206640][ T7762] netlink: 'syz.4.513': attribute type 1 has an invalid length. [ 340.214707][ T7762] netlink: 209 bytes leftover after parsing attributes in process `syz.4.513'. [ 340.274105][ T7762] netdevsim netdevsim4: Direct firmware load for WZ failed with error -2 [ 340.278493][ T5278] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 340.299251][ T7762] netdevsim netdevsim4: Falling back to sysfs fallback for: WZ [ 340.328566][ T6688] usb 2-1: Using ep0 maxpacket: 8 [ 340.335237][ T6688] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 340.361060][ T6688] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 340.390414][ T6688] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.420496][ T6688] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.433979][ T6688] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.462653][ T6688] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 340.475379][ T6688] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 340.489934][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 340.499750][ T5278] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 340.512413][ T6688] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.525609][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.543178][ T6688] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.567980][ T5278] usb 4-1: config 0 descriptor?? [ 340.601534][ T5278] kobil_sct 4-1:0.0: required endpoints missing [ 340.611870][ T6688] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.653397][ T6688] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 340.670102][ T6688] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 340.738276][ T6688] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.780795][ T6688] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.805415][ T5278] usb 4-1: USB disconnect, device number 19 [ 340.824086][ T6688] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.895875][ T6688] usb 2-1: string descriptor 0 read error: -22 [ 340.908647][ T6688] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 340.930729][ T6688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.956994][ T6688] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 341.167519][ T5278] usb 2-1: USB disconnect, device number 14 [ 342.583258][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 342.778206][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 342.792752][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.837025][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.869526][ T25] usb 1-1: New USB device found, idVendor=0483, idProduct=3261, bcdDevice= 0.40 [ 342.887643][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.896389][ T25] usb 1-1: Product: syz [ 342.943692][ T25] usb 1-1: Manufacturer: syz [ 342.977999][ T25] usb 1-1: SerialNumber: syz [ 343.137273][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 343.244751][ T25] usbhid 1-1:1.0: can't add hid device: -71 [ 343.267419][ T25] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 343.298340][ T5278] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 343.302180][ T25] usb 1-1: USB disconnect, device number 19 [ 343.518472][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 343.561800][ T5278] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 343.588428][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.630005][ T5278] usb 2-1: config 0 descriptor?? [ 343.666813][ T5278] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 343.678589][ T7803] input: syz0 as /devices/virtual/input/input14 [ 344.745945][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.773572][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.807408][ T5278] gspca_sonixj: reg_r err -32 [ 344.818388][ T5278] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 344.918266][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 345.138496][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 345.176833][ T25] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 345.226808][ T25] usb 3-1: can't read configurations, error -22 [ 345.418490][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 345.618277][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 345.639585][ T25] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 345.647996][ T25] usb 3-1: can't read configurations, error -22 [ 345.657655][ T25] usb usb3-port1: attempt power cycle [ 345.718784][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 346.038201][ T5278] usb 2-1: USB disconnect, device number 15 [ 346.115740][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 346.184587][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 346.193240][ T25] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 346.213340][ T25] usb 3-1: can't read configurations, error -22 [ 346.553778][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 346.604882][ T7845] hub 6-0:1.0: USB hub found [ 346.612304][ T7845] hub 6-0:1.0: 1 port detected [ 346.806204][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 346.826905][ T25] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 346.843339][ T25] usb 3-1: can't read configurations, error -22 [ 346.855026][ T25] usb usb3-port1: unable to enumerate USB device [ 347.680814][ T7865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.958558][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 348.519021][ T29] audit: type=1326 