last executing test programs: 20m42.370449177s ago: executing program 32 (id=19): mknod(&(0x7f00000002c0)='./file0\x00', 0x1000, 0x761) r0 = open(&(0x7f0000000400)='./file0\x00', 0x80002, 0x1ae) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x16) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x2204000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20m25.512266483s ago: executing program 33 (id=37): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 17m40.174038536s ago: executing program 1 (id=253): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendfile(r1, r0, 0x0, 0x578410ed) 17m37.893638692s ago: executing program 1 (id=257): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) mq_open(&(0x7f0000000040)='\xeb\xac\xa5\x03\x00\x00\x00\x00', 0x842, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040884) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 17m36.387309843s ago: executing program 1 (id=260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 17m35.794766206s ago: executing program 1 (id=262): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x39) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0xb, 0x1000, 0x5e, @dev={0xfe, 0x80, '\x00', 0x12}, @remote, 0x700, 0x700, 0xfd14, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000ac0)={'gretap0\x00', r3, 0x8000, 0x0, 0x5, 0xe, {{0x2f, 0x4, 0x1, 0x7, 0xbc, 0x68, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x21, 0x3, 0x5, [{@empty, 0xb05a}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xca, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x20}, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@remote, 0x4}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp_addr={0x44, 0x3c, 0x3e, 0x1, 0xd, [{@multicast2, 0x7fffffff}, {@remote, 0x4}, {@private=0xa010102, 0xfffffcaf}, {@multicast2}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffd}, {@private=0xa010102, 0x462d8d5c}]}, @lsrr={0x83, 0x1f, 0xfe, [@private=0xa010101, @private=0xa010100, @loopback, @multicast2, @loopback, @private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x8c, 0x1, 0x3, [{@local, 0xfffff801}, {@rand_addr=0x64010101, 0xf}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4f9}]}]}}}}}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) rmdir(&(0x7f00000004c0)='./file0\x00') r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x5c0, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x1}, {0x5, 0x2, 0x2}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 17m20.18915177s ago: executing program 34 (id=262): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x39) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0xb, 0x1000, 0x5e, @dev={0xfe, 0x80, '\x00', 0x12}, @remote, 0x700, 0x700, 0xfd14, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000ac0)={'gretap0\x00', r3, 0x8000, 0x0, 0x5, 0xe, {{0x2f, 0x4, 0x1, 0x7, 0xbc, 0x68, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x21, 0x3, 0x5, [{@empty, 0xb05a}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xca, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x20}, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@remote, 0x4}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp_addr={0x44, 0x3c, 0x3e, 0x1, 0xd, [{@multicast2, 0x7fffffff}, {@remote, 0x4}, {@private=0xa010102, 0xfffffcaf}, {@multicast2}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffd}, {@private=0xa010102, 0x462d8d5c}]}, @lsrr={0x83, 0x1f, 0xfe, [@private=0xa010101, @private=0xa010100, @loopback, @multicast2, @loopback, @private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x8c, 0x1, 0x3, [{@local, 0xfffff801}, {@rand_addr=0x64010101, 0xf}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4f9}]}]}}}}}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) rmdir(&(0x7f00000004c0)='./file0\x00') r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x5c0, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x1}, {0x5, 0x2, 0x2}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 12m10.822988733s ago: executing program 35 (id=524): syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x2, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r3, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r2, r7, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r11, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 11m29.318194873s ago: executing program 36 (id=582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x68, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000380), 0x6, 0x9e25c2) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) r6 = dup(r5) ioctl$LOOP_CLR_FD(r6, 0x4c01) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) writev(r7, 0x0, 0x0) 10m14.08303112s ago: executing program 37 (id=654): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0xfffffffffffffffe, 0x7, 0x5, 0x8}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0xe503, 0x0) 10m13.483338849s ago: executing program 38 (id=656): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 10m12.085085945s ago: executing program 39 (id=658): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x80000, 0xfffffe0000000001, 0x400, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x1048, 0x41, 0x22, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x1024, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0xf1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="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"]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x1048}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r6, 0x0, 0x0) listen(r6, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xffff, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x129280, 0x138) 9m19.259636596s ago: executing program 9 (id=726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000180)) 9m17.903557399s ago: executing program 9 (id=729): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 9m16.536606086s ago: executing program 1 (id=670): r0 = socket(0x200000000000011, 0x2, 0xd) syz_extract_tcp_res(0x0, 0x4, 0x4) r1 = syz_open_dev$vcsa(0x0, 0x5da23d53, 0x200300) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ptrace$getregset(0x4205, 0x0, 0x202, 0x0) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r1, &(0x7f0000000000)={0xffffffffffffffff, r0}) syz_emit_ethernet(0xcd, &(0x7f00000000c0)={@multicast, @random="037cae8fbc73", @void, {@ipv4={0x800, @tcp={{0x25, 0x4, 0x3, 0x27, 0xbf, 0x66, 0x0, 0x7, 0x6, 0x0, @private=0xa010102, @multicast1, {[@end, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x5, 0x7, "42a32ac578"}, {0x5, 0xd, "cd54853dc87c14a9c4fdb8"}]}, @cipso={0x86, 0x52, 0x2, [{0x5, 0x12, "d245085c60bc4b4953b5723498b8f0d5"}, {0x1, 0x8, "3b519f411071"}, {0x6, 0xa, "76cb5f8950ea7ef0"}, {0x5, 0x2}, {0x5, 0xa, "8d247a47f07d8b89"}, {0x5, 0x6, "4376b2ea"}, {0x7, 0x9, "ffef23e7593028"}, {0x6, 0x9, "6ab3a1986b2a43"}, {0x7, 0x4, "bb43"}]}, @timestamp={0x44, 0x10, 0xfb, 0x0, 0xb, [0xc0000000, 0x4, 0x80000000]}]}}, {{0x4e20, 0x4e22, 0x41424344, r2, 0x0, 0x0, 0xa, 0x80, 0xff, 0x0, 0x47dc, {[@mss={0x2, 0x4, 0x81}, @exp_smc={0xfe, 0x6}, @eol, @exp_smc={0xfe, 0x6}]}}, {"d96398"}}}}}}, 0x0) 9m14.27317866s ago: executing program 1 (id=734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(r0, &(0x7f0000000000)={[0x3]}, 0x8, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="54368cc990bcf64cf44814565fefa540846d224e81aabfd95899d9dff248a6e37f264112e90857594eaafa279d02cd2ee673b172e54ce5104b3e14df43a14ab70cea42ffbf3930ae40842d3342f4d622c95d5d7bdc469d89fe0838a70fa8bac84c9f810c6e9c9c030e8ba6e5973a7772a6e693c4c85327afb590975ba8195ac1e9d1ffb8ab7dbed04bfef1fd0430a12b35d03b1e7d49e0efc930360c74a05227282fa504df0ae4f253234d688946169435c2404d8def7c16349ed0daa7010f5638", 0xc1, 0x20048915, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = syz_io_uring_setup(0x232, &(0x7f0000000080)={0x0, 0x1, 0x100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_FALLOCATE={0x11, 0xc, 0x0, @fd=r4, 0x3, 0x0, 0x80000001}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x7f, 0x7, 0x4, 0x100000, 0xfffffffc, {}, {0x4, 0x2, 0x3, 0x5, 0xd9, 0x1, "de4ffbbd"}, 0x3, 0x1, {0x0}, 0x9a8f753}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x2, 0x73) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000140)=0x5) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000004440)=@ethtool_gstrings={0x1b, 0x1}}) 9m13.50250595s ago: executing program 9 (id=735): unshare(0x2000400) r0 = memfd_secret(0x80000) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000180)={0x0, 0x1, 0x7fffffffffffffff, 0x2}) 9m11.957489312s ago: executing program 9 (id=737): socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000040)=0x7, 0x7, 0x0) socket$key(0xf, 0x3, 0x2) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 9m8.3169595s ago: executing program 9 (id=739): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r0) 9m7.623598663s ago: executing program 9 (id=740): socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 9m0.413340551s ago: executing program 40 (id=733): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) personality(0x4000009) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, 0x0, 0x44080) accept4(r1, &(0x7f0000000200)=@l2={0x1f, 0x0, @none}, &(0x7f0000000140)=0x80, 0x80800) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = getpid() sendmsg$nl_netfilter(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x1, 0x2, 0x5, 0x70bd25, 0x25dfdbfe, {}, [@typed={0x4, 0x155}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0x4, 0x63}, @typed={0x8, 0x80, 0x0, 0x0, @pid=r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) 8m58.547012121s ago: executing program 41 (id=734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(r0, &(0x7f0000000000)={[0x3]}, 0x8, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="54368cc990bcf64cf44814565fefa540846d224e81aabfd95899d9dff248a6e37f264112e90857594eaafa279d02cd2ee673b172e54ce5104b3e14df43a14ab70cea42ffbf3930ae40842d3342f4d622c95d5d7bdc469d89fe0838a70fa8bac84c9f810c6e9c9c030e8ba6e5973a7772a6e693c4c85327afb590975ba8195ac1e9d1ffb8ab7dbed04bfef1fd0430a12b35d03b1e7d49e0efc930360c74a05227282fa504df0ae4f253234d688946169435c2404d8def7c16349ed0daa7010f5638", 0xc1, 0x20048915, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = syz_io_uring_setup(0x232, &(0x7f0000000080)={0x0, 0x1, 0x100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_FALLOCATE={0x11, 0xc, 0x0, @fd=r4, 0x3, 0x0, 0x80000001}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000080)=@multiplanar_mmap={0x7f, 0x7, 0x4, 0x100000, 0xfffffffc, {}, {0x4, 0x2, 0x3, 0x5, 0xd9, 0x1, "de4ffbbd"}, 0x3, 0x1, {0x0}, 0x9a8f753}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x2, 0x73) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000140)=0x5) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', &(0x7f0000004440)=@ethtool_gstrings={0x1b, 0x1}}) 8m52.069637433s ago: executing program 42 (id=740): socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 7m46.825726549s ago: executing program 3 (id=814): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xfc, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7m44.963134569s ago: executing program 3 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 7m44.709566565s ago: executing program 3 (id=817): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 7m43.986617402s ago: executing program 3 (id=818): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={0x0}) 7m41.996758147s ago: executing program 3 (id=821): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6c2, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2, 0x4]}}) 7m41.382978634s ago: executing program 3 (id=823): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000']) 7m25.679063863s ago: executing program 43 (id=823): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000']) 7m1.570446798s ago: executing program 8 (id=850): unshare(0x6020400) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x4d, "0299e7f318e7286524add0ed0733b19689671836f0b3e28a0f2873c92e26ce1ff7ef16b83a1cee56498ea01fcbdd7435240c6a5b3373d4c530d69da6d873331595793f063bf1b3ae492ffa216a"}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 7m0.785464749s ago: executing program 8 (id=852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 6m57.023555734s ago: executing program 8 (id=853): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x2, 0xab51, 0x4, 0x0, 0x0, 0x6, 0x7, 0x3, r1}, 0x20) 6m56.222878293s ago: executing program 8 (id=855): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x18, &(0x7f0000000200)={0x20, 0x15, 0x3, "8d1430"}, 0x0, 0x0, 0x0, 0x0}) 6m51.923909919s ago: executing program 8 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 6m47.981378547s ago: executing program 8 (id=865): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 6m32.597712034s ago: executing program 44 (id=865): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2m42.57820031s ago: executing program 5 (id=1164): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x2c, 0xa, 0x0, "3ccfa4000000aafffffffff4dd4007400000e4000000adaf04008f097a8800", 0x31435750}) 2m41.980407537s ago: executing program 5 (id=1165): socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 2m41.241010579s ago: executing program 5 (id=1167): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x4e, 0x40, 0x5, 0x80, 0x1b, 0x80, 0x9, 0x40, 0x1, 0x7, 0x9, 0x40, 0x9e, 0x8}, 0xe) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 2m37.563630605s ago: executing program 5 (id=1170): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000484002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="2e02000000000000000b27ebb8e2", 0xe, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r4, 0x93, 0x3) 2m34.788849702s ago: executing program 5 (id=1173): r0 = socket$inet(0x2, 0x4000000000000001, 0x6) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x8c0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0xfffffffa}], 0x2, 0x2, 0x0) 2m33.534121799s ago: executing program 5 (id=1178): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x50}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r8 = memfd_secret(0x80000) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x7d, 0xb, 0x1, 0x1, 0xd, 0xeea5, 0x0, 0x7ff, 0x6, 0x60000, 0x0, 0x4, 0x5f19, 0xffffffff, 0x0, 0x20, {0xfffffffa, 0x4}, 0x81, 0x5}}) 2m18.276121009s ago: executing program 45 (id=1178): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x50}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r8 = memfd_secret(0x80000) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x7d, 0xb, 0x1, 0x1, 0xd, 0xeea5, 0x0, 0x7ff, 0x6, 0x60000, 0x0, 0x4, 0x5f19, 0xffffffff, 0x0, 0x20, {0xfffffffa, 0x4}, 0x81, 0x5}}) 51.782336742s ago: executing program 0 (id=1323): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) syz_clone(0x8014a000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 50.067692578s ago: executing program 0 (id=1325): inotify_init1(0x800) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000003940)={0x2020}, 0x2020) 49.176030725s ago: executing program 0 (id=1328): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 48.487016084s ago: executing program 0 (id=1329): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 44.785468555s ago: executing program 0 (id=1338): inotify_init1(0x800) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000003940)={0x2020}, 0x2020) 44.09545552s ago: executing program 0 (id=1341): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_secret(0x0) syz_io_uring_setup(0x7fe3, &(0x7f0000000180)={0x0, 0xc332, 0x400, 0x0, 0x399, 0x0, r3}, &(0x7f0000000200), &(0x7f0000000340)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {}, {0x4}, {0x80000000}]}}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 28.660691507s ago: executing program 46 (id=1341): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_secret(0x0) syz_io_uring_setup(0x7fe3, &(0x7f0000000180)={0x0, 0xc332, 0x400, 0x0, 0x399, 0x0, r3}, &(0x7f0000000200), &(0x7f0000000340)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {}, {0x4}, {0x80000000}]}}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 18.394378296s ago: executing program 6 (id=1376): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6c2, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2, 0x4]}}) 17.379856086s ago: executing program 6 (id=1378): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$FUSE(r2, &(0x7f0000002980)={0x2020}, 0xffffff36) 13.66880967s ago: executing program 7 (id=1383): userfaultfd(0x80800) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) preadv2(r0, &(0x7f00000012c0)=[{&(0x7f0000001480)=""/4093, 0xffd}], 0x1, 0x9, 0x3, 0x12) 12.700052966s ago: executing program 7 (id=1385): openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)={r4}, &(0x7f0000000400)=0x8) 11.944668437s ago: executing program 7 (id=1386): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)}], 0x1}, 0x240480c3) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0x7fffffff, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d01"], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff7, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) 10.338360916s ago: executing program 2 (id=1390): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r0, 0x5) 9.358996919s ago: executing program 2 (id=1392): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) 8.284975419s ago: executing program 7 (id=1394): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) 7.080868443s ago: executing program 4 (id=1396): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37", 0x21}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae", 0x9e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817817026eeb76460dad4f677de7304", 0xe9}, {&(0x7f0000000040)="7542473782798be019c27e", 0xb}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac44", 0x59}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355134ae64fde53", 0x18}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.019449648s ago: executing program 7 (id=1397): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="200084"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000040)="1cef3ec3") 6.673755434s ago: executing program 6 (id=1398): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6c2, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2, 0x4]}}) 6.36116923s ago: executing program 2 (id=1399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101083, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0x6, 0x33c28057cc9c2e24, 0x9, 0x0, 0x9, 0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.891891496s ago: executing program 4 (id=1400): syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 5.566489622s ago: executing program 6 (id=1401): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x18, &(0x7f0000000540)={0x20, 0x3e}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.886115629s ago: executing program 2 (id=1402): syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x67, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100, {[@cipso={0x86, 0x1a, 0x3, [{0x6, 0xd, "5e000000ff000000000000"}, {0x0, 0x2}, {0x0, 0x5, "96e9ef"}]}]}}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 3.77535389s ago: executing program 2 (id=1403): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)}], 0x1}, 0x240480c3) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0x7fffffff, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d01"], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff7, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) 3.214417596s ago: executing program 7 (id=1404): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x9, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000cc0}, 0x38) 2.657465739s ago: executing program 4 (id=1405): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) r1 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) 1.705146979s ago: executing program 4 (id=1406): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) 1.316836226s ago: executing program 2 (id=1407): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$FUSE(r2, &(0x7f0000002980)={0x2020}, 0xffffff36) 1.263797479s ago: executing program 4 (id=1408): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) 1.170399852s ago: executing program 6 (id=1409): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 444.289967ms ago: executing program 6 (id=1410): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6c2, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2, 0x4]}}) 0s ago: executing program 4 (id=1411): syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaac1aaaaaaaaaaaaaaaa88a80c40814f8a1ede4ccb036613006700000106"], 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dc5414"], 0xdd12}], 0x1}, 0x20040051) kernel console output (not intermixed with test programs): 1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.907615][ T10] usb 6-1: Product: syz [ 1214.912029][ T10] usb 6-1: Manufacturer: syz [ 1214.941372][ T10] usb 6-1: SerialNumber: syz [ 1214.983823][ T10] usb 6-1: config 0 descriptor?? [ 1215.295366][ T7758] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1215.344162][ T7758] usb 7-1: USB disconnect, device number 26 [ 1215.514910][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1215.561668][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1215.627961][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1215.674151][ T10] usb 6-1: media controller created [ 1215.756090][ T6013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.952163][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1215.969221][ T6013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1216.102311][ T6013] bond0 (unregistering): Released all slaves [ 1216.114987][ T7758] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1216.315729][T11855] udevd[11855]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1216.375632][ T7758] usb 5-1: Using ep0 maxpacket: 32 [ 1216.386266][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1216.393729][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1216.423243][ T7758] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1216.470655][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1216.508866][ T7758] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1216.541123][ T7758] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1216.612710][ T10] usb 6-1: USB disconnect, device number 19 [ 1216.635757][ T7758] usb 5-1: Product: syz [ 1216.640169][ T7758] usb 5-1: Manufacturer: syz [ 1216.687446][ T7758] usb 5-1: SerialNumber: syz [ 1216.761611][ T7758] usb 5-1: config 0 descriptor?? [ 1216.816278][T12211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1216.872107][ T7758] hub 5-1:0.0: bad descriptor, ignoring hub [ 1216.905202][ T7758] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1217.394925][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1217.759699][ T9821] Bluetooth: hci1: Invalid connection link type handle 0x00c9 [ 1217.852057][ T6013] hsr_slave_0: left promiscuous mode [ 1217.878426][ T6013] hsr_slave_1: left promiscuous mode [ 1217.899275][ T5902] usb 5-1: USB disconnect, device number 49 [ 1217.905696][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1217.927132][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.980811][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.063813][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1218.115331][ T6013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.124905][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1218.177354][ T10] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1218.193827][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.202480][ T10] usb 6-1: Product: syz [ 1218.208347][ T6013] veth1_macvtap: left promiscuous mode [ 1218.214087][ T6013] veth0_macvtap: left promiscuous mode [ 1218.240446][ T10] usb 6-1: Manufacturer: syz [ 1218.245636][ T10] usb 6-1: SerialNumber: syz [ 1218.264993][ T6013] veth1_vlan: left promiscuous mode [ 1218.270585][ T6013] veth0_vlan: left promiscuous mode [ 1218.279069][ T10] usb 6-1: config 0 descriptor?? [ 1218.769766][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1218.809793][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1218.838057][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1218.874021][ T10] usb 6-1: media controller created [ 1218.950021][ T5825] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1219.022482][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1219.143030][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 1219.199548][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.225466][ T5825] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1219.261632][ T5825] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1219.282516][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1219.302301][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.316939][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1219.328633][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1219.329672][ T5825] usb 5-1: Product: syz [ 1219.369479][ T5825] usb 5-1: Manufacturer: syz [ 1219.374329][ T5825] usb 5-1: SerialNumber: syz [ 1219.380917][ T10] usb 6-1: USB disconnect, device number 20 [ 1219.420625][ T5825] usb 5-1: config 0 descriptor?? [ 1219.696161][ T5825] usb 5-1: USB disconnect, device number 50 [ 1219.936231][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1220.522806][ T6013] team0 (unregistering): Port device team_slave_1 removed [ 1220.625165][ T6013] team0 (unregistering): Port device team_slave_0 removed [ 1221.068174][ T5825] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1221.287790][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 1221.411343][ T5825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.474704][ T5825] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1221.548257][ T5825] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1221.611088][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.651654][ T5825] usb 5-1: Product: syz [ 1221.686433][ T5825] usb 5-1: Manufacturer: syz [ 1221.750365][ T5825] usb 5-1: SerialNumber: syz [ 1221.791391][ T5825] usb 5-1: config 0 descriptor?? [ 1222.078083][ T5825] usb 5-1: can't set config #0, error -71 [ 1222.156071][ T5825] usb 5-1: USB disconnect, device number 51 [ 1223.203294][T12140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.211149][T12140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.221530][T12140] bridge_slave_0: entered allmulticast mode [ 1223.232056][T12140] bridge_slave_0: entered promiscuous mode [ 1223.286485][T12140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.294001][T12140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.368933][T12140] bridge_slave_1: entered allmulticast mode [ 1223.410414][T12140] bridge_slave_1: entered promiscuous mode [ 1223.635120][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1223.822991][T12140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.843537][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1223.890548][ T10] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 1223.937603][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.976247][ T10] usb 5-1: config 0 has no interface number 1 [ 1223.998911][T12140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1224.024191][ T10] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1224.063209][ T10] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1224.104589][ T10] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1224.120971][T12012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.137931][ T10] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1224.213757][ T10] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1224.287057][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1224.332824][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1224.343251][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.351944][ T10] usb 5-1: Product: syz [ 1224.362202][ T10] usb 5-1: Manufacturer: syz [ 1224.365947][ T8322] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1224.375411][ T10] usb 5-1: SerialNumber: syz [ 1224.410914][ T10] usb 5-1: config 0 descriptor?? [ 1224.436218][T12253] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1224.488042][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1224.545155][ T8322] usb 6-1: Using ep0 maxpacket: 16 [ 1224.568533][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1224.711746][ T8322] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1224.754695][ T8322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.889445][ T8322] usb 6-1: Product: syz [ 1224.893873][ T8322] usb 6-1: Manufacturer: syz [ 1224.934320][ T8322] usb 6-1: SerialNumber: syz [ 1224.951818][T12140] team0: Port device team_slave_0 added [ 1224.983351][ T8322] usb 6-1: config 0 descriptor?? [ 1225.223533][ T10] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1225.278538][T12140] team0: Port device team_slave_1 added [ 1225.325468][ T10] usb 5-1: USB disconnect, device number 52 [ 1225.640195][ T8322] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1225.764650][ T8322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1225.781967][T11857] udevd[11857]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1225.853713][ T8322] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1225.913535][ T8322] usb 6-1: media controller created [ 1226.188396][T12274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1070'. [ 1226.452978][ T8322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1226.472384][T12274] 9p: Bad value for 'wfdno' [ 1226.550147][T12274] loop4: detected capacity change from 0 to 64 [ 1226.586130][T12012] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.649160][T12274] bfs: Unknown parameter 'ªªªªªª»»»»»»†Ý`0' [ 1226.707263][T12140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.787141][T12140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.851948][ T8322] zl10353_read_register: readreg error (reg=127, ret==0) [ 1226.927608][ T8322] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1226.938830][T12140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.950634][ T8322] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1227.043977][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.051956][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.093994][ T8322] usb 6-1: USB disconnect, device number 21 [ 1227.540038][T12140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.569344][T12140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.659593][T12140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.874855][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1227.932515][ T8322] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1228.074885][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.165346][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1228.165472][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.173626][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.173882][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.190294][ T10] usb 5-1: config 0 descriptor?? [ 1228.283788][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1228.823976][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1228.838153][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1228.840786][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1228.856579][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1228.859135][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1228.881679][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1228.905083][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1228.915009][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1228.928805][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1228.953574][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 1228.959122][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 1228.961228][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 1228.974708][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 1229.205894][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1229.207289][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1229.282693][ T10] pwc: Registered as video103. [ 1229.287716][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 1229.327346][T12140] hsr_slave_0: entered promiscuous mode [ 1229.332211][T12140] hsr_slave_1: entered promiscuous mode [ 1229.384691][ T10] usb 5-1: USB disconnect, device number 53 [ 1236.414963][T12140] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1236.572132][T12140] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1236.729225][T12140] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1236.898398][T12012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.944939][ T40] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1236.961574][T12140] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1237.152616][ T40] usb 5-1: Using ep0 maxpacket: 8 [ 1237.194906][ T40] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 1237.221747][ T40] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.289494][ T40] usb 5-1: config 0 has no interface number 1 [ 1237.324857][ T40] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1237.368363][ T40] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1237.442672][ T40] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1237.504654][ T40] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1237.605278][ T40] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1237.695251][ T40] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1237.751301][ T40] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1237.790826][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.837228][ T40] usb 5-1: Product: syz [ 1237.841669][ T40] usb 5-1: Manufacturer: syz [ 1237.915341][ T40] usb 5-1: SerialNumber: syz [ 1237.967921][ T40] usb 5-1: config 0 descriptor?? [ 1238.004875][T12321] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1238.077237][ T40] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1238.255807][ T40] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1238.931784][T12334] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1079'. [ 1239.119722][T12334] 9p: Bad value for 'wfdno' [ 1239.184122][ T40] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1239.201116][T12334] loop6: detected capacity change from 0 to 64 [ 1239.243083][T12140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.352208][T12334] bfs: Unknown parameter 'ªªªªªª»»»»»»†Ý`0' [ 1239.365748][ T40] usb 5-1: USB disconnect, device number 54 [ 1239.649207][T12140] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.869541][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.877093][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.061938][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.069468][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.384778][ T40] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1240.489051][T11857] udevd[11857]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.649325][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 1240.775086][ T40] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1240.837123][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1240.907794][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1240.925221][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.926192][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1240.966357][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1240.981071][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1241.037763][ T40] usb 5-1: Product: syz [ 1241.042182][ T40] usb 5-1: Manufacturer: syz [ 1241.109701][ T40] usb 5-1: SerialNumber: syz [ 1241.213324][ T40] usb 5-1: config 0 descriptor?? [ 1241.713554][ T40] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1241.840448][ T40] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1241.849835][ C0] hrtimer: interrupt took 501911 ns [ 1241.932317][ T40] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1241.969503][ T9821] Bluetooth: hci5: Invalid handle: 0x306c > 0x0eff [ 1242.006559][ T40] usb 5-1: media controller created [ 1242.259583][ T40] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1242.737077][ T40] zl10353_read_register: readreg error (reg=127, ret==0) [ 1242.766809][ T40] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1242.823094][ T40] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1242.888164][ T40] usb 5-1: USB disconnect, device number 55 [ 1243.035632][ T5778] Bluetooth: hci4: command tx timeout [ 1244.659481][ T40] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1245.165522][ T5778] Bluetooth: hci4: command tx timeout [ 1246.473647][T12382] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1089'. [ 1246.595751][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1246.630125][T12382] 9p: Bad value for 'wfdno' [ 1246.709179][T12382] loop6: detected capacity change from 0 to 64 [ 1246.782886][T12382] bfs: Unknown parameter 'ªªªªªª»»»»»»†Ý`0' [ 1246.844900][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1246.922788][ T10] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 1246.970856][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.031898][ T10] usb 5-1: config 0 has no interface number 1 [ 1247.087905][ T10] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1247.174774][ T10] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1247.197180][ T5778] Bluetooth: hci4: command tx timeout [ 1247.264861][ T10] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1247.355880][ T10] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1247.460306][ T10] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1247.518467][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1247.748973][T12140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.776932][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1247.800640][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.857695][ T10] usb 5-1: Product: syz [ 1247.880358][ T10] usb 5-1: Manufacturer: syz [ 1247.905131][ T10] usb 5-1: SerialNumber: syz [ 1247.976775][ T10] usb 5-1: config 0 descriptor?? [ 1247.989625][T12380] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1248.040276][T12343] chnl_net:caif_netlink_parms(): no params data found [ 1248.102665][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1248.185602][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1248.510991][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.127712][ T10] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1249.181476][ T10] usb 5-1: USB disconnect, device number 56 [ 1249.285039][ T5778] Bluetooth: hci4: command tx timeout [ 1250.107312][ T6014] bridge_slave_1: left allmulticast mode [ 1250.107426][ T6014] bridge_slave_1: left promiscuous mode [ 1250.108431][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.127747][T11857] udevd[11857]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1250.220599][ T6014] bridge_slave_0: left allmulticast mode [ 1250.220719][ T6014] bridge_slave_0: left promiscuous mode [ 1250.221752][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.134686][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1251.306707][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1251.341499][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1251.363043][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1251.363156][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1251.363259][ T10] usb 5-1: Product: syz [ 1251.363330][ T10] usb 5-1: Manufacturer: syz [ 1251.363399][ T10] usb 5-1: SerialNumber: syz [ 1251.373581][ T10] usb 5-1: config 0 descriptor?? [ 1251.376288][T12403] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1251.387258][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 1251.387380][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1251.676760][ T5778] Bluetooth: hci1: Invalid connection link type handle 0x00c9 [ 1251.815499][ T10] usb 5-1: USB disconnect, device number 57 [ 1251.868835][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.932035][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.938539][ T6014] bond0 (unregistering): Released all slaves [ 1252.722928][ T6014] hsr_slave_0: left promiscuous mode [ 1252.789786][ T6014] hsr_slave_1: left promiscuous mode [ 1252.802391][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.817124][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.625174][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 1254.739431][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 1256.062040][T12140] veth0_vlan: entered promiscuous mode [ 1256.243808][T12343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.316726][T12343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.376166][T12343] bridge_slave_0: entered allmulticast mode [ 1256.455016][T12343] bridge_slave_0: entered promiscuous mode [ 1256.597992][T12343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.636044][T12343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.675258][T12343] bridge_slave_1: entered allmulticast mode [ 1256.747574][T12343] bridge_slave_1: entered promiscuous mode [ 1256.964814][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1257.134663][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1257.258071][T12140] veth1_vlan: entered promiscuous mode [ 1257.265606][ T10] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1257.294755][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.303055][ T10] usb 5-1: Product: syz [ 1257.321540][ T10] usb 5-1: Manufacturer: syz [ 1257.385244][ T10] usb 5-1: SerialNumber: syz [ 1257.464823][ T10] usb 5-1: config 0 descriptor?? [ 1257.735927][T12343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.891175][T12343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.916036][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1257.990582][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1258.037951][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1258.084845][ T10] usb 5-1: media controller created [ 1258.587747][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1258.736171][T12343] team0: Port device team_slave_0 added [ 1258.813771][T12343] team0: Port device team_slave_1 added [ 1258.880480][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 1258.904722][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1258.912953][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1259.014205][ T10] usb 5-1: USB disconnect, device number 58 [ 1259.194154][T12343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.251454][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.392539][T12343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.415619][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1259.556519][T12421] udevd[12421]: setting owner of /dev/bus/usb/005/058 to uid=0, gid=0 failed: No such file or directory [ 1259.667397][T12343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.700943][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.835216][T12343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.066469][T12140] veth0_macvtap: entered promiscuous mode [ 1260.239458][T12140] veth1_macvtap: entered promiscuous mode [ 1260.571495][T12140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.044700][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1261.206940][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1261.270554][ T10] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 1261.302460][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.365008][ T10] usb 6-1: config 0 has no interface number 1 [ 1261.371395][ T10] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1261.461979][ T10] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1261.585274][ T10] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1261.640576][ T10] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1261.729706][ T10] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1261.778856][T12140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.818802][T12456] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1098'. [ 1261.843367][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1262.050842][ T10] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1262.118551][T12456] 9p: Bad value for 'wfdno' [ 1262.149106][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.204282][T12456] loop6: detected capacity change from 0 to 64 [ 1262.210158][ T10] usb 6-1: Product: syz [ 1262.261396][T12456] bfs: Unknown parameter 'ªªªªªª»»»»»»†Ý`0' [ 1262.322725][ T10] usb 6-1: Manufacturer: syz [ 1262.393354][ T10] usb 6-1: SerialNumber: syz [ 1262.459094][ T10] usb 6-1: config 0 descriptor?? [ 1262.502935][T12343] hsr_slave_0: entered promiscuous mode [ 1262.548022][T12448] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1262.674075][T12343] hsr_slave_1: entered promiscuous mode [ 1262.748094][T12343] debugfs: 'hsr0' already exists in 'hsr' [ 1262.786764][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1262.834851][T12343] Cannot create hsr debugfs directory [ 1263.127463][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1264.134808][ T8322] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1264.166605][ T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1264.277612][ T10] usb 6-1: USB disconnect, device number 22 [ 1264.329019][ T9821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1264.345421][ T8322] usb 7-1: Using ep0 maxpacket: 32 [ 1264.353634][ T9821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1264.363731][ T9821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1264.385906][ T9821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1264.408946][ T9821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1264.416725][ T8322] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1264.466328][ T8322] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1264.480307][ T8322] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1264.495271][ T8322] usb 7-1: Product: syz [ 1264.545323][ T8322] usb 7-1: Manufacturer: syz [ 1264.584872][ T8322] usb 7-1: SerialNumber: syz [ 1264.643560][ T8322] usb 7-1: config 0 descriptor?? [ 1264.711324][T12463] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1264.834325][ T8322] hub 7-1:0.0: bad descriptor, ignoring hub [ 1264.899032][ T8322] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1264.930433][T12444] udevd[12444]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1265.089553][ T5778] Bluetooth: hci5: Invalid connection link type handle 0x00c9 [ 1265.162119][ T8322] usb 7-1: USB disconnect, device number 27 [ 1266.555878][ T5778] Bluetooth: hci6: command tx timeout [ 1268.326360][T12503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1109'. [ 1268.468224][T12503] 9p: Bad value for 'wfdno' [ 1268.533608][T12503] loop4: detected capacity change from 0 to 64 [ 1268.588276][T12503] bfs: Unknown parameter 'ªªªªªª»»»»»»†Ý`0' [ 1268.636809][ T5778] Bluetooth: hci6: command tx timeout [ 1268.984953][ T5902] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1269.248158][ T5902] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.355768][ T5902] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1269.469517][ T5902] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1269.502030][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.556608][ T5902] usb 7-1: Product: syz [ 1269.567775][ T5902] usb 7-1: Manufacturer: syz [ 1269.605644][ T5902] usb 7-1: SerialNumber: syz [ 1269.827698][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1269.879109][ T5902] usb 7-1: 0:2 : does not exist [ 1269.958975][ T5902] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1270.026813][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1270.081621][ T10] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 1270.115214][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.170989][ T10] usb 5-1: config 0 has no interface number 1 [ 1270.204993][ T10] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1270.294706][ T10] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1270.359508][ T10] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1270.444770][ T10] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1270.490908][ T10] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1270.602384][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1270.683679][T12343] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1270.714978][ T5778] Bluetooth: hci6: command tx timeout [ 1270.723204][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1270.749783][ T5902] usb 7-1: USB disconnect, device number 28 [ 1270.775043][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.790661][ T10] usb 5-1: Product: syz [ 1270.854120][ T10] usb 5-1: Manufacturer: syz [ 1270.894757][ T10] usb 5-1: SerialNumber: syz [ 1271.005775][ T10] usb 5-1: config 0 descriptor?? [ 1271.020165][T12510] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1271.057004][T12343] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1271.126780][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1271.169033][T12343] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1271.232114][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1271.330122][T12444] udevd[12444]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1271.370750][T12465] chnl_net:caif_netlink_parms(): no params data found [ 1271.759398][T12343] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1272.170534][ T10] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1272.277358][ T10] usb 5-1: USB disconnect, device number 59 [ 1272.808568][ T5778] Bluetooth: hci6: command tx timeout [ 1272.889273][ T5970] bridge_slave_1: left allmulticast mode [ 1272.933292][ T5970] bridge_slave_1: left promiscuous mode [ 1273.003914][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.014805][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1273.058033][T12424] udevd[12424]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1273.163424][ T5970] bridge_slave_0: left allmulticast mode [ 1273.195852][ T5970] bridge_slave_0: left promiscuous mode [ 1273.251545][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.268266][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1273.317323][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1273.425826][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1273.478391][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1273.549698][ T10] usb 5-1: Product: syz [ 1273.554146][ T10] usb 5-1: Manufacturer: syz [ 1273.584957][ T10] usb 5-1: SerialNumber: syz [ 1273.618482][ T10] usb 5-1: config 0 descriptor?? [ 1273.637841][T12525] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1273.726821][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 1273.746421][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1273.988638][ T5778] Bluetooth: hci1: Invalid connection link type handle 0x00c9 [ 1274.105508][ T8322] usb 5-1: USB disconnect, device number 60 [ 1275.110509][ T5970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1275.255671][ T5970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1275.359587][ T5970] bond0 (unregistering): Released all slaves [ 1275.960277][ T5970] hsr_slave_0: left promiscuous mode [ 1275.995681][ T5970] hsr_slave_1: left promiscuous mode [ 1276.036674][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.044290][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.167519][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.228279][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.464884][ T8322] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1276.485465][ T5825] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1276.608200][ T5970] veth1_macvtap: left promiscuous mode [ 1276.633181][ T5970] veth0_macvtap: left promiscuous mode [ 1276.655379][ T5970] veth1_vlan: left promiscuous mode [ 1276.660975][ T5970] veth0_vlan: left promiscuous mode [ 1276.704742][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 1276.724963][ T8322] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1276.770705][ T5825] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 1276.799203][ T8322] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1276.824853][ T5825] usb 6-1: config 0 has no interface number 1 [ 1276.863530][ T5825] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1276.885980][ T8322] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1276.943705][ T5825] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1276.973458][ T8322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.025885][ T5825] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1277.061179][T12551] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1277.145991][ T5825] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1277.236665][T12554] loop6: detected capacity change from 0 to 32768 [ 1277.239690][ T5825] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1277.260243][ T8322] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1277.361712][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1277.375626][T12554] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1277.469819][ T5825] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1277.524533][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.532813][ T5825] usb 6-1: Product: syz [ 1277.632054][ T5825] usb 6-1: Manufacturer: syz [ 1277.673768][ T5825] usb 6-1: SerialNumber: syz [ 1277.728698][ T5825] usb 6-1: config 0 descriptor?? [ 1277.823623][T12552] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1277.967787][T12554] XFS (loop6): Ending clean mount [ 1277.987165][T12554] XFS (loop6): Quotacheck needed: Please wait. [ 1278.046512][T12554] XFS (loop6): Quotacheck: Done. [ 1278.345929][ T5825] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1278.509650][ T8322] usb 5-1: USB disconnect, device number 61 [ 1279.895632][ T5825] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1281.580167][ T5825] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1281.765570][ T5825] usb 6-1: USB disconnect, device number 23 [ 1282.051599][T10730] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1282.311838][ T5970] team0 (unregistering): Port device team_slave_1 removed [ 1282.468332][ T5970] team0 (unregistering): Port device team_slave_0 removed [ 1282.623576][T12424] udevd[12424]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1282.656901][ T5825] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1282.838009][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 1282.877720][ T5825] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1282.921038][ T5825] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1282.957910][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1282.969043][ T5825] usb 6-1: Product: syz [ 1282.973935][ T5825] usb 6-1: Manufacturer: syz [ 1282.981026][ T5825] usb 6-1: SerialNumber: syz [ 1283.027423][ T5825] usb 6-1: config 0 descriptor?? [ 1283.084255][T12581] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1283.117148][ T5825] hub 6-1:0.0: bad descriptor, ignoring hub [ 1283.151856][ T5825] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1283.447561][ T5778] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 1283.610180][ T5825] usb 6-1: USB disconnect, device number 24 [ 1284.823441][T12465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.859091][T12465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.894958][T12465] bridge_slave_0: entered allmulticast mode [ 1284.964178][T12465] bridge_slave_0: entered promiscuous mode [ 1285.028363][T12465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.066829][T12465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.086191][T12465] bridge_slave_1: entered allmulticast mode [ 1285.125524][T12465] bridge_slave_1: entered promiscuous mode [ 1285.454828][ T5825] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1285.601401][T12611] syz.5.1134 (12611): /proc/12611/oom_adj is deprecated, please use /proc/12611/oom_score_adj instead. [ 1285.744744][ T5825] usb 7-1: Using ep0 maxpacket: 8 [ 1285.753568][T12465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.816714][ T5825] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 1285.874581][ T5825] usb 7-1: config 0 has no interface number 1 [ 1285.939056][ T5825] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1285.952982][T12465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.018906][ T5825] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1286.115112][ T5825] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1286.221550][ T8322] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1286.230093][ T5825] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1286.321697][ T5825] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1286.384169][ T5825] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1286.424778][ T8322] usb 5-1: device descriptor read/64, error -71 [ 1286.462871][ T5825] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1286.484548][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.492842][ T5825] usb 7-1: Product: syz [ 1286.540358][ T5825] usb 7-1: Manufacturer: syz [ 1286.574752][ T5825] usb 7-1: SerialNumber: syz [ 1286.609458][T12465] team0: Port device team_slave_0 added [ 1286.621181][ T5825] usb 7-1: config 0 descriptor?? [ 1286.639637][T12608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1286.684718][ T8322] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1286.713692][ T5825] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1286.741816][T12465] team0: Port device team_slave_1 added [ 1286.767487][ T5825] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1286.854659][ T8322] usb 5-1: device descriptor read/64, error -71 [ 1286.968237][ T8322] usb usb5-port1: attempt power cycle [ 1287.253225][ T5825] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1287.307831][ T5825] usb 7-1: USB disconnect, device number 29 [ 1287.357394][ T8322] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1287.401915][T12343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.435251][T12465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.470877][ T8322] usb 5-1: device descriptor read/8, error -71 [ 1287.527818][T12465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.672355][T12465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.756487][ T8322] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1287.825062][ T8322] usb 5-1: device descriptor read/8, error -71 [ 1287.844204][T12424] udevd[12424]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1287.942940][ T8322] usb usb5-port1: unable to enumerate USB device [ 1288.237390][T12465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.285534][T12465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.391426][T12465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.270563][ T5778] Bluetooth: hci1: Invalid connection link type handle 0x00c9 [ 1289.303714][T12343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.465813][T12465] hsr_slave_0: entered promiscuous mode [ 1289.512482][T12465] hsr_slave_1: entered promiscuous mode [ 1290.169919][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.177455][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.374242][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.381917][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.291387][T12465] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1293.449929][T12465] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1293.755545][T12465] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1293.958490][T12465] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1294.277997][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1294.484662][ T10] usb 5-1: device descriptor read/64, error -71 [ 1294.765279][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1294.974770][ T10] usb 5-1: device descriptor read/64, error -71 [ 1295.090936][ T10] usb usb5-port1: attempt power cycle [ 1295.492313][T12343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.509003][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1295.567507][ T10] usb 5-1: device descriptor read/8, error -71 [ 1295.866553][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1295.886965][T12465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.968259][ T10] usb 5-1: device descriptor read/8, error -71 [ 1296.143867][T12465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.157908][ T10] usb usb5-port1: unable to enumerate USB device [ 1296.276267][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.284008][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.412664][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.420337][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.208226][T12465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.863382][T12465] veth0_vlan: entered promiscuous mode [ 1300.070339][T12465] veth1_vlan: entered promiscuous mode [ 1300.761101][T12465] veth0_macvtap: entered promiscuous mode [ 1300.948856][T12465] veth1_macvtap: entered promiscuous mode [ 1301.326448][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1301.335899][T12465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1301.349374][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1301.360752][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1301.386612][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1301.403223][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1301.621545][T12465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1302.063881][T11257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.130368][T11257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.326605][T11257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.398778][T11257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.624961][T10560] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1302.715482][ T5902] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1302.858052][T10560] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 1302.906858][ T5902] usb 7-1: device descriptor read/64, error -71 [ 1303.056687][T10560] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1303.104942][T10560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1303.113391][T10560] usb 5-1: Product: syz [ 1303.162249][ T5902] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1303.174789][T10560] usb 5-1: Manufacturer: syz [ 1303.213896][T10560] usb 5-1: SerialNumber: syz [ 1303.334962][T10560] usb 5-1: config 0 descriptor?? [ 1303.376020][ T5902] usb 7-1: device descriptor read/64, error -71 [ 1303.422090][T10560] ims_pcu 5-1:0.0: Zero length descriptor [ 1303.433159][T10560] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 1303.488403][ T5902] usb usb7-port1: attempt power cycle [ 1303.597271][ T5778] Bluetooth: hci2: command tx timeout [ 1303.712721][T10560] usb 5-1: USB disconnect, device number 70 [ 1303.894717][ T5902] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1303.969785][ T5902] usb 7-1: device descriptor read/8, error -71 [ 1304.258502][ T5902] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1304.351582][ T5902] usb 7-1: device descriptor read/8, error -71 [ 1304.514084][ T5902] usb usb7-port1: unable to enumerate USB device [ 1305.676210][ T5778] Bluetooth: hci2: command tx timeout [ 1305.719314][T11257] bridge_slave_1: left allmulticast mode [ 1305.774781][T11257] bridge_slave_1: left promiscuous mode [ 1305.810955][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.972099][T11257] bridge_slave_0: left allmulticast mode [ 1306.024566][T11257] bridge_slave_0: left promiscuous mode [ 1306.031293][T11257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.290490][ T5778] Bluetooth: hci2: command tx timeout [ 1309.961145][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.177245][T11257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.250984][T11257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.316640][ T5778] Bluetooth: hci2: command tx timeout [ 1310.339904][T11257] bond0 (unregistering): Released all slaves [ 1310.572930][T12716] chnl_net:caif_netlink_parms(): no params data found [ 1311.159780][T11257] hsr_slave_0: left promiscuous mode [ 1311.214720][T11257] hsr_slave_1: left promiscuous mode [ 1311.259279][T11257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.368712][T11257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.574800][ T8322] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1311.794977][ T8322] usb 6-1: Using ep0 maxpacket: 8 [ 1311.843638][ T8322] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.895770][ T8322] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1311.935252][ T8322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.228708][T11257] team0 (unregistering): Port device team_slave_1 removed [ 1313.324137][T11257] team0 (unregistering): Port device team_slave_0 removed [ 1314.581646][ T5902] usb 6-1: USB disconnect, device number 25 [ 1318.185338][T12716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.192892][T12716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.245247][T12716] bridge_slave_0: entered allmulticast mode [ 1318.266897][T12716] bridge_slave_0: entered promiscuous mode [ 1318.334647][T12716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.368114][T12716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.405529][T12716] bridge_slave_1: entered allmulticast mode [ 1318.446033][T12716] bridge_slave_1: entered promiscuous mode [ 1318.877470][T12716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.018530][T12716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1320.321728][T12716] team0: Port device team_slave_0 added [ 1320.408821][T12716] team0: Port device team_slave_1 added [ 1320.619545][ T5969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.684061][T12716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.700564][ T5969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.745958][T12716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1320.860218][T12716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.909858][T12716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.964627][T12716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.033469][T12716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.248215][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.299481][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.437473][T12716] hsr_slave_0: entered promiscuous mode [ 1322.464765][ T8322] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1322.512156][T12716] hsr_slave_1: entered promiscuous mode [ 1322.550515][T12716] debugfs: 'hsr0' already exists in 'hsr' [ 1322.574189][T12716] Cannot create hsr debugfs directory [ 1322.725118][ T8322] usb 5-1: Using ep0 maxpacket: 8 [ 1322.760001][ T8322] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1322.769942][ T8322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.780776][ T8322] usb 5-1: config 0 has no interfaces? [ 1322.786618][ T8322] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1322.798609][ T8322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.820453][ T8322] usb 5-1: config 0 descriptor?? [ 1323.057037][ T5905] usb 5-1: USB disconnect, device number 71 [ 1324.085104][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1324.111074][ T5775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1324.125875][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1324.140169][ T5775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1324.158149][ T5775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1326.186723][ T6011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.234891][ T5778] Bluetooth: hci4: command tx timeout [ 1327.190788][ T6011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.287436][ T6011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.314790][ T5778] Bluetooth: hci4: command tx timeout [ 1328.612574][ T6011] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.470022][T12716] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1329.547323][T12716] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1329.807785][T12716] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1329.883113][T12716] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1330.449373][ T5778] Bluetooth: hci4: command tx timeout [ 1330.931508][ T6011] bridge_slave_1: left allmulticast mode [ 1330.953490][ T6011] bridge_slave_1: left promiscuous mode [ 1331.013365][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.655989][ T6011] bridge_slave_0: left allmulticast mode [ 1331.661945][ T6011] bridge_slave_0: left promiscuous mode [ 1331.670616][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.708566][ T8322] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1331.915224][ T8322] usb 5-1: Using ep0 maxpacket: 8 [ 1331.941881][ T8322] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1331.954515][ T8322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.998748][ T8322] usb 5-1: config 0 has no interfaces? [ 1332.030460][ T8322] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1332.052043][ T8322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.099914][ T8322] usb 5-1: config 0 descriptor?? [ 1332.348301][ T8322] usb 5-1: USB disconnect, device number 72 [ 1332.475025][ T5778] Bluetooth: hci4: command tx timeout [ 1333.374866][ T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1333.566895][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1333.599104][ T10] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.612765][ T10] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1333.642880][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1333.650853][ T10] usb 7-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1333.673374][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.709126][ T10] usb 7-1: config 0 descriptor?? [ 1334.207601][ T10] kye 0003:0458:5012.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1334.252614][ T10] hid_parser_main: 73 callbacks suppressed [ 1334.252728][ T10] kye 0003:0458:5012.0003: unknown main item tag 0x0 [ 1334.284184][ T10] kye 0003:0458:5012.0003: unknown main item tag 0x0 [ 1334.286655][ T6011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.321020][ T10] kye 0003:0458:5012.0003: unknown main item tag 0x0 [ 1334.349044][ T10] kye 0003:0458:5012.0003: unknown main item tag 0x0 [ 1334.363912][ T10] kye 0003:0458:5012.0003: unknown main item tag 0x0 [ 1334.368022][ T6011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.476222][ T6011] bond0 (unregistering): Released all slaves [ 1334.513613][ T10] kye 0003:0458:5012.0003: hidraw0: USB HID v0.01 Device [HID 0458:5012] on usb-dummy_hcd.6-1/input0 [ 1334.542159][ T10] kye 0003:0458:5012.0003: tablet-enabling feature report not found [ 1334.564266][T12867] chnl_net:caif_netlink_parms(): no params data found [ 1334.601107][ T10] kye 0003:0458:5012.0003: tablet enabling failed [ 1334.837457][ T10] usb 7-1: USB disconnect, device number 34 [ 1335.388416][ T5775] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1335.416196][ T5775] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1335.442792][ T5775] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1335.495743][ T5775] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1335.526059][ T5775] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1335.566825][T12925] fido_id[12925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1336.476994][ T6011] hsr_slave_0: left promiscuous mode [ 1336.534971][ T6011] hsr_slave_1: left promiscuous mode [ 1336.543343][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1336.584507][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.612644][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1336.634788][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1336.745616][ T6011] veth1_macvtap: left promiscuous mode [ 1336.751392][ T6011] veth0_macvtap: left promiscuous mode [ 1336.796077][ T6011] veth1_vlan: left promiscuous mode [ 1336.801689][ T6011] veth0_vlan: left promiscuous mode [ 1337.594892][ T5775] Bluetooth: hci6: command tx timeout [ 1339.686077][ T5775] Bluetooth: hci6: command tx timeout [ 1341.214986][ T6011] team0 (unregistering): Port device team_slave_1 removed [ 1341.248236][ T6011] team0 (unregistering): Port device team_slave_0 removed [ 1341.754690][ T5775] Bluetooth: hci6: command tx timeout [ 1342.709013][T12867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.760077][T12867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.795626][T12867] bridge_slave_0: entered allmulticast mode [ 1342.825455][T12867] bridge_slave_0: entered promiscuous mode [ 1342.946429][T12867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.953981][T12867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.019807][T12867] bridge_slave_1: entered allmulticast mode [ 1343.070521][T12867] bridge_slave_1: entered promiscuous mode [ 1343.620805][T12867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1343.703418][T12867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1343.836970][ T5775] Bluetooth: hci6: command tx timeout [ 1344.011181][T12867] team0: Port device team_slave_0 added [ 1344.063541][T12867] team0: Port device team_slave_1 added [ 1344.413642][T12867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.446764][T12867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.502309][T12867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.683060][T12867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.703564][T12867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.778164][T12867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.613365][T12867] hsr_slave_0: entered promiscuous mode [ 1345.666160][T12867] hsr_slave_1: entered promiscuous mode [ 1345.725250][T12930] chnl_net:caif_netlink_parms(): no params data found [ 1346.796434][T12716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1347.162494][T12716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1347.390757][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.398299][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1347.720089][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.727946][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.493216][T12930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.515003][T12930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.522973][T12930] bridge_slave_0: entered allmulticast mode [ 1348.599907][T12930] bridge_slave_0: entered promiscuous mode [ 1348.760266][T12930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.787921][T12930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.820675][T12930] bridge_slave_1: entered allmulticast mode [ 1349.345214][T12930] bridge_slave_1: entered promiscuous mode [ 1351.471011][T12930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.591744][T12930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.913970][T12930] team0: Port device team_slave_0 added [ 1351.994280][T12930] team0: Port device team_slave_1 added [ 1352.313174][T12930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.351650][T12930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.397396][T12930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.537298][T12930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.585452][T12930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1352.690316][T12930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.687622][T12930] hsr_slave_0: entered promiscuous mode [ 1353.778734][T12930] hsr_slave_1: entered promiscuous mode [ 1353.813082][T12930] debugfs: 'hsr0' already exists in 'hsr' [ 1353.863301][T12930] Cannot create hsr debugfs directory [ 1354.591069][T12867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1354.687126][T12867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1354.824019][T12867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1354.916692][T12867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1354.935230][ T5902] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1355.123214][ T5902] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.164929][ T5902] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1355.189828][ T5902] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1355.211593][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.288308][ T5902] usb 7-1: config 0 descriptor?? [ 1355.348559][ T5902] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1355.564539][ T10] usb 7-1: USB disconnect, device number 35 [ 1355.598483][T12716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.068609][ T8322] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1356.320656][ T8322] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.375546][ T8322] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1356.444114][ T8322] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1356.476415][ T8322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.550632][ T8322] usb 7-1: config 0 descriptor?? [ 1356.597903][ T8322] hub 7-1:0.0: bad descriptor, ignoring hub [ 1356.604053][ T8322] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1356.664067][ T8322] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1356.685444][ T5905] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1356.905006][ T5905] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1356.939679][ T5905] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1356.971775][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1356.995819][ T5905] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1357.018093][ T5905] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1357.069210][ T5905] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1357.092580][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1357.103384][ T5905] usb 5-1: Product: syz [ 1357.103973][T12930] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1357.111102][ T5905] usb 5-1: Manufacturer: syz [ 1357.156407][ T5905] cdc_wdm 5-1:1.0: skipping garbage [ 1357.161855][ T5905] cdc_wdm 5-1:1.0: skipping garbage [ 1357.187081][ T5905] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1357.193578][ T5905] cdc_wdm 5-1:1.0: Unknown control protocol [ 1357.278767][T12930] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1357.385084][ T8322] usb 5-1: USB disconnect, device number 73 [ 1357.409527][T12930] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1357.547202][T12867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.599225][T12930] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1357.783811][T12867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.918810][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.926424][T11257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1358.093914][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.101538][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1358.131644][ T10] usb 7-1: USB disconnect, device number 36 [ 1358.144909][ T5902] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1358.338841][ T5902] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1358.377957][ T5902] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1358.404159][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1358.423176][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1358.471082][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1358.513041][ T5902] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1358.540995][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1358.556614][T10560] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1358.577945][ T5902] usb 5-1: Product: syz [ 1358.582462][ T5902] usb 5-1: Manufacturer: syz [ 1358.629383][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 1358.669783][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 1358.684118][ T5902] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1358.691503][ T5902] cdc_wdm 5-1:1.0: Unknown control protocol [ 1358.754590][T10560] usb 7-1: Using ep0 maxpacket: 16 [ 1358.785464][T10560] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.816263][T10560] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.857738][T10560] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1358.867992][T10560] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1358.905753][T10560] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.946520][T10560] usb 7-1: config 0 descriptor?? [ 1359.149440][T12716] veth0_vlan: entered promiscuous mode [ 1359.338795][T12716] veth1_vlan: entered promiscuous mode [ 1359.413278][T10560] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 1359.453488][T10560] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 1359.468476][T10560] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 1359.476363][T10560] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 1359.483784][T10560] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 1359.524709][T10560] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 1359.553187][T10560] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 1359.562258][T10560] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 1359.571543][T10560] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 1359.581732][T10560] kye 0003:0458:0138.0004: unknown main item tag 0x0 [ 1359.643414][T10560] kye 0003:0458:0138.0004: unexpected long global item [ 1359.701931][T10560] kye 0003:0458:0138.0004: parse failed [ 1359.710388][T10560] kye 0003:0458:0138.0004: probe with driver kye failed with error -22 [ 1359.750363][T10560] usb 7-1: USB disconnect, device number 37 [ 1360.056194][T10560] usb 5-1: USB disconnect, device number 74 [ 1360.076480][T12930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.463807][T12930] 8021q: adding VLAN 0 to HW filter on device team0 [ 1360.571998][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.579696][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.702953][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.710584][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.345187][T10560] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1361.568717][T10560] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1361.624619][T10560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.684807][T10560] usb 5-1: Product: syz [ 1361.689307][T10560] usb 5-1: Manufacturer: syz [ 1361.694119][T10560] usb 5-1: SerialNumber: syz [ 1361.843012][T10560] usb 5-1: config 0 descriptor?? [ 1361.912321][T12867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.158148][T10560] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1362.592540][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1362.610771][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1362.620901][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1362.652786][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1362.683999][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1363.461907][T12867] veth0_vlan: entered promiscuous mode [ 1364.487329][T12867] veth1_vlan: entered promiscuous mode [ 1364.640832][T10560] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1364.745451][T10560] usb 5-1: USB disconnect, device number 75 [ 1364.804786][ T5778] Bluetooth: hci0: command tx timeout [ 1365.802991][T12930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.826647][ T5905] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1365.942795][T12867] veth0_macvtap: entered promiscuous mode [ 1365.986784][T13126] chnl_net:caif_netlink_parms(): no