last executing test programs: 14m8.524877727s ago: executing program 2 (id=34): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200000000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 14m7.685179899s ago: executing program 2 (id=36): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 13m59.887196107s ago: executing program 2 (id=40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r3, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r2, 0x40000000) 13m44.57050514s ago: executing program 32 (id=40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r3, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r2, 0x40000000) 13m2.668132218s ago: executing program 1 (id=96): getdents64(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x17e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf0, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 12m57.497042538s ago: executing program 1 (id=100): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 12m57.150681332s ago: executing program 1 (id=102): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x1000, @remote}}}, 0x108) 12m56.836201674s ago: executing program 1 (id=103): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') 12m51.61610864s ago: executing program 1 (id=109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x58002) ioctl$BLKGETDISKSEQ(r3, 0x80081280, &(0x7f0000000340)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 12m48.839906676s ago: executing program 1 (id=112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) 12m33.019744601s ago: executing program 33 (id=112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) 9m39.134226558s ago: executing program 4 (id=487): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10) 9m30.299422493s ago: executing program 4 (id=506): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1f", 0xe}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c000100000008"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9m29.340628631s ago: executing program 4 (id=509): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0xa17, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) 9m14.258624878s ago: executing program 34 (id=509): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0xa17, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) 9m13.228865415s ago: executing program 0 (id=532): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) 9m5.315078979s ago: executing program 0 (id=551): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x44021, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m0.972692764s ago: executing program 0 (id=565): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000040000000000000090000008500000011000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xa8) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@local, 0x18, 0x14, 0x2}]}, 0x38}, 0x1, 0x7}, 0x20040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x38, 0x17, 0xa, 0xa04, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HOOK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040010}, 0x800) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) 8m55.62582937s ago: executing program 0 (id=575): mknod$loop(0x0, 0x0, 0x1) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000100)={0x3, 0x100, 0x94c0, 0x3e8685ed, 0x800, 0x6}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r4 = syz_io_uring_setup(0x2c34, &(0x7f0000000240)={0x0, 0x59c4, 0x80, 0x1000, 0x9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x9, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)=0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$pokeuser(0x6, r10, 0xfc, 0x137db) ptrace$pokeuser(0x6, r10, 0xfc, 0x6000003f) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000227bd7000fcdbdf2531000000080001003200000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=r1, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800af12e3863a618550c194e640b56329b849082609", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r9, @ANYBLOB="0c009900000024007e000000080001005200000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r10, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x8800) 8m53.053535475s ago: executing program 0 (id=581): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 8m52.291835494s ago: executing program 0 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x58002) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 8m36.477110638s ago: executing program 35 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x58002) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 7m39.143845709s ago: executing program 8 (id=814): r0 = syz_open_dev$video(0x0, 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_DISEQC_SEND_MASTER_CMD(r2, 0x40076f3f, &(0x7f0000000040)={'\x00', 0xfffffffffffffe09}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000e7000000000000000000000018110000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x3c, 0x40, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x100000001, 0x202001) socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 7m38.303148912s ago: executing program 5 (id=817): mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000140)={0x0, 0x2, 0x1, 0x7f1}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x1) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x28000000) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 7m37.699805694s ago: executing program 5 (id=820): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) 7m28.949692082s ago: executing program 5 (id=827): timerfd_create(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0xff49, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x4, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x3, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x7fc, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 7m28.569990453s ago: executing program 8 (id=830): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x58002) ioctl$BLKGETDISKSEQ(r3, 0x80081280, &(0x7f0000000340)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') timer_settime(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 7m25.676869721s ago: executing program 8 (id=834): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 7m25.299428214s ago: executing program 5 (id=837): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) 7m23.820471354s ago: executing program 5 (id=840): r0 = syz_open_dev$video(0x0, 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_DISEQC_SEND_MASTER_CMD(r2, 0x40076f3f, &(0x7f0000000040)={'\x00', 0xfffffffffffffe09}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000e7000000000000000000000018110000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x3c, 0x40, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x100000001, 0x202001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x20}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 7m23.523212832s ago: executing program 8 (id=842): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r1 = open(0x0, 0x4e142, 0x0) pwritev2(r1, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r0, 0x40000000) 7m23.173875616s ago: executing program 8 (id=846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) r8 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000a40)=[{r8, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 7m19.756415109s ago: executing program 8 (id=848): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 7m11.972041932s ago: executing program 5 (id=862): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0xda, 0x2, 0xfa11, 0xffbffffb}, 0x0) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) syz_open_dev$vim2m(0x0, 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)}], 0x1}, 0xff03}], 0x2, 0x8000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 7m4.343361059s ago: executing program 36 (id=848): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 6m56.175327774s ago: executing program 37 (id=862): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0xda, 0x2, 0xfa11, 0xffbffffb}, 0x0) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) syz_open_dev$vim2m(0x0, 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)}], 0x1}, 0xff03}], 0x2, 0x8000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 5m15.872062249s ago: executing program 2 (id=874): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) 5m14.936907552s ago: executing program 2 (id=1333): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000100)={0x3, 0x100, 0x94c0, 0x3e8685ed, 0x800, 0x6}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0}) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) syz_io_uring_setup(0x2c34, &(0x7f0000000240)={0x0, 0x59c4, 0x80, 0x1000, 0x9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m14.701272183s ago: executing program 3 (id=1334): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000, 0x7fffffffffffffff}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m11.339589681s ago: executing program 2 (id=1337): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x58002) ioctl$BLKGETDISKSEQ(r3, 0x80081280, &(0x7f0000000340)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 4m54.416858294s ago: executing program 38 (id=1337): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x58002) ioctl$BLKGETDISKSEQ(r3, 0x80081280, &(0x7f0000000340)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 3m1.203550558s ago: executing program 6 (id=1541): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000340)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 3m0.798418774s ago: executing program 6 (id=1542): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e22, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3m0.499570745s ago: executing program 6 (id=1543): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000100)={0x3, 0x100, 0x94c0, 0x3e8685ed, 0x800, 0x6}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r4 = syz_io_uring_setup(0x2c34, &(0x7f0000000240)={0x0, 0x59c4, 0x80, 0x1000, 0x9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x9, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000200)}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)=0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$pokeuser(0x6, r10, 0xfc, 0x137db) ptrace$pokeuser(0x6, r10, 0xfc, 0x6000003f) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000227bd7000fcdbdf2531000000080001003200000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=r1, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800af12e3863a618550c194e640b56329b849082609", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r9, @ANYBLOB="0c009900000024007e000000080001005200000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r10, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x8800) 2m59.789628135s ago: executing program 6 (id=1545): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2m59.428214156s ago: executing program 6 (id=1547): socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a000000010902"], 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 2m58.358363588s ago: executing program 6 (id=1549): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0xff49, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x4, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x3, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x7fc, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 2m57.909217765s ago: executing program 39 (id=1549): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0xff49, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x4, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x3, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x7fc, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 1m58.85824336s ago: executing program 9 (id=1604): mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000140)={0x0, 0x2, 0x1, 0x7f1}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x1) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x28000000) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1m56.976923001s ago: executing program 9 (id=1605): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) 1m56.046698342s ago: executing program 9 (id=1606): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioprio_get$pid(0x2, 0x0) 1m54.83043728s ago: executing program 9 (id=1607): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m54.614867477s ago: executing program 9 (id=1609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1m53.834555075s ago: executing program 9 (id=1611): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) syz_io_uring_setup(0x2c34, &(0x7f0000000240)={0x0, 0x59c4, 0x80, 0x1000, 0x9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m53.466975483s ago: executing program 40 (id=1611): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) syz_io_uring_setup(0x2c34, &(0x7f0000000240)={0x0, 0x59c4, 0x80, 0x1000, 0x9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15.462164981s ago: executing program 7 (id=1661): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000340)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffbf, 0x8, 0xfffffffd, 0x80000001, 0x0, 0xfffffffe, 0xfffffffd, 0xfffffffc, 0x0, 0x400006, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7fffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x68, 0x0, 0x20000000, 0x3, 0x7fff, 0x0, 0x800, 0x402, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x408, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x2, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x4, 0xe5ce}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8100}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r4 = open(&(0x7f0000000100)='./file7\x00', 0x0, 0x100) getdents(r4, 0x0, 0x0) 12.316929872s ago: executing program 7 (id=1662): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000100)={0x3, 0x100, 0x94c0, 0x3e8685ed, 0x800, 0x6}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r4 = syz_io_uring_setup(0x2c34, &(0x7f0000000240)={0x0, 0x59c4, 0x80, 0x1000, 0x9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x9, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0xfc, 0x137db) ptrace$pokeuser(0x6, r9, 0xfc, 0x6000003f) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x8800) 12.136690394s ago: executing program 3 (id=1336): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) close_range(r1, 0xffffffffffffffff, 0x0) 10.628525534s ago: executing program 7 (id=1663): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000340)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffbf, 0x8, 0xfffffffd, 0x80000001, 0x0, 0xfffffffe, 0xfffffffd, 0xfffffffc, 0x0, 0x400006, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7fffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x68, 0x0, 0x20000000, 0x3, 0x7fff, 0x0, 0x800, 0x402, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x408, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x2, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x4, 0xe5ce}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8100}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r4 = open(&(0x7f0000000100)='./file7\x00', 0x0, 0x100) getdents(r4, 0x0, 0x0) 9.630185783s ago: executing program 3 (id=1664): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a0000000"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') 7.637483339s ago: executing program 4 (id=1550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000340)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 5.604159484s ago: executing program 4 (id=1665): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000, 0x7fffffffffffffff}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 4.280923513s ago: executing program 7 (id=1666): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e21, [0x0, 0xffffffff, 0x1, 0x3000000], [0xfffffffe], 0x0, [0x1, 0x3]}}}, 0x4c}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) 3.994820544s ago: executing program 3 (id=1667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r6) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 3.961024213s ago: executing program 7 (id=1668): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000100)={0x3, 0x100, 0x94c0, 0x3e8685ed, 0x800, 0x6}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x2c34, &(0x7f0000000240)={0x0, 0x59c4, 0x80, 0x1000, 0x9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x9, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)=0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$pokeuser(0x6, r10, 0xfc, 0x137db) ptrace$pokeuser(0x6, r10, 0xfc, 0x6000003f) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000227bd7000fcdbdf2531000000080001003200000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=r1, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800af12e3863a618550c194e640b56329b849082609", @ANYRES32=0x0, @ANYBLOB='\b\x00R\x00', @ANYRES32=r9, @ANYBLOB="0c009900000024007e000000080001005200000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r10, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x8800) 3.838966589s ago: executing program 3 (id=1669): socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x38, r0, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x5}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920723f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1}, 0x44) 2.318698942s ago: executing program 3 (id=1670): mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x1) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x28000000) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.001374849s ago: executing program 4 (id=1671): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x78, &(0x7f00000023c0)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4623, 0xff, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7f}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0xc}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x8, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x101, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x8efd, 0x0, 0x4, 0x800, 0xbc, 0x1, 0x67, 0x401, r6}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r10, 0x0, 0x100000000000000}, 0x38) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000000c0)=0x1, 0x4) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$pokeuser(0x6, r11, 0x118, 0x137db) ptrace$pokeuser(0x6, r11, 0xfc, 0x6000003f) 0s ago: executing program 7 (id=1672): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000, 0x7fffffffffffffff}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): terface with an up link [ 625.818714][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 625.824640][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 625.847609][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 625.855286][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 625.892202][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 626.150340][ T9745] team0: Port device team_slave_0 added [ 626.168518][ T9745] team0: Port device team_slave_1 added [ 626.345682][ T9745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.345701][ T9745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.345731][ T9745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.357536][ T60] Bluetooth: hci5: command tx timeout [ 626.438842][ T9745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.438861][ T9745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.438891][ T9745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.846971][ T808] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 626.906971][ T31] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 627.009777][ T808] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 627.009813][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 627.009838][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 627.009861][ T808] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 627.009905][ T808] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 627.009929][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.016300][ T808] usb 8-1: config 0 descriptor?? [ 627.094314][ T31] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 627.094350][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 627.094376][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 627.094397][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 627.094444][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 627.094492][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.123050][ T31] usb 7-1: config 0 descriptor?? [ 627.474932][ T9745] hsr_slave_0: entered promiscuous mode [ 627.484538][ T9745] hsr_slave_1: entered promiscuous mode [ 627.490479][ T9745] debugfs: 'hsr0' already exists in 'hsr' [ 627.490553][ T9745] Cannot create hsr debugfs directory [ 627.667331][ T808] usbhid 8-1:0.0: can't add hid device: -71 [ 627.667461][ T808] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 627.696165][ T808] usb 8-1: USB disconnect, device number 10 [ 627.747974][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 627.748073][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 627.779080][ T31] usb 7-1: USB disconnect, device number 9 [ 627.956999][ T60] Bluetooth: hci4: command tx timeout [ 630.047049][ T60] Bluetooth: hci4: command tx timeout [ 632.116997][ T60] Bluetooth: hci4: command tx timeout [ 632.414603][ T9968] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1166'. [ 632.601296][ T9968] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1166'. [ 633.302352][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 634.206881][ T60] Bluetooth: hci4: command tx timeout [ 634.473609][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.477861][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.478589][ T9900] bridge_slave_0: entered allmulticast mode [ 634.537435][ T9900] bridge_slave_0: entered promiscuous mode [ 634.540052][ T68] bridge_slave_1: left allmulticast mode [ 634.540079][ T68] bridge_slave_1: left promiscuous mode [ 634.540326][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.640202][ T68] bridge_slave_0: left allmulticast mode [ 634.640234][ T68] bridge_slave_0: left promiscuous mode [ 634.640520][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.392252][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.551622][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.663845][ T68] bond0 (unregistering): Released all slaves [ 635.735406][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.735538][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.735731][ T9900] bridge_slave_1: entered allmulticast mode [ 635.752768][ T9900] bridge_slave_1: entered promiscuous mode [ 636.206074][T10046] 9pnet_virtio: no channels available for device syz [ 636.504592][T10046] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 636.507566][T10046] overlayfs: overlapping lowerdir path [ 637.275564][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.320511][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.247037][ T68] hsr_slave_0: left promiscuous mode [ 638.737364][ T68] hsr_slave_1: left promiscuous mode [ 638.739101][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.780658][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.318109][ T68] team0 (unregistering): Port device team_slave_1 removed [ 640.417704][ T68] team0 (unregistering): Port device team_slave_0 removed [ 641.259821][ T9900] team0: Port device team_slave_0 added [ 641.280210][ T9900] team0: Port device team_slave_1 added [ 641.507826][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.507844][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.507872][ T9900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.510263][ T9900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.510279][ T9900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.510307][ T9900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.618613][ T808] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 641.810549][ T808] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 641.810585][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 641.810613][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 641.810636][ T808] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 641.810681][ T808] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 641.810705][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.078125][ T808] usb 8-1: config 0 descriptor?? [ 642.189034][ T9900] hsr_slave_0: entered promiscuous mode [ 642.194217][ T9900] hsr_slave_1: entered promiscuous mode [ 642.209099][ T9900] debugfs: 'hsr0' already exists in 'hsr' [ 642.209251][ T9900] Cannot create hsr debugfs directory [ 642.552612][ T808] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 642.709144][ T808] usb 8-1: USB disconnect, device number 11 [ 643.039365][T10118] fido_id[10118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 644.647066][ T6560] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 644.801221][ T6560] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 644.801274][ T6560] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.801302][ T6560] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.801326][ T6560] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 644.803376][ T6560] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 644.803407][ T6560] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 644.803430][ T6560] usb 8-1: Manufacturer: syz [ 644.886218][ T6560] usb 8-1: config 0 descriptor?? [ 647.247680][ T6560] usbhid 8-1:0.0: can't add hid device: -71 [ 647.247819][ T6560] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 647.287146][ T6560] usb 8-1: USB disconnect, device number 12 [ 651.445829][ T1389] bridge_slave_1: left allmulticast mode [ 651.445863][ T1389] bridge_slave_1: left promiscuous mode [ 651.446133][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.669411][ T1389] bridge_slave_0: left allmulticast mode [ 651.669435][ T1389] bridge_slave_0: left promiscuous mode [ 651.669645][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.838684][ T1389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.996428][ T1389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.183122][ T1389] bond0 (unregistering): Released all slaves [ 656.697217][ T9745] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 656.987666][ T1389] hsr_slave_0: left promiscuous mode [ 657.046969][ T1389] hsr_slave_1: left promiscuous mode [ 657.047722][ T1389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.117815][ T1389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.406969][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 657.560022][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 657.560076][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.560096][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.560112][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 657.561313][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 657.561343][ T9] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 657.561358][ T9] usb 7-1: Manufacturer: syz [ 657.697260][ T9] usb 7-1: config 0 descriptor?? [ 658.132360][ T9] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 658.211006][ T9] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 658.267823][ T1389] team0 (unregistering): Port device team_slave_1 removed [ 658.403136][ T1389] team0 (unregistering): Port device team_slave_0 removed [ 658.649752][ T9] usb 7-1: USB disconnect, device number 10 [ 658.715715][T10339] fido_id[10339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 