audit(2000000022.880:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.3.551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c9cb79e79 code=0x0 [ 348.981912][ T7901] input: syz0 as /devices/virtual/input/input15 [ 349.088258][ T5277] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 349.408249][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 349.418241][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 349.425649][ T5277] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 349.435520][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.446962][ T5277] usb 3-1: config 0 descriptor?? [ 349.487016][ T5277] usb 3-1: unknown interface protocol 0x3f, assuming v1 [ 349.494456][ T5277] usb 3-1: cannot find UAC_HEADER [ 349.702811][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 350.141949][ T5277] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 350.158980][ T7895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.200723][ T7895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.236742][ T7672] udevd[7672]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.301946][ T25] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 350.311281][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.328158][ T25] usb 1-1: Product: syz [ 350.332385][ T25] usb 1-1: Manufacturer: syz [ 350.337366][ T25] usb 1-1: SerialNumber: syz [ 350.361709][ T25] usb 1-1: config 0 descriptor?? [ 350.375327][ T7895] (syz.2.554,7895,0):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 350.457446][ T5277] usb 3-1: USB disconnect, device number 18 [ 350.540068][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 350.570878][ T25] usb 1-1: ignoring: not an USB2CAN converter [ 350.709539][ T5273] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 350.851857][ T5277] usb 1-1: USB disconnect, device number 20 [ 350.886671][ T7935] input: syz0 as /devices/virtual/input/input16 [ 350.966996][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 350.992184][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.009547][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.032260][ T5273] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 351.052670][ T5273] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 351.062852][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.096996][ T5273] usb 5-1: config 0 descriptor?? [ 351.519266][ T5273] apple 0003:05AC:0274.0008: item fetching failed at offset 6/70 [ 351.551278][ T5273] apple 0003:05AC:0274.0008: parse failed [ 351.563415][ T5273] apple 0003:05AC:0274.0008: probe with driver apple failed with error -22 [ 351.740276][ T7921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.774327][ T7921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.788882][ T7956] syz.3.572(7956): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 353.532806][ T6688] usb 5-1: USB disconnect, device number 15 [ 355.358571][ T5232] Bluetooth: hci4: command 0x0406 tx timeout [ 356.131717][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 356.167465][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.586'. [ 357.309380][ T8076] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.592'. [ 357.428611][ T5277] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 357.446790][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 357.496629][ T5273] IPVS: starting estimator thread 0... [ 357.609561][ T8096] IPVS: using max 27 ests per chain, 64800 per kthread [ 357.639386][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 357.647078][ T5277] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 357.661412][ T5277] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 357.696850][ T5277] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 357.734582][ T5277] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 357.775285][ T5277] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.817464][ T5277] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 357.831189][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.075139][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 358.114031][ T5277] usb 3-1: GET_CAPABILITIES returned 0 [ 358.140414][ T5277] usbtmc 3-1:16.0: can't read capabilities [ 360.149349][ T5279] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 360.368303][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 360.387627][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.442671][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.498680][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 360.557268][ T5279] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 360.578162][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.603472][ T5279] usb 1-1: config 0 descriptor?? [ 360.829613][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.876599][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.988503][ T5279] usbhid 1-1:0.0: can't add hid device: -71 [ 361.021345][ T5279] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 361.062219][ T5279] usb 1-1: USB disconnect, device number 21 [ 361.212162][ T8197] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 361.224840][ T8197] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 361.297336][ T8197] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 361.308685][ T8197] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 361.351214][ T6688] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 361.468234][ T5277] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 361.542103][ T6688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.558173][ T6688] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.591788][ T6688] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.602423][ T6688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.627261][ T6688] usb 5-1: config 0 descriptor?? [ 361.710996][ T5277] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 361.729301][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.753760][ T5277] usb 4-1: Product: syz [ 361.769512][ T5277] usb 4-1: Manufacturer: syz [ 361.780543][ T5277] usb 4-1: SerialNumber: syz [ 361.804952][ T5277] usb 4-1: config 0 descriptor?? [ 361.850440][ T5277] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 361.939750][ T5277] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 361.980892][ T5277] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 362.584828][ T8237] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 325119 (only 8 groups) [ 369.044309][ T6688] usbhid 5-1:0.0: can't add hid device: -32 [ 369.081478][ T6688] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 369.283165][ T25] usb 3-1: USB disconnect, device number 19 [ 369.488958][ T46] usb 4-1: USB disconnect, device number 20 [ 369.504848][ T6688] usb 5-1: USB disconnect, device number 16 [ 370.642623][ T8286] dvmrp0: entered allmulticast mode [ 370.795824][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 371.115749][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.125487][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.153342][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.186843][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.208209][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 371.216977][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.506062][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.532930][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.547529][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.596474][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.604623][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 372.614909][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.916416][ T6427] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.964330][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 372.974378][ T8447] bridge_slave_1: left allmulticast mode [ 372.983230][ T8447] bridge_slave_1: left promiscuous mode [ 372.991523][ T8447] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.003292][ T8447] bridge_slave_0: left allmulticast mode [ 373.009545][ T8447] bridge_slave_0: left promiscuous mode [ 373.015874][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.078189][ T46] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 373.126039][ T8302] chnl_net:caif_netlink_parms(): no params data found [ 373.175252][ T6427] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.258436][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 373.273224][ T46] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.287971][ T5240] Bluetooth: hci1: command tx timeout [ 373.308611][ T46] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.331483][ T46] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 373.350435][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 373.357262][ T46] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 373.376698][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.390524][ T6427] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.423139][ T46] usb 2-1: config 0 descriptor?? [ 373.529389][ T6427] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.623913][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.631615][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.640302][ T8302] bridge_slave_0: entered allmulticast mode [ 373.657744][ T8302] bridge_slave_0: entered promiscuous mode [ 373.676545][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.703043][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.711209][ T8302] bridge_slave_1: entered allmulticast mode [ 373.720323][ T8302] bridge_slave_1: entered promiscuous mode [ 373.853964][ T8302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.922490][ T8302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.940925][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 374.111818][ T6427] bridge_slave_1: left allmulticast mode [ 374.117515][ T6427] bridge_slave_1: left promiscuous mode [ 374.144995][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.153577][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 374.182881][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 374.206737][ T6427] bridge_slave_0: left allmulticast mode [ 374.213589][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 374.226409][ T6427] bridge_slave_0: left promiscuous mode [ 374.232473][ T25] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 374.232508][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.232534][ T25] usb 1-1: Product: syz [ 374.232552][ T25] usb 1-1: Manufacturer: syz [ 374.232571][ T25] usb 1-1: SerialNumber: syz [ 374.253727][ T25] usb 1-1: config 0 descriptor?? [ 374.286542][ T8676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.302140][ T25] usb 1-1: no audio or video endpoints found [ 374.329470][ T8676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.354706][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.718699][ T5240] Bluetooth: hci2: command tx timeout [ 374.881464][ T6688] usb 1-1: USB disconnect, device number 22 [ 375.040731][ T6427] dvmrp0 (unregistering): left allmulticast mode [ 375.329378][ T6427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.358240][ T6427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.358494][ T5240] Bluetooth: hci1: command tx timeout [ 375.384666][ T6427] bond0 (unregistering): Released all slaves [ 375.425916][ T8302] team0: Port device team_slave_0 added [ 375.447621][ T8360] chnl_net:caif_netlink_parms(): no params data found [ 375.616481][ T8302] team0: Port device team_slave_1 added [ 376.166203][ T8302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.185800][ T8302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.281903][ T8759] loop0: detected capacity change from 0 to 7 [ 376.611404][ T8759] Dev loop0: unable to read RDB block 7 [ 376.618978][ T8759] loop0: unable to read partition table [ 376.626307][ T8759] loop0: partition table beyond EOD, truncated [ 376.632848][ T8759] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 376.632848][ T8759] ) failed (rc=-5) [ 376.988313][ T5240] Bluetooth: hci2: command tx timeout [ 377.048149][ T8302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.068753][ T8676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.096503][ T8302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.317677][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 377.323784][ T8302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.325483][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 377.751071][ T5240] Bluetooth: hci1: command tx timeout [ 378.171995][ T8302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.253607][ T46] usb 2-1: USB disconnect, device number 16 [ 378.560889][ T8792] bond0: entered promiscuous mode [ 378.571751][ T8792] bond_slave_0: entered promiscuous mode [ 378.577551][ T8792] bond_slave_1: entered promiscuous mode [ 378.807873][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.814379][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.915010][ T8792] bond0: left promiscuous mode [ 378.923261][ T8792] bond_slave_0: left promiscuous mode [ 378.932198][ T8792] bond_slave_1: left promiscuous mode [ 378.940096][ T8804] tipc: Failed to obtain node identity [ 378.947803][ T8804] tipc: Enabling of bearer rejected, failed to enable media [ 379.040606][ T5240] Bluetooth: hci2: command tx timeout [ 379.140812][ T8827] bond0: (slave bond_slave_0): Releasing backup interface [ 379.150613][ T8360] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.173417][ T8360] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.188722][ T8360] bridge_slave_0: entered allmulticast mode [ 379.206519][ T8360] bridge_slave_0: entered promiscuous mode [ 379.235650][ T8360] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.250943][ T8360] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.259644][ T8360] bridge_slave_1: entered allmulticast mode [ 379.273690][ T8360] bridge_slave_1: entered promiscuous mode [ 379.388277][ T8302] hsr_slave_0: entered promiscuous mode [ 379.423372][ T8302] hsr_slave_1: entered promiscuous mode [ 379.478455][ T8302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.509540][ T8302] Cannot create hsr debugfs directory [ 379.793082][ T8360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.829254][ T5273] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 379.848295][ T5240] Bluetooth: hci1: command tx timeout [ 379.855578][ T6427] hsr_slave_0: left promiscuous mode [ 379.879459][ T6427] hsr_slave_1: left promiscuous mode [ 379.887475][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.920081][ T6427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.959566][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.987583][ T6427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.038500][ T5273] usb 2-1: Using ep0 maxpacket: 16 [ 380.053974][ T5273] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 380.073829][ T6427] veth1_macvtap: left promiscuous mode [ 380.092011][ T6427] veth0_macvtap: left promiscuous mode [ 380.094357][ T5273] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 380.116760][ T6427] veth1_vlan: left promiscuous mode [ 380.132800][ T6427] veth0_vlan: left promiscuous mode [ 380.154239][ T5273] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.185950][ T5273] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.195418][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.216062][ T5273] usb 2-1: Product: syz [ 380.226222][ T5273] usb 2-1: Manufacturer: syz [ 380.240650][ T5273] usb 2-1: SerialNumber: syz [ 380.794920][ T5273] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 381.024070][ T8875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.043658][ T8875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.123827][ T5240] Bluetooth: hci2: command tx timeout [ 381.366819][ T8875] sctp: [Deprecated]: syz.1.642 (pid 8875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.366819][ T8875] Use struct sctp_sack_info instead [ 381.404864][ T6427] team0 (unregistering): Port device team_slave_1 removed [ 381.419919][ T6688] usb 2-1: USB disconnect, device number 17 [ 381.531718][ T6427] team0 (unregistering): Port device team_slave_0 removed [ 382.231054][ T8360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.581931][ T8360] team0: Port device