params data found [ 1366.020467][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.044190][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1366.075245][ T5905] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1366.115442][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.169839][ T5905] usb 5-1: config 0 descriptor?? [ 1366.212065][ T5905] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1366.278557][T12867] veth1_macvtap: entered promiscuous mode [ 1366.420179][ T8322] usb 5-1: USB disconnect, device number 76 [ 1366.874878][ T5778] Bluetooth: hci0: command tx timeout [ 1366.941040][T12867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1366.967210][ T8322] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1367.123553][ T5895] bridge_slave_1: left allmulticast mode [ 1367.150663][ T5895] bridge_slave_1: left promiscuous mode [ 1367.163849][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.184722][ T8322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.185278][ T5895] bridge_slave_0: left allmulticast mode [ 1367.202078][ T5895] bridge_slave_0: left promiscuous mode [ 1367.224679][ T8322] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1367.231636][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.275818][ T8322] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1367.304736][ T8322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.344732][ T8322] usb 5-1: config 0 descriptor?? [ 1367.392158][ T8322] hub 5-1:0.0: bad descriptor, ignoring hub [ 1367.403083][ T8322] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1367.418642][ T8322] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1367.920533][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.020560][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.092491][ T5895] bond0 (unregistering): Released all slaves [ 1368.280854][T12867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.651421][ T5895] hsr_slave_0: left promiscuous mode [ 1368.667670][ T5895] hsr_slave_1: left promiscuous mode [ 1368.687661][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1368.736241][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1368.832556][ T5895] veth1_vlan: left promiscuous mode [ 1368.839275][ T8322] usb 5-1: USB disconnect, device number 77 [ 1368.874911][ T5895] veth0_vlan: left promiscuous mode [ 1368.956459][ T5775] Bluetooth: hci0: command tx timeout [ 1369.141728][T13182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1233'. [ 1369.215143][T13182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1233'. [ 1370.584603][T10560] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 1370.622311][ T5895] team0 (unregistering): Port device team_slave_1 removed [ 1370.688376][ T5895] team0 (unregistering): Port device team_slave_0 removed [ 1370.802985][T10560] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1370.839382][T10560] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.884567][T10560] usb 7-1: Product: syz [ 1370.888992][T10560] usb 7-1: Manufacturer: syz [ 1370.893824][T10560] usb 7-1: SerialNumber: syz [ 1370.927401][T10560] usb 7-1: config 0 descriptor?? [ 1371.037367][ T5775] Bluetooth: hci0: command tx timeout [ 1371.220504][T10560] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1371.384029][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.463079][ T5969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.698604][T12930] veth0_vlan: entered promiscuous mode [ 1371.822281][ T5969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.877424][ T6279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.034801][ T8322] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1372.078479][ T6279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.130109][T13126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.148243][T13126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.175176][T13126] bridge_slave_0: entered allmulticast mode [ 1372.210299][T13126] bridge_slave_0: entered promiscuous mode [ 1372.261928][ T8322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.293449][ T8322] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1372.350818][ T8322] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1372.363520][T13126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.371835][T13126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.385735][ T8322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.406286][T13126] bridge_slave_1: entered allmulticast mode [ 1372.433265][T13126] bridge_slave_1: entered promiscuous mode [ 1372.445372][ T8322] usb 5-1: config 0 descriptor?? [ 1372.501067][T12930] veth1_vlan: entered promiscuous mode [ 1372.553418][ T8322] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1372.812431][ T5902] usb 5-1: USB disconnect, device number 78 [ 1373.082347][T13126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.184033][T13126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.364825][ T5902] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1373.500967][T13126] team0: Port device team_slave_0 added [ 1373.567996][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.592116][T13126] team0: Port device team_slave_1 added [ 1373.614831][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1373.653239][T10560] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1373.689109][ T5902] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1373.735287][T10560] usb 7-1: USB disconnect, device number 38 [ 1373.749546][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.788794][ T5902] usb 5-1: config 0 descriptor?? [ 1373.867192][ T5902] hub 5-1:0.0: bad descriptor, ignoring hub [ 1373.873355][ T5902] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1373.943509][ T5902] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1374.030013][T13126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.042345][T13126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.082258][T13126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1374.130748][T13126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1374.138570][T13126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.214816][T13126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1374.255592][T12930] veth0_macvtap: entered promiscuous mode [ 1374.578341][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1241'. [ 1374.733925][T12930] veth1_macvtap: entered promiscuous mode [ 1374.873741][T13126] hsr_slave_0: entered promiscuous mode [ 1374.915956][T13126] hsr_slave_1: entered promiscuous mode [ 1374.955953][T13126] debugfs: 'hsr0' already exists in 'hsr' [ 1374.968327][T13126] Cannot create hsr debugfs directory [ 1375.392587][T13231] libceph: resolve '0..' (ret=-3): failed [ 1375.507798][T10560] usb 5-1: USB disconnect, device number 79 [ 1375.913099][T13238] loop2: detected capacity change from 0 to 3 [ 1375.953818][T13238] Dev loop2: unable to read RDB block 3 [ 1375.979522][T13238] loop2: unable to read partition table [ 1376.006299][T13238] loop2: partition table beyond EOD, truncated [ 1376.052729][T13238] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1376.301464][T12930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1376.709122][T12930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.293303][ T6011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.531615][T11257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.572587][T11257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.841350][T11257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.537347][T13126] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1379.666707][T13126] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1379.755751][T10560] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1379.835162][T13126] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1379.926920][T13126] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1380.037219][T10560] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1380.075537][T10560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.083817][T10560] usb 5-1: Product: syz [ 1380.200982][T10560] usb 5-1: Manufacturer: syz [ 1380.223745][T10560] usb 5-1: SerialNumber: syz [ 1380.311467][T10560] usb 5-1: config 0 descriptor?? [ 1380.639882][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.672424][T10560] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1380.694738][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.173747][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1381.242250][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1382.395045][ T5825] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1382.575979][T13126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1382.624601][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 1382.656584][ T5825] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1382.763310][ T5825] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1382.802748][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1382.853321][ T5825] usb 3-1: Product: syz [ 1382.894748][ T5825] usb 3-1: Manufacturer: syz [ 1382.899610][ T5825] usb 3-1: SerialNumber: syz [ 1383.029884][ T5825] usb 3-1: config 0 descriptor?? [ 1383.066720][T13283] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1383.132427][T13126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1383.150342][T10560] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1383.343018][T10560] usb 5-1: USB disconnect, device number 80 [ 1383.380923][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.388587][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.657039][T13289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.693809][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.701626][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.727405][T13289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.689206][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1249'. [ 1385.544587][ T5825] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1385.562248][ T10] usb 3-1: USB disconnect, device number 18 [ 1385.781543][ T5825] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.839550][ T5825] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1385.867838][T13309] loop2: detected capacity change from 0 to 3 [ 1385.901074][T13309] Dev loop2: unable to read RDB block 3 [ 1385.926256][ T5825] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1385.951157][T13309] loop2: unable to read partition table [ 1385.993306][T13309] loop2: partition table beyond EOD, truncated [ 1385.995750][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.031943][T13309] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1386.166039][ T5825] usb 7-1: config 0 descriptor?? [ 1386.230766][ T5825] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1386.492592][ T5825] usb 7-1: USB disconnect, device number 39 [ 1387.099725][ T5825] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1387.336527][ T5825] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.414581][ T5825] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1387.504613][ T5825] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1387.574839][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.657396][ T5825] usb 7-1: config 0 descriptor?? [ 1387.714621][ T5825] hub 7-1:0.0: bad descriptor, ignoring hub [ 1387.743238][ T5825] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1387.812858][ T5825] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1388.001609][T13126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1388.544760][ T5825] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1388.661623][T11257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.703766][T11257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.746798][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 1388.786972][ T5825] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.837376][ T5825] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1388.875047][ T5825] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1388.921842][ T5825] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1388.985446][ T5825] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1389.027383][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.091542][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.129884][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.198861][ T5825] usbtmc 5-1:16.0: bulk endpoints not found [ 1389.496528][ T10] usb 7-1: USB disconnect, device number 40 [ 1391.677854][ T10] usb 5-1: USB disconnect, device number 81 [ 1391.692490][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 1392.055629][ T5825] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1392.212668][T13357] loop2: detected capacity change from 0 to 3 [ 1392.307261][T13357] Dev loop2: unable to read RDB block 3 [ 1392.315169][ T5825] usb 7-1: Using ep0 maxpacket: 32 [ 1392.330432][T13357] loop2: unable to read partition table [ 1392.419104][ T5825] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1392.432896][T13357] loop2: partition table beyond EOD, truncated [ 1392.603755][T13357] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1392.628686][ T5825] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1392.716498][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1392.754593][ T5825] usb 7-1: Product: syz [ 1392.759006][ T5825] usb 7-1: Manufacturer: syz [ 1392.763840][ T5825] usb 7-1: SerialNumber: syz [ 1392.833606][T13126] veth0_vlan: entered promiscuous mode [ 1392.848288][ T5825] usb 7-1: config 0 descriptor?? [ 1392.857547][T13354] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1393.047348][T13126] veth1_vlan: entered promiscuous mode [ 1393.437657][T13354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.551551][T13354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.203506][T13126] veth0_macvtap: entered promiscuous mode [ 1394.477073][T13126] veth1_macvtap: entered promiscuous mode [ 1394.921856][ T8322] usb 7-1: USB disconnect, device number 41 [ 1395.242122][T13126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.381451][T13126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1395.590892][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.630688][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.727181][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.874579][ T5969] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.254685][ T8322] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1398.444771][ T8322] usb 5-1: Using ep0 maxpacket: 8 [ 1398.515071][ T8322] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1398.560178][ T8322] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1398.626092][ T8322] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1398.671016][ T8322] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1398.686054][T13393] loop2: detected capacity change from 0 to 3 [ 1398.722021][T13393] Dev loop2: unable to read RDB block 3 [ 1398.739298][T13393] loop2: unable to read partition table [ 1398.783530][T13393] loop2: partition table beyond EOD, truncated [ 1398.791757][ T8322] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1398.804729][ T8322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.855014][T13393] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1398.929324][ T8322] usbtmc 5-1:16.0: bulk endpoints not found [ 1401.026301][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 1401.313052][ T10] usb 5-1: USB disconnect, device number 82 [ 1401.656586][T13428] binder_alloc: 13424: binder_alloc_buf, no vma [ 1402.509482][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1283'. [ 1405.150505][ T5775] Bluetooth: hci5: unexpected event for opcode 0x0c7b [ 1405.224927][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1405.467279][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1405.506788][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1405.540813][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1405.623397][ T10] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1405.666171][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1405.743785][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1405.801317][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.897674][ T10] usbtmc 3-1:16.0: bulk endpoints not found [ 1406.548150][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.608270][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.787956][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1294'. [ 1406.982298][ T8322] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1407.165919][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.205487][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.263825][ T8322] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1407.310206][ T8322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.365052][ T8322] usb 5-1: Product: syz [ 1407.384846][ T8322] usb 5-1: Manufacturer: syz [ 1407.421875][ T8322] usb 5-1: SerialNumber: syz [ 1407.484892][ T8322] usb 5-1: config 0 descriptor?? [ 1407.597522][ T8322] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1408.409669][ T5825] usb 3-1: USB disconnect, device number 19 [ 1409.195623][ T5775] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1409.205399][ T5775] Bluetooth: hci5: Injecting HCI hardware error event [ 1409.213477][ T5778] Bluetooth: hci5: hardware error 0x00 [ 1409.315449][ T8322] gspca_stk1135: reg_w 0x200 err -71 [ 1409.323139][ T8322] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.332560][ T8322] gspca_stk1135: Sensor write failed [ 1409.339312][ T8322] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.347876][ T8322] gspca_stk1135: Sensor write failed [ 1409.353452][ T8322] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.363121][ T8322] gspca_stk1135: Sensor read failed [ 1409.369578][ T8322] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.424696][ T8322] gspca_stk1135: Sensor read failed [ 1409.444537][ T8322] gspca_stk1135: Detected sensor type unknown (0x0) [ 1409.461358][ T8322] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.494715][ T8322] gspca_stk1135: Sensor read failed [ 1409.542860][ T8322] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.589178][ T8322] gspca_stk1135: Sensor read failed [ 1409.634124][ T8322] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.640946][ T8322] gspca_stk1135: Sensor write failed [ 1409.694607][ T8322] gspca_stk1135: serial bus timeout: status=0x00 [ 1409.701149][ T8322] gspca_stk1135: Sensor write failed [ 1409.778538][ T8322] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1409.890316][ T8322] usb 5-1: USB disconnect, device number 83 [ 1411.274647][ T5778] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1412.358583][ T5778] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 1412.682869][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1304'. [ 1413.316985][T13532] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1413.958241][ T10] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1414.288502][ T10] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1414.334958][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.401195][ T10] usb 7-1: Product: syz [ 1414.437120][ T10] usb 7-1: Manufacturer: syz [ 1414.463193][ T10] usb 7-1: SerialNumber: syz [ 1414.525533][ T10] usb 7-1: config 0 descriptor?? [ 1414.590815][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1416.277257][ T10] gspca_stk1135: reg_w 0x200 err -71 [ 1416.283857][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1416.371435][ T10] gspca_stk1135: Sensor write failed [ 1416.395112][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1416.419484][ T10] gspca_stk1135: Sensor write failed [ 1416.452493][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1416.510982][ T10] gspca_stk1135: Sensor read failed [ 1416.558694][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1416.632725][ T10] gspca_stk1135: Sensor read failed [ 1416.711898][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 1416.802530][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1416.830575][ T10] gspca_stk1135: Sensor read failed [ 1416.894245][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1416.945250][ T10] gspca_stk1135: Sensor read failed [ 1416.950635][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1417.055219][ T10] gspca_stk1135: Sensor write failed [ 1417.060785][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1417.245052][ T10] gspca_stk1135: Sensor write failed [ 1417.279807][ T10] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 1417.493542][ T10] usb 7-1: USB disconnect, device number 42 [ 1419.706715][ T5778] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1420.924605][ T8322] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1421.153333][ T8322] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1421.194484][ T8322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.252870][ T8322] usb 3-1: config 0 descriptor?? [ 1421.407755][ T8322] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1421.599365][ T8322] gp8psk: usb in 128 operation failed. [ 1421.876062][ T8322] gp8psk: usb in 137 operation failed. [ 1421.881747][ T8322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1421.984918][ T8322] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1422.035314][ T8322] usb 3-1: media controller created [ 1422.478597][ T8322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1422.836988][ T8322] gp8psk_fe: Frontend attached [ 1422.842021][ T8322] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1422.945021][ T8322] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1423.247937][ T8322] gp8psk: usb in 138 operation failed. [ 1423.253627][ T8322] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1423.315025][ T8322] gp8psk: found Genpix USB device pID = 203 (hex) [ 1423.404157][ T8322] usb 3-1: USB disconnect, device number 20 [ 1424.395747][ T5902] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1424.536825][ T5778] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1424.633985][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 1424.733717][ T5902] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1424.834666][ T5902] usb 1-1: config 140 has an invalid interface number: 182 but max is 1 [ 1424.843303][ T5902] usb 1-1: config 140 has no interface number 1 [ 1424.933209][ T5902] usb 1-1: config 140 interface 182 has no altsetting 0 [ 1425.033835][ T5902] usb 1-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 1425.092339][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.191934][ T8322] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1425.212617][ T5902] usb 1-1: Product: syz [ 1425.254798][ T5902] usb 1-1: Manufacturer: syz [ 1425.259655][ T5902] usb 1-1: SerialNumber: syz [ 1425.735769][ T5902] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 1426.206434][ T5902] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 1426.297783][ T10] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1426.436801][ T5902] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1426.498888][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1426.516231][ T5902] usb 1-1: device firmware changed [ 1426.553306][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1426.590155][ T5902] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1426.616821][ T5902] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1426.627752][T13644] usb 1-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 1426.643578][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1426.666577][T13644] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 1426.712160][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1426.722178][ T5344] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1426.736740][ T5902] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 1426.755330][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.775053][ T5902] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1426.787099][ T10] usb 7-1: Product: syz [ 1426.796614][ T5902] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1426.822591][ T10] usb 7-1: Manufacturer: syz [ 1426.832734][ T10] usb 7-1: SerialNumber: syz [ 1426.863924][ T10] usb 7-1: config 0 descriptor?? [ 1426.920404][ T5344] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1426.943657][ T5902] usb 1-1: USB disconnect, device number 2 [ 1426.966369][ T5344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.987337][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1427.040450][ T5902] usb 1-1: [ueagle-atm] ADSL device removed [ 1427.063091][ T5344] usb 5-1: config 0 descriptor?? [ 1427.089258][ T10] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1427.228838][ T5344] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1427.379271][ T5344] gp8psk: usb in 128 operation failed. [ 1427.618180][ T10] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1427.650013][ T5344] gp8psk: usb in 137 operation failed. [ 1427.677774][ T5344] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1427.703114][ T10] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1427.755430][ T5344] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1427.809049][ T5344] usb 5-1: media controller created [ 1428.163915][ T5344] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1428.345579][ T5825] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1428.399812][ T10] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1428.455846][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1428.477248][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1428.526065][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1428.575007][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 1428.613602][ T5825] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1428.675319][ T5344] gp8psk_fe: Frontend attached [ 1428.680462][ T5344] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1428.688316][ T5825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.784209][ T5344] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1428.794979][ T5825] usb 3-1: config 0 has no interfaces? [ 1428.795160][ T5825] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1428.795315][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.968601][ T5825] usb 3-1: config 0 descriptor?? [ 1429.082363][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1429.145959][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1429.258204][ T5344] gp8psk: usb in 138 operation failed. [ 1429.304715][ T5344] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1429.348245][ T5344] gp8psk: found Genpix USB device pID = 203 (hex) [ 1429.495064][ T5344] usb 5-1: USB disconnect, device number 84 [ 1429.579391][ T5825] usb 3-1: USB disconnect, device number 21 [ 1429.660794][ T10] usb 7-1: USB disconnect, device number 43 [ 1430.218781][T13647] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1430.527637][T13647] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.595225][T13647] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1430.708580][T13647] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1430.801885][T13647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.079794][T13647] usb 1-1: config 0 descriptor?? [ 1431.198822][T13647] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1432.483284][ T5344] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1432.817017][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.374913][ T5825] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1434.650125][ T5825] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1434.730303][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.801595][ T5825] usb 7-1: Product: syz [ 1434.856348][ T5825] usb 7-1: Manufacturer: syz [ 1434.861204][ T5825] usb 7-1: SerialNumber: syz [ 1434.868716][T13647] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1434.977806][ T5825] usb 7-1: config 0 descriptor?? [ 1435.314535][T13647] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1435.368533][ T5825] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1435.383949][T13647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.606243][T13647] usb 3-1: config 0 descriptor?? [ 1435.762883][T13647] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1436.124182][T13647] gp8psk: usb in 128 operation failed. [ 1436.410447][T13647] gp8psk: usb in 137 operation failed. [ 1436.468070][T13647] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1436.568614][T13647] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1436.615581][T13647] usb 3-1: media controller created [ 1437.039866][T13647] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1437.639116][T13647] gp8psk_fe: Frontend attached [ 1437.693275][T13647] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1437.737073][T13647] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1438.199660][T13647] gp8psk: usb in 138 operation failed. [ 1438.277023][T13647] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1438.320727][ T5825] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1438.383686][T13647] gp8psk: found Genpix USB device pID = 203 (hex) [ 1438.432948][ T5825] usb 7-1: USB disconnect, device number 44 [ 1438.506767][T13647] usb 3-1: USB disconnect, device number 22 [ 1440.578407][T13647] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1440.994919][T13647] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1442.230629][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1361'. [ 1442.484501][T13737] bridge0: entered promiscuous mode [ 1442.517500][T13737] vlan2: entered promiscuous mode [ 1443.647429][T13743] capability: warning: `syz.2.1362' uses 32-bit capabilities (legacy support in use) [ 1445.054796][ T5825] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1445.376377][ T5825] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1445.480516][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.619494][ T5825] usb 3-1: config 0 descriptor?? [ 1445.785897][ T5825] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1445.991182][ T5825] gp8psk: usb in 128 operation failed. [ 1446.230747][ T5825] gp8psk: usb in 137 operation failed. [ 1446.315138][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1446.390654][ T5825] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1446.455074][ T5825] usb 3-1: media controller created [ 1446.634238][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1446.644739][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1446.655152][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1446.667468][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1446.688843][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1446.815364][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1447.256820][ T5825] gp8psk_fe: Frontend attached [ 1447.261825][ T5825] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1447.381336][ T5825] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1447.904716][ T5825] gp8psk: usb in 138 operation failed. [ 1447.910384][ T5825] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1448.020544][ T5825] gp8psk: found Genpix USB device pID = 203 (hex) [ 1448.094217][ T5825] usb 3-1: USB disconnect, device number 24 [ 1448.744878][ T5778] Bluetooth: hci2: command tx timeout [ 1449.588051][ T5825] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1449.952991][ T8322] usb 1-1: USB disconnect, device number 3 [ 1450.077887][ T5825] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1450.235931][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 1450.358843][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.410227][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1450.450357][ T5825] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1450.541219][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.657608][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.702705][ T5825] usb 3-1: config 0 descriptor?? [ 1450.797179][ T5775] Bluetooth: hci2: command tx timeout [ 1451.201203][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.269462][ T5825] usbhid 3-1:0.0: can't add hid device: -71 [ 1451.317772][ T5825] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1451.474951][ T5825] usb 3-1: USB disconnect, device number 25 [ 1451.526903][T13762] chnl_net:caif_netlink_parms(): no params data found [ 1451.841082][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.388268][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.874674][ T5775] Bluetooth: hci2: command tx timeout [ 1453.943960][ T12] bridge_slave_1: left allmulticast mode [ 1453.985533][ T12] bridge_slave_1: left promiscuous mode [ 1454.020377][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.131803][ T12] bridge_slave_0: left allmulticast mode [ 1454.176013][ T12] bridge_slave_0: left promiscuous mode [ 1454.199697][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.220112][T13803] loop2: detected capacity change from 0 to 3 [ 1454.265108][T13803] Dev loop2: unable to read RDB block 3 [ 1454.290396][T13803] loop2: AHDI p2 p3 [ 1454.321502][T13803] loop2: partition table partially beyond EOD, truncated [ 1454.388530][T13803] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1454.954734][ T5775] Bluetooth: hci2: command tx timeout [ 1456.542855][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.636228][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.688637][ T12] bond0 (unregistering): Released all slaves [ 1456.784665][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1457.030123][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.098682][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.202844][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1457.260676][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.298402][ T24] usb 5-1: config 0 descriptor?? [ 1457.646427][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 1457.653086][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1457.767216][ T24] usb 5-1: USB disconnect, device number 85 [ 1458.070101][T13762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.120530][T13762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.158654][T13762] bridge_slave_0: entered allmulticast mode [ 1458.206411][ T24] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1458.218339][T13762] bridge_slave_0: entered promiscuous mode [ 1458.495915][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1458.537413][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.575211][T13762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.615343][T13762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.623238][T13762] bridge_slave_1: entered allmulticast mode [ 1458.644644][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1458.714743][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.787418][T13762] bridge_slave_1: entered promiscuous mode [ 1458.827231][ T24] usb 5-1: config 0 descriptor?? [ 1458.887427][ T24] hub 5-1:0.0: USB hub found [ 1459.081360][ T24] hub 5-1:0.0: 1 port detected [ 1459.385317][ T12] hsr_slave_0: left promiscuous mode [ 1459.471905][ T12] hsr_slave_1: left promiscuous mode [ 1459.527023][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1459.584626][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1459.627284][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1459.694713][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1459.739285][ T24] hub 5-1:0.0: activate --> -90 [ 1459.880987][ T12] veth1_macvtap: left promiscuous mode [ 1459.925036][ T12] veth0_macvtap: left promiscuous mode [ 1459.956107][ T24] usb 5-1: USB disconnect, device number 86 [ 1459.973047][ T12] veth1_vlan: left promiscuous mode [ 1460.009941][ T12] veth0_vlan: left promiscuous mode [ 1460.585194][T13841] loop2: detected capacity change from 0 to 3 [ 1460.616287][T13841] Dev loop2: unable to read RDB block 3 [ 1460.622377][T13841] loop2: AHDI p2 p3 [ 1460.665814][T13841] loop2: partition table partially beyond EOD, truncated [ 1460.696927][T13841] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1462.198813][T13848] loop2: detected capacity change from 0 to 128 [ 1462.415471][T13848] syz.2.1390: attempt to access beyond end of device [ 1462.415471][T13848] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 1462.751801][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1462.825723][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1463.730028][T13647] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1464.014637][T13647] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1464.094881][T13647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.217897][T13647] usb 3-1: config 0 descriptor?? [ 1464.241945][T13762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.284115][T13647] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1464.543687][T13762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.579812][T13647] gp8psk: usb in 128 operation failed. [ 1464.875297][T13647] gp8psk: usb in 137 operation failed. [ 1464.880978][T13647] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1464.997073][T13647] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1465.083795][T13647] usb 3-1: media controller created [ 1465.463591][T13647] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1465.499888][T13762] team0: Port device team_slave_0 added [ 1465.569175][T13762] team0: Port device team_slave_1 added [ 1465.964710][T13872] loop2: detected capacity change from 0 to 3 [ 1465.977826][T13647] gp8psk_fe: Frontend attached [ 1465.991205][ T5129] Dev loop2: unable to read RDB block 3 [ 1466.001007][T13647] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1466.020700][ T5129] loop2: AHDI p2 p3 [ 1466.063260][T13647] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1466.074983][ T5129] loop2: partition table partially beyond EOD, truncated [ 1466.139581][ T5129] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1466.177548][T13872] Dev loop2: unable to read RDB block 3 [ 1466.191105][T13762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.215711][T13872] loop2: AHDI p2 p3 [ 1466.229656][T13872] loop2: partition table partially beyond EOD, truncated [ 1466.247049][T13762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.291284][T13872] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1466.307175][T13647] gp8psk: usb in 138 operation failed. [ 1466.361116][ T5129] Dev loop2: unable to read RDB block 3 [ 1466.367307][T13647] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1466.408627][T13762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.418136][ T5129] loop2: AHDI p2 p3 [ 1466.423456][ T5129] loop2: partition table partially beyond EOD, truncated [ 1466.437898][T13647] gp8psk: found Genpix USB device pID = 203 (hex) [ 1466.478008][ T5129] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1466.492965][T13647] usb 3-1: USB disconnect, device number 26 [ 1466.541476][T13762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.573715][T13762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.758778][T13762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.114666][T10560] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1467.234621][T13646] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1467.337328][T10560] usb 5-1: Using ep0 maxpacket: 8 [ 1467.425690][T10560] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1467.476205][T10560] usb 5-1: config 140 has an invalid interface number: 182 but max is 1 [ 1467.485306][T13646] usb 7-1: Using ep0 maxpacket: 16 [ 1467.529880][T10560] usb 5-1: config 140 has no interface number 1 [ 1467.538062][T13646] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1467.591360][T10560] usb 5-1: config 140 interface 182 has no altsetting 0 [ 1467.624594][T13646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1467.671468][T10560] usb 5-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 1467.684841][T13762] hsr_slave_0: entered promiscuous mode [ 1467.707912][T10560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.740686][T13646] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1467.758330][T13762] hsr_slave_1: entered promiscuous mode [ 1467.789646][T10560] usb 5-1: Product: syz [ 1467.794074][T10560] usb 5-1: Manufacturer: syz [ 1467.809713][T13646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.846302][T13762] debugfs: 'hsr0' already exists in 'hsr' [ 1467.870767][T10560] usb 5-1: SerialNumber: syz [ 1467.892104][T13646] usb 7-1: Product: syz [ 1467.904640][T13762] Cannot create hsr debugfs directory [ 1467.934585][T13646] usb 7-1: Manufacturer: syz [ 1467.963508][T13646] usb 7-1: SerialNumber: syz [ 1468.121890][T13646] usb 7-1: config 0 descriptor?? [ 1468.333974][T13646] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1468.343877][T13646] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1468.384141][T13881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.501878][T13881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.590629][T13647] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1468.719190][T10560] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 1468.909582][T13646] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1468.971887][T13646] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1469.204904][T13647] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1469.441917][T13647] usb 3-1: Using ep0 maxpacket: 8 [ 1469.511182][T13647] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1469.554556][T13647] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.588944][T10560] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1469.612415][T13647] usb 3-1: config 0 has no interfaces? [ 1469.632360][T13646] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1469.646508][T13647] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1469.674913][T10560] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1469.717532][T13647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.737719][T13646] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1469.753186][T10560] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 1469.798746][T13646] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1469.809333][T13647] usb 3-1: config 0 descriptor?? [ 1469.842671][T10560] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1469.895583][T10560] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1470.011304][T10560] usb 5-1: USB disconnect, device number 87 [ 1470.139038][T10560] usb 5-1: [ueagle-atm] ADSL device removed [ 1470.191990][ T5825] usb 3-1: USB disconnect, device number 27 [ 1470.245921][T13646] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1470.270606][T13646] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1470.306252][T13646] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1470.426793][T13646] usb 7-1: USB disconnect, device number 45 [ 1471.348812][T13909] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1409'. [ 1472.375197][T13914] loop2: detected capacity change from 0 to 3 [ 1472.385955][T13914] Dev loop2: unable to read RDB block 3 [ 1472.391779][T13914] loop2: AHDI p2 p3 [ 1472.438336][T13914] loop2: partition table partially beyond EOD, truncated [ 1472.490056][T13914] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1472.642309][T13916] ===================================================== [ 1472.649711][T13916] BUG: KMSAN: uninit-value in netif_skb_features+0x6fb/0x1870 [ 1472.657778][T13916] netif_skb_features+0x6fb/0x1870 [ 1472.663125][T13916] validate_xmit_skb+0xb6/0x2400 [ 1472.668413][T13916] validate_xmit_skb_list+0xd4/0x320 [ 1472.673939][T13916] sch_direct_xmit+0xd4/0xcf0 [ 1472.679033][T13916] __dev_queue_xmit+0x3016/0x5a50 [ 1472.684432][T13916] packet_xmit+0x8f/0x710 [ 1472.688989][T13916] packet_sendmsg+0x91d9/0xa320 [ 1472.694160][T13916] ____sys_sendmsg+0xfe7/0x1080 [ 1472.699416][T13916] ___sys_sendmsg+0x271/0x3b0 [ 1472.704467][T13916] __x64_sys_sendmsg+0x211/0x3e0 [ 1472.709656][T13916] x64_sys_call+0x1e20/0x3ea0 [ 1472.714719][T13916] do_syscall_64+0x134/0xf80 [ 1472.719627][T13916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.725899][T13916] [ 1472.728321][T13916] Uninit was created at: [ 1472.732861][T13916] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 1472.739232][T13916] __alloc_skb+0x855/0x1190 [ 1472.743984][T13916] alloc_skb_with_frags+0xc5/0xa60 [ 1472.749463][T13916] sock_alloc_send_pskb+0xacb/0xc60 [ 1472.755030][T13916] packet_sendmsg+0x7477/0xa320 [ 1472.760108][T13916] ____sys_sendmsg+0xfe7/0x1080 [ 1472.765369][T13916] ___sys_sendmsg+0x271/0x3b0 [ 1472.770281][T13916] __x64_sys_sendmsg+0x211/0x3e0 [ 1472.775672][T13916] x64_sys_call+0x1e20/0x3ea0 [ 1472.780580][T13916] do_syscall_64+0x134/0xf80 [ 1472.785542][T13916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.791611][T13916] [ 1472.794005][T13916] CPU: 0 UID: 0 PID: 13916 Comm: syz.4.1411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1472.805160][T13916] Tainted: [L]=SOFTLOCKUP [ 1472.809554][T13916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1472.819995][T13916] ===================================================== [ 1472.827085][T13916] Disabling lock debugging due to kernel taint [ 1472.833399][T13916] Kernel panic - not syncing: kmsan.panic set ... [ 1472.839953][T13916] CPU: 0 UID: 0 PID: 13916 Comm: syz.4.1411 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1472.851035][T13916] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1472.856643][T13916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1472.866802][T13916] Call Trace: [ 1472.870143][T13916] [ 1472.873136][T13916] __dump_stack+0x26/0x30 [ 1472.877592][T13916] dump_stack_lvl+0x50/0x1c0 [ 1472.882317][T13916] ? dump_stack+0x12/0x25 [ 1472.886821][T13916] dump_stack+0x1e/0x25 [ 1472.891199][T13916] vpanic+0x7b4/0x1430 [ 1472.895452][T13916] panic+0x15d/0x160 [ 1472.899593][T13916] kmsan_report+0x31a/0x320 [ 1472.904245][T13916] ? __msan_warning+0x1b/0x30 [ 1472.909158][T13916] ? netif_skb_features+0x6fb/0x1870 [ 1472.914653][T13916] ? validate_xmit_skb+0xb6/0x2400 [ 1472.919920][T13916] ? validate_xmit_skb_list+0xd4/0x320 [ 1472.925594][T13916] ? sch_direct_xmit+0xd4/0xcf0 [ 1472.930587][T13916] ? __dev_queue_xmit+0x3016/0x5a50 [ 1472.935982][T13916] ? packet_xmit+0x8f/0x710 [ 1472.940613][T13916] ? packet_sendmsg+0x91d9/0xa320 [ 1472.945867][T13916] ? ____sys_sendmsg+0xfe7/0x1080 [ 1472.951042][T13916] ? ___sys_sendmsg+0x271/0x3b0 [ 1472.956123][T13916] ? __x64_sys_sendmsg+0x211/0x3e0 [ 1472.961403][T13916] ? x64_sys_call+0x1e20/0x3ea0 [ 1472.966488][T13916] ? do_syscall_64+0x134/0xf80 [ 1472.971404][T13916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.977608][T13916] ? __skb_flow_dissect+0x941a/0xa1f0 [ 1472.983191][T13916] ? kmsan_get_metadata+0xf1/0x160 [ 1472.988462][T13916] ? kmsan_get_metadata+0xf1/0x160 [ 1472.993799][T13916] ? kmsan_get_metadata+0xf1/0x160 [ 1472.999055][T13916] __msan_warning+0x1b/0x30 [ 1473.003685][T13916] netif_skb_features+0x6fb/0x1870 [ 1473.008968][T13916] validate_xmit_skb+0xb6/0x2400 [ 1473.014036][T13916] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1473.019999][T13916] ? sch_direct_xmit+0x11/0xcf0 [ 1473.024985][T13916] ? filter_irq_stacks+0x49/0x190 [ 1473.030154][T13916] ? kmsan_get_metadata+0xf1/0x160 [ 1473.035464][T13916] validate_xmit_skb_list+0xd4/0x320 [ 1473.041005][T13916] sch_direct_xmit+0xd4/0xcf0 [ 1473.045827][T13916] ? kmsan_get_metadata+0x146/0x160 [ 1473.051192][T13916] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1473.057676][T13916] __dev_queue_xmit+0x3016/0x5a50 [ 1473.062877][T13916] ? kmsan_get_metadata+0xf1/0x160 [ 1473.068158][T13916] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1473.074145][T13916] ? kmsan_get_metadata+0xf1/0x160 [ 1473.079435][T13916] ? __dev_queue_xmit+0x280/0x5a50 [ 1473.084733][T13916] packet_xmit+0x8f/0x710 [ 1473.089367][T13916] ? kmsan_get_metadata+0xf1/0x160 [ 1473.094716][T13916] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1473.100673][T13916] packet_sendmsg+0x91d9/0xa320 [ 1473.105644][T13916] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1473.111599][T13916] ? aa_label_sk_perm+0x759/0x810 [ 1473.116751][T13916] ? __pfx_tomoyo_socket_sendmsg_permission+0x1/0x10 [ 1473.123537][T13916] ? filter_irq_stacks+0x49/0x190 [ 1473.128721][T13916] ? trace_dql_stall_detected+0x110/0x240 [ 1473.134593][T13916] ? kmsan_get_metadata+0xf1/0x160 [ 1473.139921][T13916] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1473.146473][T13916] ? __pfx_packet_sendmsg+0x10/0x10 [ 1473.151796][T13916] ? __pfx_packet_sendmsg+0x10/0x10 [ 1473.157104][T13916] ____sys_sendmsg+0xfe7/0x1080 [ 1473.162141][T13916] ___sys_sendmsg+0x271/0x3b0 [ 1473.166963][T13916] ? kmsan_get_metadata+0xf1/0x160 [ 1473.172234][T13916] ? __rcu_read_unlock+0x6c/0xd0 [ 1473.177308][T13916] ? __fget_files+0x3b4/0x4a0 [ 1473.182084][T13916] ? __fget_files+0x3b9/0x4a0 [ 1473.186867][T13916] ? kmsan_get_metadata+0xf1/0x160 [ 1473.192137][T13916] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1473.198256][T13916] __x64_sys_sendmsg+0x211/0x3e0 [ 1473.203373][T13916] ? kmsan_get_metadata+0xf1/0x160 [ 1473.208663][T13916] x64_sys_call+0x1e20/0x3ea0 [ 1473.213467][T13916] do_syscall_64+0x134/0xf80 [ 1473.218194][T13916] ? clear_bhb_loop+0x50/0xa0 [ 1473.223011][T13916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.229050][T13916] RIP: 0033:0x7f327739c629 [ 1473.233553][T13916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1473.253269][T13916] RSP: 002b:00007f3278292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1473.261795][T13916] RAX: ffffffffffffffda RBX: 00007f3277615fa0 RCX: 00007f327739c629 [ 1473.269893][T13916] RDX: 0000000020040051 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 1473.277952][T13916] RBP: 00007f3277432b39 R08: 0000000000000000 R09: 0000000000000000 [ 1473.286001][T13916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1473.294062][T13916] R13: 00007f3277616038 R14: 00007f3277615fa0 R15: 00007ffe53e5bc48 [ 1473.302202][T13916] [ 1473.306024][T13916] Kernel Offset: disabled [ 1473.310423][T13916] Rebooting in 86400 seconds..