659.421398][ T9745] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 659.485741][ T9745] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 659.592932][ T9745] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 659.976935][ T9900] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 660.032032][ T9900] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 660.158575][ T9900] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 660.256865][ T9900] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 661.252277][ T9745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.384913][ T9745] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.434217][ T8930] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.434431][ T8930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.510717][ T8930] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.513975][ T8930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.735782][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.929007][ T9900] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.004674][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.010081][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.095056][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.105586][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.283692][T10412] input: syz1 as /devices/virtual/input/input8 [ 662.756192][ T9745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.960844][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.153247][ T9900] veth0_vlan: entered promiscuous mode [ 663.207748][ T9900] veth1_vlan: entered promiscuous mode [ 663.315214][ T9900] veth0_macvtap: entered promiscuous mode [ 663.346468][ T9900] veth1_macvtap: entered promiscuous mode [ 663.452057][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.476212][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.499582][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.501294][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.503238][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.504444][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.684736][ T31] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 663.829830][ T31] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 663.829889][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.829918][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.829943][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 663.838637][ T31] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 663.838668][ T31] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 663.838714][ T31] usb 8-1: Manufacturer: syz [ 663.879917][ T31] usb 8-1: config 0 descriptor?? [ 663.939284][T10454] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 663.939496][T10454] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 663.939689][T10454] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 663.939900][T10454] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 663.939992][T10454] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 664.060243][T10454] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 664.175431][T10454] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 664.175926][T10454] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 664.211387][ T9745] veth0_vlan: entered promiscuous mode [ 664.274744][T10454] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 664.379865][ T31] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 664.385296][ T9745] veth1_vlan: entered promiscuous mode [ 664.432659][ T31] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 664.687622][ T9745] veth0_macvtap: entered promiscuous mode [ 664.691633][ T1389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.691658][ T1389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.739590][ T9745] veth1_macvtap: entered promiscuous mode [ 664.765270][ T31] usb 8-1: USB disconnect, device number 13 [ 664.809862][T10472] fido_id[10472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 664.968717][ T9745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.021766][ T1389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.021788][ T1389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.074440][ T9745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.188826][ T1471] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.204651][ T1471] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.216278][ T1471] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.238730][ T1471] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.957013][ T7908] Bluetooth: hci0: command 0x0406 tx timeout [ 665.968362][ T7908] Bluetooth: hci5: command 0x0c1a tx timeout [ 665.968592][ T7908] Bluetooth: hci3: command 0x0419 tx timeout [ 665.968624][ T7908] Bluetooth: hci2: command 0x0c1a tx timeout [ 666.050272][ T7907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.050296][ T7907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.196992][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 666.299312][ T1471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.299336][ T1471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.443725][T10510] input: syz1 as /devices/virtual/input/input9 [ 670.037013][ T7908] Bluetooth: hci4: command 0x0c1a tx timeout [ 670.037128][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 670.387936][ T7908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 670.439063][ T7908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 670.471213][ T7908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 670.526664][ T7908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 670.547113][ T7908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 672.116970][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 672.117014][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 672.724704][ T7908] Bluetooth: hci1: command tx timeout [ 674.652721][ T7907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.786974][ T7908] Bluetooth: hci1: command tx timeout [ 674.954245][T10524] chnl_net:caif_netlink_parms(): no params data found [ 675.692889][ T7907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.836952][ T7908] Bluetooth: hci1: command tx timeout [ 677.872374][T10595] input: syz1 as /devices/virtual/input/input10 [ 678.063647][ T7907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.590381][ T7907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.669764][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.669976][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.670151][T10524] bridge_slave_0: entered allmulticast mode [ 678.672357][T10524] bridge_slave_0: entered promiscuous mode [ 678.675531][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.675759][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.676282][T10524] bridge_slave_1: entered allmulticast mode [ 678.730094][T10524] bridge_slave_1: entered promiscuous mode [ 678.869061][T10524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.875097][T10524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.918488][ T7908] Bluetooth: hci1: command tx timeout [ 678.948982][T10524] team0: Port device team_slave_0 added [ 678.952753][T10524] team0: Port device team_slave_1 added [ 679.018994][T10524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.019013][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.019045][T10524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.074479][T10524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.074500][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.074530][T10524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.613060][T10524] hsr_slave_0: entered promiscuous mode [ 679.632578][T10524] hsr_slave_1: entered promiscuous mode [ 679.633660][T10524] debugfs: 'hsr0' already exists in 'hsr' [ 679.633686][T10524] Cannot create hsr debugfs directory [ 680.396967][ T808] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 680.564005][ T808] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 680.564041][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 680.564069][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 680.564092][ T808] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 680.564137][ T808] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 680.564162][ T808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.696299][ T808] usb 7-1: config 0 descriptor?? [ 681.201794][ T808] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 681.386687][ T995] usb 7-1: USB disconnect, device number 11 [ 681.524180][T10640] fido_id[10640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 681.875115][ T7907] erspan0: left allmulticast mode [ 681.875145][ T7907] erspan0: left promiscuous mode [ 681.875387][ T7907] bridge0: port 3(erspan0) entered disabled state [ 682.010467][ T7907] bridge_slave_1: left allmulticast mode [ 682.010496][ T7907] bridge_slave_1: left promiscuous mode [ 682.010759][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.178954][ T7907] bridge_slave_0: left allmulticast mode [ 682.178977][ T7907] bridge_slave_0: left promiscuous mode [ 682.179155][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.977691][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.977769][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.311113][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.330283][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.341117][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.347947][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.349585][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 687.774964][ T7907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.902060][T10704] input: syz1 as /devices/virtual/input/input12 [ 687.947747][ T7907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.982092][ T7907] bond0 (unregistering): Released all slaves [ 688.358372][T10709] 9pnet_virtio: no channels available for device syz [ 688.450662][T10709] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 688.453665][T10709] overlayfs: overlapping lowerdir path [ 689.656916][ T5987] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 689.809784][ T5987] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.809822][ T5987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 689.809852][ T5987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 689.809876][ T5987] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 689.809922][ T5987] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 689.809947][ T5987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.816632][ T5987] usb 7-1: config 0 descriptor?? [ 689.994097][ T7908] Bluetooth: hci2: command tx timeout [ 690.914284][ T5987] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 691.003556][ T5987] usb 7-1: USB disconnect, device number 12 [ 691.527757][T10725] fido_id[10725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 692.047876][ T7908] Bluetooth: hci2: command tx timeout [ 694.351777][ T7908] Bluetooth: hci2: command tx timeout [ 696.357095][ T7908] Bluetooth: hci2: command tx timeout [ 696.548261][ T7907] hsr_slave_0: left promiscuous mode [ 696.665827][ T7907] hsr_slave_1: left promiscuous mode [ 696.667795][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.667871][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.721684][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.721716][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.987071][ T31] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 697.009850][ T7907] veth1_macvtap: left promiscuous mode [ 697.009961][ T7907] veth0_macvtap: left promiscuous mode [ 697.010223][ T7907] veth1_vlan: left promiscuous mode [ 697.010407][ T7907] veth0_vlan: left promiscuous mode [ 697.139572][ T31] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 697.139599][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 697.139618][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 697.139634][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 697.139665][ T31] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 697.139682][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.218530][ T31] usb 8-1: config 0 descriptor?? [ 697.733957][ T31] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 697.899417][ T808] usb 8-1: USB disconnect, device number 14 [ 698.105586][T10780] fido_id[10780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 699.098197][T10795] 9pnet_virtio: no channels available for device syz [ 699.464170][T10797] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 699.464632][T10797] overlayfs: overlapping lowerdir path [ 701.280504][ T7907] team0 (unregistering): Port device team_slave_1 removed [ 701.722739][ T7907] team0 (unregistering): Port device team_slave_0 removed [ 704.476028][T10698] chnl_net:caif_netlink_parms(): no params data found [ 706.578314][T10698] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.578445][T10698] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.578678][T10698] bridge_slave_0: entered allmulticast mode [ 706.585904][T10698] bridge_slave_0: entered promiscuous mode [ 706.645454][T10698] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.645579][T10698] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.645822][T10698] bridge_slave_1: entered allmulticast mode [ 706.669187][T10698] bridge_slave_1: entered promiscuous mode [ 707.097202][T10846] 9pnet_virtio: no channels available for device syz [ 708.004762][T10698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.427030][ T808] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 708.583584][T10698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.682539][T10524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 