team_slave_0 added [ 382.628612][ T5279] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 382.731514][ T8360] team0: Port device team_slave_1 added [ 382.818196][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 382.850969][ T5279] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 382.884219][ T5279] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 382.919277][ T5279] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 382.939308][ T5279] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.940483][ T6687] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 382.968800][ T9067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.650'. [ 382.975547][ T5279] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 382.998336][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.077685][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.085755][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.115357][ T8360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.138219][ T8360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.145371][ T8360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.171410][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.220410][ T6687] usb 1-1: Using ep0 maxpacket: 8 [ 383.238406][ T5279] usb 2-1: usb_control_msg returned -32 [ 383.248190][ T8360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.255111][ T5279] usbtmc 2-1:16.0: can't read capabilities [ 383.274789][ T6687] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.306254][ T6687] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.331318][ T6687] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.359086][ T6687] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.407960][ T6687] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 383.493916][ T6687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.489042][ T8302] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.498420][ T6687] usb 1-1: GET_CAPABILITIES returned 0 [ 384.507305][ T6687] usbtmc 1-1:16.0: can't read capabilities [ 384.514947][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 384.702265][ T6427] IPVS: stop unused estimator thread 0... [ 384.717591][ T8360] hsr_slave_0: entered promiscuous mode [ 384.739218][ T8360] hsr_slave_1: entered promiscuous mode [ 384.746101][ T8360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.749899][ T5273] usb 1-1: USB disconnect, device number 23 [ 384.762952][ T8360] Cannot create hsr debugfs directory [ 384.863151][ T8302] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.027422][ T9189] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 385.257019][ T8302] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.468925][ T9229] Bluetooth: MGMT ver 1.23 [ 385.534674][ T8302] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.749681][ T6688] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 385.900018][ T5279] usb 2-1: USB disconnect, device number 18 [ 385.948815][ T6688] usb 1-1: Using ep0 maxpacket: 8 [ 385.974081][ T6688] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 385.999469][ T6688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.011452][ T8302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 386.020258][ T6688] usb 1-1: Product: syz [ 386.025136][ T6688] usb 1-1: Manufacturer: syz [ 386.031601][ T6688] usb 1-1: SerialNumber: syz [ 386.056201][ T8302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 386.192424][ T8302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 386.232268][ T8302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 386.286637][ T6688] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 386.836288][ T8302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.067611][ T8302] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.289735][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.297035][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.738129][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.745369][ T6431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.935970][ T9373] i2c i2c-0: Invalid block write size 34 [ 388.091380][ T8360] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.121338][ T8360] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.143735][ T8360] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 388.153569][ T5229] Bluetooth: Frame is too long (len 12, expected len 10) [ 388.185940][ T8360] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 388.267325][ T5229] Bluetooth: Unexpected continuation frame (len 18) [ 388.480196][ T8360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.606765][ T25] usb 1-1: USB disconnect, device number 24 [ 388.614345][ T8360] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.660844][ T25] usblp0: removed [ 388.700690][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.707860][ T6434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.760974][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.768321][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.929152][ T8302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.180113][ T8302] veth0_vlan: entered promiscuous mode [ 389.226465][ T8302] veth1_vlan: entered promiscuous mode [ 389.458342][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 389.709008][ T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 389.785058][ T25] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 389.816186][ T8302] veth0_macvtap: entered promiscuous mode [ 389.837207][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 389.857693][ T8302] veth1_macvtap: entered promiscuous mode [ 389.863992][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.896828][ T9405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 389.912165][ T8360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.986346][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 390.080556][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.139508][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.158270][ T5240] Bluetooth: hci4: command 0x0406 tx timeout [ 390.172160][ T9405] sd 0:0:1:0: device reset [ 390.204917][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.215903][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.226246][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.264302][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.296019][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.326529][ T6688] usb 1-1: USB disconnect, device number 25 [ 390.340811][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.376305][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.401008][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.445936][ T8302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.544442][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.570651][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.581668][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.592916][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.603296][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.614506][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.625006][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.636033][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.690825][ T8302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.754835][ T8302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.805718][ T8302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.021868][ T8302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.076723][ T8302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.122264][ T5240] Bluetooth: hci5: command 0x0406 tx timeout [ 391.173276][ T8302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.279170][ T8302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.339353][ T8360] veth0_vlan: entered promiscuous mode [ 392.255967][ T8360] veth1_vlan: entered promiscuous mode [ 392.664279][ T5229] Bluetooth: hci5: unexpected event for opcode 0x041b [ 393.033414][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.067940][ T8360] veth0_macvtap: entered promiscuous mode [ 393.079870][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.177663][ T8360] veth1_macvtap: entered promiscuous mode [ 393.264264][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.296596][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.314036][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.337564][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.358431][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.377333][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.395726][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.419077][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.430853][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.443591][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.453723][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.464363][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.479194][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.535022][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.608165][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.619583][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 393.662395][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.697105][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.749392][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.773566][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.788289][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.808752][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.848846][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.868292][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.888372][ T8360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.907273][ T8360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.925508][ T8360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.962747][ T6427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.980712][ T6427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.989274][ T9545] macsec1: entered allmulticast mode [ 394.044828][ T8360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.056691][ T8360] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.091002][ T8360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.122401][ T8360] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.298669][ T9558] ieee802154 phy0 wpan0: encryption failed: -90 [ 394.606955][ T6432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.658375][ T6432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.799931][ T6432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.836664][ T6432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.710793][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 398.030266][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 