708.849893][ T808] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.849931][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 708.849959][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 708.849983][ T808] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 708.850029][ T808] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 708.850055][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.923288][ T808] usb 8-1: config 0 descriptor?? [ 709.591791][T10698] team0: Port device team_slave_0 added [ 709.617978][ T808] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 709.862410][ T5987] usb 8-1: USB disconnect, device number 15 [ 709.955750][T10524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 710.005261][T10698] team0: Port device team_slave_1 added [ 710.339746][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.701190][T10524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 710.872009][T10524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 711.312373][T10872] 9pnet_virtio: no channels available for device syz [ 712.336149][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.377644][T10698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.377657][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.377678][T10698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.429908][T10698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.429928][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.429958][T10698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.790323][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.503618][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.642411][T10698] hsr_slave_0: entered promiscuous mode [ 714.646552][T10698] hsr_slave_1: entered promiscuous mode [ 717.052836][ T13] bridge_slave_1: left allmulticast mode [ 717.052866][ T13] bridge_slave_1: left promiscuous mode [ 717.056442][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.141820][ T13] bridge_slave_0: left allmulticast mode [ 717.141844][ T13] bridge_slave_0: left promiscuous mode [ 717.142055][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.756950][ T808] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 717.946938][ T808] usb 8-1: Using ep0 maxpacket: 8 [ 717.968774][ T808] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 717.968818][ T808] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 717.968838][ T808] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 717.968856][ T808] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 717.968875][ T808] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 717.968893][ T808] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.968924][ T808] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 717.968941][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.809364][ T808] usb 8-1: GET_CAPABILITIES returned 0 [ 718.809528][ T808] usbtmc 8-1:16.0: can't read capabilities [ 719.500315][ T808] usb 8-1: USB disconnect, device number 16 [ 721.918074][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.025044][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.087183][ T13] bond0 (unregistering): Released all slaves [ 722.307074][ T31] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 722.487431][ T31] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 722.487481][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.487509][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.487532][ T31] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 722.491883][ T31] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 722.491914][ T31] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 722.491935][ T31] usb 10-1: Manufacturer: syz [ 722.544248][ T31] usb 10-1: config 0 descriptor?? [ 723.022157][ T31] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 723.088743][ T31] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 723.407178][ T9017] usb 10-1: USB disconnect, device number 2 [ 723.571258][T10939] fido_id[10939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 724.411843][T10524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.749979][ T13] hsr_slave_0: left promiscuous mode [ 725.867265][ T13] hsr_slave_1: left promiscuous mode [ 725.874478][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.874543][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.105295][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.105359][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.499335][ T13] veth1_macvtap: left promiscuous mode [ 726.511681][ T13] veth0_macvtap: left promiscuous mode [ 726.511865][ T13] veth1_vlan: left promiscuous mode [ 726.511987][ T13] veth0_vlan: left promiscuous mode [ 726.843339][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1419'. [ 728.030272][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 728.054543][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 728.057027][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 728.077006][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 728.079930][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 728.467955][ T13] team0 (unregistering): Port device team_slave_1 removed [ 729.457266][ T13] team0 (unregistering): Port device team_slave_0 removed [ 730.337815][T10968] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1419'. [ 730.872791][ T60] Bluetooth: hci4: command tx timeout [ 731.673376][T10698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 731.776999][ T5942] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 732.034592][ T5942] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 732.034643][ T5942] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.034672][ T5942] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.034695][ T5942] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 732.036049][ T5942] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 732.036078][ T5942] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 732.036100][ T5942] usb 10-1: Manufacturer: syz [ 732.142578][ T5942] usb 10-1: config 0 descriptor?? [ 732.300752][T11017] input: syz1 as /devices/virtual/input/input16 [ 732.526614][T10698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 732.588218][ T5942] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 732.610018][ T5942] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 732.644807][T10698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 732.675258][T10975] chnl_net:caif_netlink_parms(): no params data found [ 732.698263][T10698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 732.837241][ T5942] usb 10-1: USB disconnect, device number 3 [ 732.932966][ T60] Bluetooth: hci4: command tx timeout [ 733.209449][T10975] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.245570][T10975] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.245882][T10975] bridge_slave_0: entered allmulticast mode [ 733.279735][T10975] bridge_slave_0: entered promiscuous mode [ 733.293605][T10975] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.294629][T10975] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.294873][T10975] bridge_slave_1: entered allmulticast mode [ 733.327178][T10975] bridge_slave_1: entered promiscuous mode [ 733.913524][T10975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.968596][T10975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.380724][T10975] team0: Port device team_slave_0 added [ 735.150608][ T60] Bluetooth: hci4: command tx timeout [ 735.866565][T10975] team0: Port device team_slave_1 added [ 736.616367][T10975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.616388][T10975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.616420][T10975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.709070][T10975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.709091][T10975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.709122][T10975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.157874][ T60] Bluetooth: hci4: command tx timeout [ 737.393758][T11068] input: syz1 as /devices/virtual/input/input17 [ 737.804478][T10975] hsr_slave_0: entered promiscuous mode [ 737.825010][T10975] hsr_slave_1: entered promiscuous mode [ 737.826500][T10975] debugfs: 'hsr0' already exists in 'hsr' [ 737.826520][T10975] Cannot create hsr debugfs directory [ 741.469912][T11074] syz.9.1444 (11074) used greatest stack depth: 18208 bytes left [ 742.179346][T10698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.684566][T10698] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.573930][ T13] bridge_slave_1: left allmulticast mode [ 743.573963][ T13] bridge_slave_1: left promiscuous mode [ 743.574219][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.958140][ T13] bridge_slave_0: left allmulticast mode [ 743.958164][ T13] bridge_slave_0: left promiscuous mode [ 743.958394][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.822068][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.957927][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.130633][ T13] bond0 (unregistering): Released all slaves [ 747.371675][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.384984][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.403904][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.403980][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.430754][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.451329][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.885490][ T13] hsr_slave_0: left promiscuous mode [ 747.974137][ T13] hsr_slave_1: left promiscuous mode [ 747.975526][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.193766][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.691882][ T7908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 748.695636][ T7908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 748.716103][ T7908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 749.877603][ T7908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 749.879106][ T7908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 751.958538][ T7908] Bluetooth: hci1: command tx timeout [ 752.448482][ T13] team0 (unregistering): Port device team_slave_1 removed [ 752.747389][ T13] team0 (unregistering): Port device team_slave_0 removed [ 754.039594][ T7908] Bluetooth: hci1: command tx timeout [ 755.383017][T11189] input: syz1 as /devices/virtual/input/input18 [ 756.117031][ T7908] Bluetooth: hci1: command tx timeout [ 756.325092][T10975] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 756.403339][T11141] chnl_net:caif_netlink_parms(): no params data found [ 756.454217][T10975] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 756.525597][T10975] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 756.680999][T10975] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 756.707155][ T808] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 756.856935][ T808] usb 8-1: Using ep0 maxpacket: 8 [ 756.862077][ T808] usb 8-1: config 0 has no interfaces? [ 756.862108][ T808] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 756.862126][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.882990][ T808] usb 8-1: config 0 descriptor?? [ 757.171238][ T808] usb 8-1: USB disconnect, device number 17 [ 758.197534][ T7908] Bluetooth: hci1: command tx timeout [ 758.230583][T11141] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.230714][T11141] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.230965][T11141] bridge_slave_0: entered allmulticast mode [ 758.297377][T11141] bridge_slave_0: entered promiscuous mode [ 758.881750][T11226] 9p: Bad value for 'wfdno' [ 758.906186][T11141] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.906462][T11141] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.906706][T11141] bridge_slave_1: entered allmulticast mode [ 758.932122][T11141] bridge_slave_1: entered promiscuous mode [ 761.883871][T11141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.920477][T11141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.702672][T11141] team0: Port device team_slave_0 added [ 768.747771][T11141] team0: Port device team_slave_1 added [ 769.180922][T11141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.180942][T11141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.180972][T11141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.200391][T11141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.200445][T11141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.200527][T11141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.518786][T11284] 9pnet_virtio: no channels available for device syz [ 771.658879][T11141] hsr_slave_0: entered promiscuous mode [ 771.660326][T11141] hsr_slave_1: entered promiscuous mode [ 771.663937][T11141] debugfs: 'hsr0' already exists in 'hsr' [ 771.663964][T11141] Cannot create hsr debugfs directory [ 771.955405][T10975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.887220][ T13] bridge_slave_1: left allmulticast mode [ 772.887253][ T13] bridge_slave_1: left promiscuous mode [ 772.887517][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.978764][ T13] bridge_slave_0: left allmulticast mode [ 772.978798][ T13] bridge_slave_0: left promiscuous mode [ 772.988171][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.216932][ T5987] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 775.448644][ T5987] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 775.451722][ T5987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.451792][ T5987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.451817][ T5987] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 775.469511][ T5987] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 775.469545][ T5987] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 775.469567][ T5987] usb 7-1: Manufacturer: syz [ 775.632651][ T5987] usb 7-1: config 0 descriptor?? [ 777.890429][ T5987] usbhid 7-1:0.0: can't add hid device: -71 [ 777.890563][ T5987] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 777.915456][ T5987] usb 7-1: USB disconnect, device number 13 [ 778.013010][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.180633][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.331422][ T13] bond0 (unregistering): Released all slaves [ 780.729491][T10975] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.169529][ T13] hsr_slave_0: left promiscuous mode [ 782.535953][ T13] hsr_slave_1: left promiscuous mode [ 782.571146][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.769370][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.185800][ T13] team0 (unregistering): Port device team_slave_1 removed [ 787.257999][ T13] team0 (unregistering): Port device team_slave_0 removed [ 787.538247][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.539482][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.571575][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 788.575332][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 788.625057][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 788.639625][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 788.646303][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 792.093457][ T7908] Bluetooth: hci2: command tx timeout [ 793.982204][T11141] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 794.123084][ T60] Bluetooth: hci2: command tx timeout [ 794.127925][T11141] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 794.193158][T11141] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 794.299954][T11141] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 794.806896][ T5787] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 794.986942][ T5787] usb 8-1: Using ep0 maxpacket: 8 [ 794.989606][ T5787] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 794.989672][ T5787] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 794.989693][ T5787] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 794.989712][ T5787] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 794.989730][ T5787] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 794.989748][ T5787] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 794.989779][ T5787] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 794.989795][ T5787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.222930][ T5787] usb 8-1: GET_CAPABILITIES returned 0 [ 795.222964][ T5787] usbtmc 8-1:16.0: can't read capabilities [ 795.587653][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 795.625731][T11386] usbtmc 8-1:16.0: Unable to send data, error -71 [ 795.716147][ T5787] usb 8-1: USB disconnect, device number 18 [ 796.207469][ T60] Bluetooth: hci2: command tx timeout [ 796.342989][T11356] chnl_net:caif_netlink_parms(): no params data found [ 798.529998][ T60] Bluetooth: hci2: command tx timeout [ 798.962313][T11419] bridge0: port 3(erspan0) entered blocking state [ 798.973907][T11419] bridge0: port 3(erspan0) entered disabled state [ 799.001924][T11419] erspan0: entered allmulticast mode [ 799.039940][T11419] erspan0: entered promiscuous mode [ 799.040646][T11419] bridge0: port 3(erspan0) entered blocking state [ 799.043672][T11419] bridge0: port 3(erspan0) entered forwarding state [ 800.794257][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.794427][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.794664][T11356] bridge_slave_0: entered allmulticast mode [ 800.803936][T11356] bridge_slave_0: entered promiscuous mode [ 800.921110][T11356] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.921197][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.921586][T11356] bridge_slave_1: entered allmulticast mode [ 801.307977][T11356] bridge_slave_1: entered promiscuous mode [ 801.932972][T11356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.278417][T11356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.409130][ T13] bridge_slave_1: left allmulticast mode [ 803.409161][ T13] bridge_slave_1: left promiscuous mode [ 803.412896][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.586136][ T13] bridge_slave_0: left allmulticast mode [ 804.586168][ T13] bridge_slave_0: left promiscuous mode [ 804.586434][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.764811][ T7908] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 804.776404][ T7908] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 804.779850][ T7908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 804.796255][ T7908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 804.813936][ T7908] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 806.498253][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.601649][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.659108][ T13] bond0 (unregistering): Released all slaves [ 806.725308][T11356] team0: Port device team_slave_0 added [ 806.746969][T11356] team0: Port device team_slave_1 added [ 806.846910][ T60] Bluetooth: hci0: command tx timeout [ 806.887870][T11356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.887889][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.887918][T11356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.951546][T11356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.951564][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.951593][T11356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.115261][T11472] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.115510][T11472] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.141456][T11474] comedi comedi0: Minor 8 could not be opened [ 807.350118][T11141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.867293][ T13] hsr_slave_0: left promiscuous mode [ 807.911401][ T13] hsr_slave_1: left promiscuous mode [ 807.912116][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.947956][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.845164][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.845237][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.864919][ T7908] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 808.875757][ T7908] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 808.895865][ T7908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 808.909035][ T7908] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 808.916963][ T7908] Bluetooth: hci0: command tx timeout [ 808.959169][ T7908] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 809.368125][ T13] team0 (unregistering): Port device team_slave_1 removed [ 810.170350][ T13] team0 (unregistering): Port device team_slave_0 removed [ 810.741438][T11490] comedi comedi0: Minor 8 could not be opened [ 810.979064][T11356] hsr_slave_0: entered promiscuous mode [ 810.980756][T11356] hsr_slave_1: entered promiscuous mode [ 811.063649][ T7908] Bluetooth: hci0: command tx timeout [ 811.077209][ T7908] Bluetooth: hci4: command tx timeout [ 812.014057][T11498] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 812.014268][T11498] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 812.014471][T11498] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 812.014556][T11498] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 812.100753][T11498] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 812.199387][T11498] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 812.199476][T11498] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 812.318386][T11498] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 812.401348][T11498] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 812.401634][T11498] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 812.483482][T11498] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 813.170866][T11461] chnl_net:caif_netlink_parms(): no params data found [ 813.496840][ T995] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 813.661408][ T995] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 813.661460][ T995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.661487][ T995] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.661509][ T995] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 813.731187][ T995] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 813.731212][ T995] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 813.731227][ T995] usb 10-1: Manufacturer: syz [ 813.746290][ T995] usb 10-1: config 0 descriptor?? [ 814.046107][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 814.051634][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 814.051921][ T60] Bluetooth: hci3: command 0x0419 tx timeout [ 814.257019][ T995] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 814.263897][ T995] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 814.281534][ T7908] Bluetooth: hci0: command 0x0c1a tx timeout [ 814.436945][ T7908] Bluetooth: hci4: command 0x040f tx timeout [ 814.722697][ T995] usb 10-1: USB disconnect, device number 4 [ 814.972148][T11514] fido_id[11514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 815.517084][T11511] bridge0: port 3(erspan0) entered blocking state [ 815.517322][T11511] bridge0: port 3(erspan0) entered disabled state [ 815.517531][T11511] erspan0: entered allmulticast mode [ 815.520624][T11511] erspan0: entered promiscuous mode [ 816.039044][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.039250][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.039475][T11461] bridge_slave_0: entered allmulticast mode [ 816.044098][T11461] bridge_slave_0: entered promiscuous mode [ 816.119109][ T7908] Bluetooth: hci2: command 0x0c1a tx timeout [ 816.206693][T11461] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.206926][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.207151][T11461] bridge_slave_1: entered allmulticast mode [ 816.211069][T11461] bridge_slave_1: entered promiscuous mode [ 816.362440][ T7908] Bluetooth: hci0: command 0x0c1a tx timeout [ 816.517644][ T7908] Bluetooth: hci4: command 0x040f tx timeout [ 818.068078][T11461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.161968][T11461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.164208][T11481] chnl_net:caif_netlink_parms(): no params data found [ 818.201170][ T7908] Bluetooth: hci2: command 0x0c1a tx timeout [ 818.437215][ T7908] Bluetooth: hci0: command 0x0c1a tx timeout [ 818.596947][ T7908] Bluetooth: hci4: command 0x040f tx timeout [ 818.869374][T11538] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 818.871385][T11538] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 818.871522][T11538] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 818.871652][T11538] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 818.871778][T11538] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 819.535826][T11461] team0: Port device team_slave_0 added [ 819.631884][T11461] team0: Port device team_slave_1 added [ 820.917542][T11461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.917561][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.917592][T11461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.953689][ T60] Bluetooth: hci4: command 0x040f tx timeout [ 820.953819][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 820.953896][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 820.953991][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 820.954076][ T60] Bluetooth: hci3: command 0x0419 tx timeout [ 821.064244][T11461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.064262][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.065617][T11461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.449280][T11481] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.449508][T11481] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.449728][T11481] bridge_slave_0: entered allmulticast mode [ 823.452921][T11481] bridge_slave_0: entered promiscuous mode [ 823.487602][T11356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 824.044427][ T7908] Bluetooth: hci4: command 0x040f tx timeout [ 824.259333][T11481] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.275883][T11481] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.276155][T11481] bridge_slave_1: entered allmulticast mode [ 824.284250][T11481] bridge_slave_1: entered promiscuous mode [ 824.310381][T11356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 824.580131][T11356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 824.885042][T11356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 824.915000][T11481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.951478][T11461] hsr_slave_0: entered promiscuous mode [ 824.977520][T11461] hsr_slave_1: entered promiscuous mode [ 824.978555][T11461] debugfs: 'hsr0' already exists in 'hsr' [ 824.978661][T11461] Cannot create hsr debugfs directory [ 824.985898][T11481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.363977][T11481] team0: Port device team_slave_0 added [ 825.813563][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.953800][T11481] team0: Port device team_slave_1 added [ 826.763207][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.980460][T11481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.980480][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.980511][T11481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.262234][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.327539][T11481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.327558][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.327591][T11481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.457205][T11618] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 