398.228573][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 398.276098][ T9] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 398.293536][ T9] usb 1-1: config 0 has no interface number 0 [ 398.326756][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 398.351879][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.408224][ T9] usb 1-1: Product: syz [ 398.412439][ T9] usb 1-1: Manufacturer: syz [ 398.417063][ T9] usb 1-1: SerialNumber: syz [ 398.490421][ T9] usb 1-1: config 0 descriptor?? [ 398.804430][ T5278] usb 1-1: USB disconnect, device number 26 [ 398.949045][ T9695] netlink: 'syz.3.699': attribute type 1 has an invalid length. [ 399.031600][ T9698] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 399.219758][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 399.329295][ T9709] macvlan2: entered promiscuous mode [ 399.360469][ T9709] macvlan2: entered allmulticast mode [ 400.308898][ T5273] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 400.519626][ T5273] usb 1-1: no configurations [ 400.550722][ T5273] usb 1-1: can't read configurations, error -22 [ 400.639172][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 400.788172][ T5273] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 400.992018][ T5273] usb 1-1: no configurations [ 401.005552][ T5273] usb 1-1: can't read configurations, error -22 [ 401.031628][ T5273] usb usb1-port1: attempt power cycle [ 401.458253][ T5273] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 401.471935][ T9784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.717'. [ 401.530625][ T5273] usb 1-1: no configurations [ 401.535439][ T5273] usb 1-1: can't read configurations, error -22 [ 401.821528][ T5273] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 401.860430][ T5273] usb 1-1: no configurations [ 401.871334][ T5273] usb 1-1: can't read configurations, error -22 [ 402.563863][ T5273] usb usb1-port1: unable to enumerate USB device [ 403.131997][ T9801] [ 403.134358][ T9801] ====================================================== [ 403.141379][ T9801] WARNING: possible circular locking dependency detected [ 403.148409][ T9801] 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 Not tainted [ 403.155547][ T9801] ------------------------------------------------------ [ 403.162591][ T9801] syz.4.722/9801 is trying to acquire lock: [ 403.168514][ T9801] ffff8880208aac68 (&pipe->mutex){+.+.}-{3:3}, at: iter_file_splice_write+0x335/0x14e0 [ 403.178246][ T9801] [ 403.178246][ T9801] but task is already holding lock: [ 403.185736][ T9801] ffff88802d036420 (sb_writers#5){.+.+}-{0:0}, at: do_splice+0xcf0/0x1900 [ 403.185809][ T9801] [ 403.185809][ T9801] which lock already depends on the new lock. [ 403.185809][ T9801] [ 403.185816][ T9801] [ 403.185816][ T9801] the existing dependency chain (in reverse order) is: [ 403.185824][ T9801] [ 403.185824][ T9801] -> #4 (sb_writers#5){.+.+}-{0:0}: [ 403.185855][ T9801] lock_acquire+0x1ed/0x550 [ 403.185880][ T9801] ovl_start_write+0x11d/0x290 [ 403.185906][ T9801] ovl_copy_up_flags+0x1960/0x4470 [ 403.185929][ T9801] ovl_open+0x142/0x2a0 [ 403.185953][ T9801] do_dentry_open+0x970/0x1440 [ 403.185974][ T9801] vfs_open+0x3e/0x330 [ 403.185994][ T9801] path_openat+0x2b3e/0x3470 [ 403.186009][ T9801] do_filp_open+0x235/0x490 [ 403.186034][ T9801] do_sys_openat2+0x13e/0x1d0 [ 403.186055][ T9801] __x64_sys_creat+0x123/0x170 [ 403.186078][ T9801] do_syscall_64+0xf3/0x230 [ 403.186095][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.186115][ T9801] [ 403.186115][ T9801] -> #3 (&ovl_i_lock_key[depth]){+.+.}-{3:3}: [ 403.186142][ T9801] lock_acquire+0x1ed/0x550 [ 403.186165][ T9801] __mutex_lock+0x136/0xd70 [ 403.186181][ T9801] ovl_copy_up_start+0x53/0x310 [ 403.186203][ T9801] ovl_copy_up_flags+0xbc4/0x4470 [ 403.186223][ T9801] ovl_rename+0x62a/0x1750 [ 403.186239][ T9801] vfs_rename+0xbdb/0xf00 [ 403.186257][ T9801] do_renameat2+0xd94/0x13f0 [ 403.186275][ T9801] __x64_sys_rename+0x82/0x90 [ 403.186294][ T9801] do_syscall_64+0xf3/0x230 [ 403.186310][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.186329][ T9801] [ 403.186329][ T9801] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{3:3}: [ 403.186355][ T9801] lock_acquire+0x1ed/0x550 [ 403.186377][ T9801] down_read+0xb1/0xa40 [ 403.186393][ T9801] lookup_slow+0x45/0x70 [ 403.186416][ T9801] walk_component+0x2e1/0x410 [ 403.186439][ T9801] path_lookupat+0x16f/0x450 [ 403.186467][ T9801] filename_lookup+0x256/0x610 [ 403.186490][ T9801] kern_path+0x35/0x50 [ 403.186512][ T9801] lookup_bdev+0xc5/0x290 [ 403.186533][ T9801] resume_store+0x1a0/0x710 [ 403.186552][ T9801] kernfs_fop_write_iter+0x3a1/0x500 [ 403.186571][ T9801] vfs_write+0xa72/0xc90 [ 403.186586][ T9801] ksys_write+0x1a0/0x2c0 [ 403.186601][ T9801] do_syscall_64+0xf3/0x230 [ 403.186617][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.186636][ T9801] [ 403.186636][ T9801] -> #1 (&of->mutex){+.+.}-{3:3}: [ 403.186662][ T9801] lock_acquire+0x1ed/0x550 [ 403.186684][ T9801] __mutex_lock+0x136/0xd70 [ 403.186699][ T9801] kernfs_fop_write_iter+0x1eb/0x500 [ 403.186718][ T9801] iter_file_splice_write+0xbd7/0x14e0 [ 403.186744][ T9801] do_splice+0xd77/0x1900 [ 403.186768][ T9801] __se_sys_splice+0x331/0x4a0 [ 403.186783][ T9801] do_syscall_64+0xf3/0x230 [ 403.186799][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.186818][ T9801] [ 403.186818][ T9801] -> #0 (&pipe->mutex){+.+.}-{3:3}: [ 403.186843][ T9801] validate_chain+0x18e0/0x5900 [ 403.186858][ T9801] __lock_acquire+0x137a/0x2040 [ 403.186880][ T9801] lock_acquire+0x1ed/0x550 [ 403.186902][ T9801] __mutex_lock+0x136/0xd70 [ 403.186916][ T9801] iter_file_splice_write+0x335/0x14e0 [ 403.186942][ T9801] do_splice+0xd77/0x1900 [ 403.186966][ T9801] __se_sys_splice+0x331/0x4a0 [ 403.186981][ T9801] do_syscall_64+0xf3/0x230 [ 403.186998][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.187016][ T9801] [ 403.187016][ T9801] other info that might help us debug this: [ 403.187016][ T9801] [ 403.187023][ T9801] Chain exists of: [ 403.187023][ T9801] &pipe->mutex --> &ovl_i_lock_key[depth] --> sb_writers#5 [ 403.187023][ T9801] [ 403.187057][ T9801] Possible unsafe locking scenario: [ 403.187057][ T9801] [ 403.187062][ T9801] CPU0 CPU1 [ 403.187068][ T9801] ---- ---- [ 403.187074][ T9801] rlock(sb_writers#5); [ 403.187091][ T9801] lock(&ovl_i_lock_key[depth]); [ 403.187105][ T9801] lock(sb_writers#5); [ 403.187123][ T9801] lock(&pipe->mutex); [ 403.187135][ T9801] [ 403.187135][ T9801] *** DEADLOCK *** [ 403.187135][ T9801] [ 403.187140][ T9801] 1 lock held by syz.4.722/9801: [ 403.187151][ T9801] #0: ffff88802d036420 (sb_writers#5){.+.+}-{0:0}, at: do_splice+0xcf0/0x1900 [ 403.187209][ T9801] [ 403.187209][ T9801] stack backtrace: [ 403.187218][ T9801] CPU: 0 UID: 0 PID: 9801 Comm: syz.4.722 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 403.187239][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 403.187260][ T9801] Call Trace: [ 403.187268][ T9801] [ 403.187277][ T9801] dump_stack_lvl+0x241/0x360 [ 403.187298][ T9801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.187322][ T9801] ? print_circular_bug+0x130/0x1a0 [ 403.187343][ T9801] check_noncircular+0x36a/0x4a0 [ 403.187366][ T9801] ? __pfx_check_noncircular+0x10/0x10 [ 403.187385][ T9801] ? lockdep_lock+0x123/0x2b0 [ 403.187410][ T9801] ? __lock_acquire+0x137a/0x2040 [ 403.187439][ T9801] validate_chain+0x18e0/0x5900 [ 403.187473][ T9801] ? __pfx_validate_chain+0x10/0x10 [ 403.187491][ T9801] ? deref_stack_reg+0x1c7/0x260 [ 403.187521][ T9801] ? 0xffffffffa0003b40 [ 403.187536][ T9801] ? 0xffffffffa0003b40 [ 403.187550][ T9801] ? is_bpf_text_address+0x285/0x2a0 [ 403.187574][ T9801] ? is_bpf_text_address+0x26/0x2a0 [ 403.187599][ T9801] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 403.187623][ T9801] ? kernel_text_address+0xa7/0xe0 [ 403.187643][ T9801] ? __kernel_text_address+0xd/0x40 [ 403.187661][ T9801] ? unwind_get_return_address+0x91/0xc0 [ 403.187687][ T9801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.187708][ T9801] ? arch_stack_walk+0x16d/0x1b0 [ 403.187728][ T9801] ? mark_lock+0x9a/0x350 [ 403.187755][ T9801] __lock_acquire+0x137a/0x2040 [ 403.187788][ T9801] lock_acquire+0x1ed/0x550 [ 403.187812][ T9801] ? iter_file_splice_write+0x335/0x14e0 [ 403.187843][ T9801] ? __pfx_lock_acquire+0x10/0x10 [ 403.187869][ T9801] ? __pfx___might_resched+0x10/0x10 [ 403.187899][ T9801] __mutex_lock+0x136/0xd70 [ 403.187916][ T9801] ? iter_file_splice_write+0x335/0x14e0 [ 403.187947][ T9801] ? iter_file_splice_write+0x335/0x14e0 [ 403.187976][ T9801] ? __pfx___mutex_lock+0x10/0x10 [ 403.187995][ T9801] ? iter_file_splice_write+0x308/0x14e0 [ 403.188021][ T9801] ? iter_file_splice_write+0x308/0x14e0 [ 403.188050][ T9801] ? rcu_is_watching+0x15/0xb0 [ 403.188080][ T9801] ? iter_file_splice_write+0x308/0x14e0 [ 403.188111][ T9801] ? iter_file_splice_write+0x308/0x14e0 [ 403.188143][ T9801] ? __kmalloc_noprof+0x21a/0x400 [ 403.188178][ T9801] iter_file_splice_write+0x335/0x14e0 [ 403.188229][ T9801] ? __pfx_iter_file_splice_write+0x10/0x10 [ 403.188272][ T9801] ? rcu_read_lock_any_held+0xb7/0x160 [ 403.188306][ T9801] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 403.188348][ T9801] ? __pfx_iter_file_splice_write+0x10/0x10 [ 403.188382][ T9801] do_splice+0xd77/0x1900 [ 403.188420][ T9801] ? __pfx_lock_release+0x10/0x10 [ 403.188466][ T9801] ? __fget_files+0x29/0x470 [ 403.188489][ T9801] ? pipe_clear_nowait+0xc1/0x220 [ 403.188512][ T9801] ? __pfx_do_splice+0x10/0x10 [ 403.188544][ T9801] __se_sys_splice+0x331/0x4a0 [ 403.188567][ T9801] ? __pfx___se_sys_splice+0x10/0x10 [ 403.188585][ T9801] ? do_syscall_64+0x100/0x230 [ 403.188605][ T9801] ? __x64_sys_splice+0x21/0xf0 [ 403.188623][ T9801] do_syscall_64+0xf3/0x230 [ 403.188641][ T9801] ? clear_bhb_loop+0x35/0x90 [ 403.188664][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.188691][ T9801] RIP: 0033:0x7f8447d79e79 [ 403.188708][ T9801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.188726][ T9801] RSP: 002b:00007f8448b4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 403.188746][ T9801] RAX: ffffffffffffffda RBX: 00007f8447f15f80 RCX: 00007f8447d79e79 [ 403.188761][ T9801] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000007 [ 403.188774][ T9801] RBP: 00007f8447de793e R08: 0000000000000600 R09: 0000000000000000 [ 403.188786][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.188798][ T9801] R13: 0000000000000000 R14: 00007f8447f15f80 R15: 00007fff2eea2988 [ 403.188819][ T9801] [ 403.524281][ T9814] fuse: Bad value for 'group_id' [ 403.524296][ T9814] fuse: Bad value for 'group_id' [ 403.525956][ T9814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.722'. [ 404.878792][ T9808] tty tty1: ldisc open failed (-12), clearing slot 0 [ 404.887495][ T9798] pty pty26: ldisc open failed (-12), clearing slot 26