828.457420][T11618] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 828.457591][T11618] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 828.457733][T11618] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 828.457891][T11618] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 829.024843][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.425714][T11481] hsr_slave_0: entered promiscuous mode [ 830.456924][T11481] hsr_slave_1: entered promiscuous mode [ 830.458048][T11481] debugfs: 'hsr0' already exists in 'hsr' [ 830.458074][T11481] Cannot create hsr debugfs directory [ 830.518752][ T7908] Bluetooth: hci4: command 0x040f tx timeout [ 830.518797][ T7908] Bluetooth: hci0: command 0x0c1a tx timeout [ 830.518827][ T7908] Bluetooth: hci2: command 0x0c1a tx timeout [ 830.518855][ T7908] Bluetooth: hci5: command 0x0c1a tx timeout [ 830.518884][ T7908] Bluetooth: hci3: command 0x0419 tx timeout [ 835.747364][ T13] bridge_slave_1: left allmulticast mode [ 835.747396][ T13] bridge_slave_1: left promiscuous mode [ 835.747668][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.857928][ T13] bridge_slave_0: left allmulticast mode [ 835.857951][ T13] bridge_slave_0: left promiscuous mode [ 835.858209][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.003154][ T13] bridge_slave_1: left allmulticast mode [ 836.003185][ T13] bridge_slave_1: left promiscuous mode [ 836.003431][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.115516][ T13] bridge_slave_0: left allmulticast mode [ 836.115539][ T13] bridge_slave_0: left promiscuous mode [ 836.115724][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.566888][ T5807] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 837.718309][ T5807] usb 10-1: Using ep0 maxpacket: 8 [ 837.720364][ T5807] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 837.720437][ T5807] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 837.720466][ T5807] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 837.720491][ T5807] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 837.720518][ T5807] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 837.720552][ T5807] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.720602][ T5807] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 837.720626][ T5807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.900376][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.008305][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.055057][ T5807] usb 10-1: usb_control_msg returned -71 [ 838.055109][ T5807] usbtmc 10-1:16.0: can't read capabilities [ 838.107852][ T5807] usb 10-1: USB disconnect, device number 5 [ 838.145895][ T13] bond0 (unregistering): Released all slaves [ 839.177639][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.247570][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.279795][ T13] bond0 (unregistering): Released all slaves [ 840.652549][T11356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.019486][T11356] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.208324][ T13] hsr_slave_0: left promiscuous mode [ 841.247016][ T13] hsr_slave_1: left promiscuous mode [ 841.248022][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.387584][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.632055][ T13] hsr_slave_0: left promiscuous mode [ 841.684241][T11756] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 841.684272][T11756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 841.684686][T11756] vhci_hcd vhci_hcd.0: Device attached [ 841.689427][ T13] hsr_slave_1: left promiscuous mode [ 841.745769][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.745809][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.789779][T11756] random: crng reseeded on system resumption [ 841.806319][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.806341][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.956985][ T5787] usb 48-1: SetAddress Request (6) to port 0 [ 841.957074][ T5787] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 842.293690][T11757] vhci_hcd: connection reset by peer [ 842.315392][ T7905] vhci_hcd vhci_hcd.7: stop threads [ 842.315423][ T7905] vhci_hcd vhci_hcd.7: release socket [ 842.315514][ T7905] vhci_hcd vhci_hcd.7: disconnect device [ 842.430472][ T13] veth1_macvtap: left promiscuous mode [ 842.430548][ T13] veth0_macvtap: left promiscuous mode [ 842.430724][ T13] veth1_vlan: left promiscuous mode [ 842.430844][ T13] veth0_vlan: left promiscuous mode [ 845.103404][ T13] team0 (unregistering): Port device team_slave_1 removed [ 845.277647][ T13] team0 (unregistering): Port device team_slave_0 removed [ 846.117596][ T13] team0 (unregistering): Port device team_slave_1 removed [ 846.177561][ T13] team0 (unregistering): Port device team_slave_0 removed [ 846.864529][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.864899][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.018025][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.018483][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.043269][ T5787] usb 48-1: device descriptor read/8, error -110 [ 847.621355][ T5787] usb usb48-port1: attempt power cycle [ 848.318546][ T5787] usb usb48-port1: unable to enumerate USB device [ 849.739200][ T7908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 849.822589][ T7908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 849.827243][T11828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 849.831979][T11828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 849.842503][T11828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 851.090104][T11461] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 851.149142][T11461] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 851.648588][T11461] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 851.866912][T11461] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 851.881849][ T60] Bluetooth: hci1: command tx timeout [ 852.788328][T11826] chnl_net:caif_netlink_parms(): no params data found [ 853.595534][T11481] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 853.688114][T11481] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 853.854576][T11481] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 853.962340][T11481] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 853.967302][ T60] Bluetooth: hci1: command tx timeout [ 854.583481][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.583630][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.583808][T11826] bridge_slave_0: entered allmulticast mode [ 854.587871][T11826] bridge_slave_0: entered promiscuous mode [ 854.648620][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.648708][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.648895][T11826] bridge_slave_1: entered allmulticast mode [ 854.650727][T11826] bridge_slave_1: entered promiscuous mode [ 855.110052][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.130751][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.394664][T11826] team0: Port device team_slave_0 added [ 855.637050][T11884] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 856.066588][ T60] Bluetooth: hci1: command tx timeout [ 858.124066][ T60] Bluetooth: hci1: command tx timeout [ 858.380615][T11826] team0: Port device team_slave_1 added [ 859.231842][T11826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.231864][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.231895][T11826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.345709][T11914] comedi comedi0: Minor 8 could not be opened [ 859.430390][T11826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.430410][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.430441][T11826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.473809][T11913] bridge0: port 3(erspan0) entered disabled state [ 859.475285][T11913] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.478505][T11913] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.850521][T11826] hsr_slave_0: entered promiscuous mode [ 860.851991][T11826] hsr_slave_1: entered promiscuous mode [ 860.852966][T11826] debugfs: 'hsr0' already exists in 'hsr' [ 860.852992][T11826] Cannot create hsr debugfs directory [ 860.919206][T11461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.199339][T11461] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.317295][T11481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.040577][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.040681][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.219366][T11828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 865.225372][T11828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 865.249889][T11828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 865.253407][T11828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 865.254300][T11828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 865.352726][ T13] bridge_slave_1: left allmulticast mode [ 865.352755][ T13] bridge_slave_1: left promiscuous mode [ 865.352998][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.621694][ T13] bridge_slave_0: left allmulticast mode [ 865.621718][ T13] bridge_slave_0: left promiscuous mode [ 865.621918][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.760281][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.847772][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.899203][ T13] bond0 (unregistering): Released all slaves [ 866.942216][T11481] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.316900][ T60] Bluetooth: hci0: command tx timeout [ 867.646949][ T13] hsr_slave_0: left promiscuous mode [ 867.674315][ T13] hsr_slave_1: left promiscuous mode [ 867.675420][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.715688][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.884210][T11985] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 867.884240][T11985] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 867.952443][T11828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 867.956601][T11828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 867.962843][T11828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 867.982952][T11828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 867.985772][T11828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 868.025769][T11985] vhci_hcd vhci_hcd.0: Device attached [ 868.044213][T11985] random: crng reseeded on system resumption [ 868.267417][ T9] usb 48-1: SetAddress Request (10) to port 0 [ 868.267573][ T9] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 868.460171][T11986] vhci_hcd: connection reset by peer [ 868.463003][ T8930] vhci_hcd vhci_hcd.7: stop threads [ 868.463030][ T8930] vhci_hcd vhci_hcd.7: release socket [ 868.464001][ T8930] vhci_hcd vhci_hcd.7: disconnect device [ 868.930409][ T13] team0 (unregistering): Port device team_slave_1 removed [ 869.017768][ T13] team0 (unregistering): Port device team_slave_0 removed [ 869.020160][T11828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 869.024344][T11828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 869.025540][T11828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 869.028071][T11828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 869.028846][T11828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 869.391957][ T1471] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.392104][ T1471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.397947][ T60] Bluetooth: hci0: command tx timeout [ 870.037370][ T60] Bluetooth: hci2: command tx timeout [ 870.295393][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.295468][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.003319][T11955] chnl_net:caif_netlink_parms(): no params data found [ 871.157043][ T60] Bluetooth: hci5: command tx timeout [ 871.255404][T11826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 871.345849][T11826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 871.476876][ T60] Bluetooth: hci0: command tx timeout [ 871.482489][T11826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 871.721646][T12012] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 871.721677][T12012] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 871.726291][T12012] vhci_hcd vhci_hcd.0: Device attached [ 871.748613][T12012] random: crng reseeded on system resumption [ 871.951267][T11826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 872.111384][T11993] chnl_net:caif_netlink_parms(): no params data found [ 872.116905][ T60] Bluetooth: hci2: command tx timeout [ 872.135919][T11988] chnl_net:caif_netlink_parms(): no params data found [ 872.515798][T12013] vhci_hcd: connection closed [ 872.516199][ T1452] vhci_hcd vhci_hcd.7: stop threads [ 872.516227][ T1452] vhci_hcd vhci_hcd.7: release socket [ 872.516471][ T1452] vhci_hcd vhci_hcd.7: disconnect device [ 872.689599][T11955] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.691988][T11955] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.692173][T11955] bridge_slave_0: entered allmulticast mode [ 872.695242][T11955] bridge_slave_0: entered promiscuous mode [ 872.818801][T11955] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.818931][T11955] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.819157][T11955] bridge_slave_1: entered allmulticast mode [ 872.820997][T11955] bridge_slave_1: entered promiscuous mode [ 873.214710][T11955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.237236][ T60] Bluetooth: hci5: command tx timeout [ 873.317046][ T9] usb 48-1: device descriptor read/8, error -110 [ 873.476006][T11955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.595043][T11993] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.596524][T11993] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.597349][T11993] bridge_slave_0: entered allmulticast mode [ 873.600435][T11993] bridge_slave_0: entered promiscuous mode [ 873.708468][ T9] usb usb48-port1: attempt power cycle [ 873.776967][ T60] Bluetooth: hci0: command tx timeout [ 874.209762][ T60] Bluetooth: hci2: command tx timeout [ 875.316903][ T60] Bluetooth: hci5: command tx timeout [ 875.691247][ T9] usb usb48-port1: unable to enumerate USB device [ 875.873812][T11988] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.873907][T11988] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.874073][T11988] bridge_slave_0: entered allmulticast mode [ 875.875979][T11988] bridge_slave_0: entered promiscuous mode [ 875.911210][T11993] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.911461][T11993] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.911703][T11993] bridge_slave_1: entered allmulticast mode [ 875.914999][T11993] bridge_slave_1: entered promiscuous mode [ 875.980004][T11955] team0: Port device team_slave_0 added [ 875.980932][T11988] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.981095][T11988] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.981318][T11988] bridge_slave_1: entered allmulticast mode [ 875.985054][T11988] bridge_slave_1: entered promiscuous mode [ 876.105685][T11955] team0: Port device team_slave_1 added [ 876.276952][ T60] Bluetooth: hci2: command tx timeout [ 876.309114][T11993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.377417][T11988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.403536][T11993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.418458][T11955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.418472][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.418493][T11955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.424497][T11988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.616034][T11955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.616049][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.616070][T11955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.844260][T11993] team0: Port device team_slave_0 added [ 876.855725][T11988] team0: Port device team_slave_0 added [ 876.871152][T11993] team0: Port device team_slave_1 added [ 876.936016][T11988] team0: Port device team_slave_1 added [ 877.389951][T11993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.389966][T11993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.389987][T11993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.397267][ T60] Bluetooth: hci5: command tx timeout [ 877.453699][T11955] hsr_slave_0: entered promiscuous mode [ 877.455685][T11955] hsr_slave_1: entered promiscuous mode [ 877.487858][T11988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.487872][T11988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.487894][T11988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.495791][T11993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.495811][T11993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.495840][T11993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.574561][T11988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.574605][T11988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.574891][T11988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.879526][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.199390][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.614799][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.703123][T11993] hsr_slave_0: entered promiscuous mode [ 878.704165][T11993] hsr_slave_1: entered promiscuous mode [ 878.704851][T11993] debugfs: 'hsr0' already exists in 'hsr' [ 878.704870][T11993] Cannot create hsr debugfs directory [ 878.775056][T11988] hsr_slave_0: entered promiscuous mode [ 878.776113][T11988] hsr_slave_1: entered promiscuous mode [ 878.788605][T11988] debugfs: 'hsr0' already exists in 'hsr' [ 878.788639][T11988] Cannot create hsr debugfs directory [ 879.019387][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.896236][T11826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.224365][T12058] comedi comedi0: Minor 8 could not be opened [ 883.502371][T11826] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.562644][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.563156][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.596523][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.605887][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.831406][ T13] bridge_slave_1: left allmulticast mode [ 883.831431][ T13] bridge_slave_1: left promiscuous mode [ 883.831654][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.915391][ T13] bridge_slave_0: left allmulticast mode [ 883.915415][ T13] bridge_slave_0: left promiscuous mode [ 883.915651][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.047210][ T13] erspan0: left allmulticast mode [ 884.047243][ T13] erspan0: left promiscuous mode [ 884.047489][ T13] bridge0: port 3(erspan0) entered disabled state [ 884.105330][ T13] bridge_slave_1: left allmulticast mode [ 884.105354][ T13] bridge_slave_1: left promiscuous mode [ 884.105539][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.219821][ T13] bridge_slave_0: left allmulticast mode [ 884.219844][ T13] bridge_slave_0: left promiscuous mode [ 884.220032][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.291799][ T13] bridge_slave_1: left allmulticast mode [ 884.291822][ T13] bridge_slave_1: left promiscuous mode [ 884.291991][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.359166][ T13] bridge_slave_0: left allmulticast mode [ 884.359191][ T13] bridge_slave_0: left promiscuous mode [ 884.359360][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.030044][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.127637][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.189500][ T13] bond0 (unregistering): Released all slaves [ 888.587627][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.689341][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.709227][ T13] bond0 (unregistering): Released all slaves [ 889.107666][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.207646][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.270685][ T13] bond0 (unregistering): Released all slaves [ 889.368773][T12067] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 889.369003][T12067] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 889.369122][T12067] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 889.470659][T12067] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 889.589271][T12067] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 889.589373][T12067] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 889.669999][T12067] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 889.775247][T12067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 889.775384][T12067] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 889.923741][T12067] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 890.001822][T12067] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 890.001931][T12067] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 890.080666][T12067] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 891.397466][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 891.397542][T11828] Bluetooth: hci3: command 0x0419 tx timeout [ 891.596088][T11826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.637035][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 891.811761][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 892.052681][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 893.471735][ T13] hsr_slave_0: left promiscuous mode [ 893.477249][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 893.506867][ T13] hsr_slave_1: left promiscuous mode [ 893.507878][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.547929][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.686931][ T13] hsr_slave_0: left promiscuous mode [ 893.716981][ T13] hsr_slave_1: left promiscuous mode [ 893.718863][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.718892][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.718938][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 893.758387][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.758422][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.877321][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 893.916952][ T13] hsr_slave_0: left promiscuous mode [ 893.956935][ T13] hsr_slave_1: left promiscuous mode [ 893.957750][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.008413][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.068802][ T13] veth1_macvtap: left promiscuous mode [ 894.068875][ T13] veth0_macvtap: left promiscuous mode [ 894.069046][ T13] veth1_vlan: left promiscuous mode [ 894.069163][ T13] veth0_vlan: left promiscuous mode [ 894.116900][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 896.196925][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 896.494592][T11828] Bluetooth: hci0: command 0x0c1a tx timeout [ 896.494633][T11828] Bluetooth: hci2: command 0x0c1a tx timeout [ 896.494693][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 897.199595][ T13] team0 (unregistering): Port device team_slave_1 removed [ 897.494878][ T13] team0 (unregistering): Port device team_slave_0 removed [ 897.623208][T12095] 9pnet_virtio: no channels available for device syz [ 900.807535][ T13] team0 (unregistering): Port device team_slave_1 removed [ 900.893771][ T13] team0 (unregistering): Port device team_slave_0 removed [ 903.899948][ T13] team0 (unregistering): Port device team_slave_1 removed [ 903.947474][ T13] team0 (unregistering): Port device team_slave_0 removed [ 904.275588][T11826] veth0_vlan: entered promiscuous mode [ 904.450578][T11826] veth1_vlan: entered promiscuous mode [ 906.687347][T11955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 907.170693][T11955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 907.227010][T11826] veth0_macvtap: entered promiscuous mode [ 907.240368][T11955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 907.324718][T11955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 907.439794][T11826] veth1_macvtap: entered promiscuous mode [ 907.698160][T11993] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 907.783207][T11826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.797391][T11993] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 907.894519][T11993] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 907.946377][T11993] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 907.992914][T11826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.198165][ T1452] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.206932][ T3603] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.231098][ T3603] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.297724][ T3603] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.446954][T11988] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 908.504379][T11988] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 908.542362][T11988] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 908.633414][T11988] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 909.044731][T11955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.263331][T11993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.269359][T11955] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.309256][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.309901][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.388491][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.389022][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.578878][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 909.581605][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 909.582845][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 909.585578][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 909.586332][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 909.781026][T11993] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.829998][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.830381][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.882060][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.882220][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.913760][T11988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.317950][T11988] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.477429][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.477721][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.582807][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.582931][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.717295][ T60] Bluetooth: hci1: command tx timeout [ 912.633829][T12183] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 912.633860][T12183] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 912.634773][T12183] vhci_hcd vhci_hcd.0: Device attached [ 912.639154][T12183] random: crng reseeded on system resumption [ 912.763392][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.986925][T11920] usb 48-1: SetAddress Request (14) to port 0 [ 913.006898][T11920] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd [ 913.116347][T12184] vhci_hcd: connection reset by peer [ 913.117841][ T7907] vhci_hcd vhci_hcd.7: stop threads [ 913.117912][ T7907] vhci_hcd vhci_hcd.7: release socket [ 913.123957][ T7907] vhci_hcd vhci_hcd.7: disconnect device [ 913.124614][T12138] chnl_net:caif_netlink_parms(): no params data found [ 913.419284][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.812610][ T60] Bluetooth: hci1: command tx timeout [ 913.841971][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.329309][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.372313][T11955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.423585][T12138] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.424545][T12138] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.424771][T12138] bridge_slave_0: entered allmulticast mode [ 914.460259][T12138] bridge_slave_0: entered promiscuous mode [ 914.507695][T12138] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.507825][T12138] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.508070][T12138] bridge_slave_1: entered allmulticast mode [ 914.537132][T12138] bridge_slave_1: entered promiscuous mode [ 914.559106][T11993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.732052][T12138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.796422][T12138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.167886][T12138] team0: Port device team_slave_0 added [ 915.353715][T12224] 9pnet_virtio: no channels available for device syz [ 915.402918][T12224] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 915.403447][T12224] overlayfs: overlapping lowerdir path [ 915.623728][T12138] team0: Port device team_slave_1 added [ 915.903106][ T60] Bluetooth: hci1: command tx timeout [ 916.610445][T11988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.612460][T12138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.612476][T12138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.612506][T12138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.624971][T12138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.624991][T12138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.625022][T12138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.733791][T11993] veth0_vlan: entered promiscuous mode [ 916.860861][T12138] hsr_slave_0: entered promiscuous mode [ 916.862285][T12138] hsr_slave_1: entered promiscuous mode [ 916.863290][T12138] debugfs: 'hsr0' already exists in 'hsr' [ 916.863316][T12138] Cannot create hsr debugfs directory [ 917.433348][ T13] bridge_slave_1: left allmulticast mode [ 917.433380][ T13] bridge_slave_1: left promiscuous mode [ 917.433626][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.600138][ T13] bridge_slave_0: left allmulticast mode [ 917.600161][ T13] bridge_slave_0: left promiscuous mode [ 917.600358][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.956800][ T60] Bluetooth: hci1: command tx timeout [ 918.116895][T11920] usb 48-1: device descriptor read/8, error -110 [ 918.177368][T12254] comedi comedi0: Minor 8 could not be opened [ 918.561461][T11920] usb usb48-port1: attempt power cycle [ 919.137546][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.139977][T11920] usb usb48-port1: unable to enumerate USB device [ 919.241967][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.288953][ T13] bond0 (unregistering): Released all slaves [ 919.381897][T11993] veth1_vlan: entered promiscuous mode [ 922.123283][ T13] hsr_slave_0: left promiscuous mode [ 922.647114][ T13] hsr_slave_1: left promiscuous mode [ 922.652963][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.653038][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.777704][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.777737][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.898801][ T13] veth1_macvtap: left promiscuous mode [ 922.898913][ T13] veth0_macvtap: left promiscuous mode [ 922.899177][ T13] veth1_vlan: left promiscuous mode [ 922.899386][ T13] veth0_vlan: left promiscuous mode [ 924.533839][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 924.562804][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 924.564124][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 924.573948][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 924.592380][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 925.012978][ T13] team0 (unregistering): Port device team_slave_1 removed [ 925.097477][ T13] team0 (unregistering): Port device team_slave_0 removed [ 925.483767][T11988] veth0_vlan: entered promiscuous mode [ 925.874031][T11988] veth1_vlan: entered promiscuous mode [ 926.099620][T11993] veth0_macvtap: entered promiscuous mode [ 926.123246][T12328] comedi comedi0: Minor 8 could not be opened [ 926.677134][ T5117] Bluetooth: hci4: command tx timeout [ 926.822435][T11993] veth1_macvtap: entered promiscuous mode [ 927.415610][T11993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.463717][T11993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.465272][T11988] veth0_macvtap: entered promiscuous mode [ 927.546990][T11988] veth1_macvtap: entered promiscuous mode [ 927.548435][ T7905] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.577933][ T7905] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.598278][ T7905] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.724408][ T6080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.217973][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 928.221410][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 928.223890][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 928.225930][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 928.228578][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 928.764801][ T60] Bluetooth: hci4: command tx timeout [ 930.277076][ T60] Bluetooth: hci0: command tx timeout [ 930.836834][ T60] Bluetooth: hci4: command tx timeout [ 931.723935][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.724009][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.356857][ T60] Bluetooth: hci0: command tx timeout [ 932.673622][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 932.679105][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 932.685509][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 932.710020][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 932.711409][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 933.084587][ T60] Bluetooth: hci4: command tx timeout [ 934.436815][ T60] Bluetooth: hci0: command tx timeout [ 935.356167][ T60] Bluetooth: hci2: command tx timeout [ 935.780645][T12308] chnl_net:caif_netlink_parms(): no params data found [ 935.902784][T12138] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 935.985033][T12138] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 935.996823][ T5987] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 936.104842][T12138] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 936.146928][ T5987] usb 8-1: Using ep0 maxpacket: 8 [ 936.166040][ T5987] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 936.166118][ T5987] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 936.166147][ T5987] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 936.166173][ T5987] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 936.166196][ T5987] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 936.166220][ T5987] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 936.166266][ T5987] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 936.166290][ T5987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.177580][T12138] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 936.282790][ T5987] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 936.517210][ T60] Bluetooth: hci0: command tx timeout [ 936.598101][T12308] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.598190][T12308] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.598373][T12308] bridge_slave_0: entered allmulticast mode [ 936.600234][T12308] bridge_slave_0: entered promiscuous mode [ 936.663274][T12308] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.668533][T12308] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.669223][T12308] bridge_slave_1: entered allmulticast mode [ 936.687150][T12308] bridge_slave_1: entered promiscuous mode [ 936.844063][T12308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.919833][T12308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.920343][ T13] bridge_slave_1: left allmulticast mode [ 936.920368][ T13] bridge_slave_1: left promiscuous mode [ 936.920614][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.000201][ T13] bridge_slave_0: left allmulticast mode [ 937.000234][ T13] bridge_slave_0: left promiscuous mode [ 937.000590][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.397176][ T60] Bluetooth: hci2: command tx timeout [ 937.824165][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.909769][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.950907][ T13] bond0 (unregistering): Released all slaves [ 938.218946][T12308] team0: Port device team_slave_0 added [ 938.243950][T12308] team0: Port device team_slave_1 added [ 938.442242][ T13] hsr_slave_0: left promiscuous mode [ 938.486881][ T13] hsr_slave_1: left promiscuous mode [ 938.488831][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.538184][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.749163][ T5987] usb 8-1: USB disconnect, device number 19 [ 939.486810][ T60] Bluetooth: hci2: command tx timeout [ 939.771017][ T13] team0 (unregistering): Port device team_slave_1 removed [ 939.807895][ T13] team0 (unregistering): Port device team_slave_0 removed [ 940.419910][T12308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.419928][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.419958][T12308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.498545][T12308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.498565][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.498596][T12308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.792671][T12360] chnl_net:caif_netlink_parms(): no params data found [ 941.071443][T12308] hsr_slave_0: entered promiscuous mode [ 941.072870][T12308] hsr_slave_1: entered promiscuous mode [ 941.158461][T12384] chnl_net:caif_netlink_parms(): no params data found [ 941.556824][ T60] Bluetooth: hci2: command tx timeout [ 941.854629][T12509] comedi comedi0: Minor 8 could not be opened [ 941.958903][T12360] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.958994][T12360] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.959121][T12360] bridge_slave_0: entered allmulticast mode [ 941.961547][T12360] bridge_slave_0: entered promiscuous mode [ 942.029375][T12360] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.029574][T12360] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.029918][T12360] bridge_slave_1: entered allmulticast mode [ 942.033413][T12360] bridge_slave_1: entered promiscuous mode [ 942.364551][T12384] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.364863][T12384] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.365110][T12384] bridge_slave_0: entered allmulticast mode [ 942.391456][T12384] bridge_slave_0: entered promiscuous mode [ 942.416846][T12360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.473111][T12384] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.473479][T12384] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.473676][T12384] bridge_slave_1: entered allmulticast mode [ 942.487984][T12384] bridge_slave_1: entered promiscuous mode [ 942.831572][T12360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.404432][T12384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.864771][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.963443][T12360] team0: Port device team_slave_0 added [ 944.010594][T12384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.252415][T12360] team0: Port device team_slave_1 added [ 946.807547][T12567] 9pnet_virtio: no channels available for device syz [ 947.116731][T12569] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 947.117246][T12569] overlayfs: overlapping lowerdir path [ 947.662025][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.762116][T12138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.765864][T12384] team0: Port device team_slave_0 added [ 948.860621][T12384] team0: Port device team_slave_1 added [ 948.861543][T12360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.861559][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.861589][T12360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.078405][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.120943][T12360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.120962][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.120992][T12360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.337261][T12384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.337291][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.337322][T12384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.529705][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.568107][T12384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.568121][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.568143][T12384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.576042][T12360] hsr_slave_0: entered promiscuous mode [ 951.597408][T12360] hsr_slave_1: entered promiscuous mode [ 951.598131][T12360] debugfs: 'hsr0' already exists in 'hsr' [ 951.598151][T12360] Cannot create hsr debugfs directory [ 952.478578][T12138] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.636143][T12384] hsr_slave_0: entered promiscuous mode [ 952.644269][T12384] hsr_slave_1: entered promiscuous mode [ 952.645277][T12384] debugfs: 'hsr0' already exists in 'hsr' [ 952.645302][T12384] Cannot create hsr debugfs directory [ 952.904146][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.904397][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.394779][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.394940][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.926839][ T5942] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 954.081005][ T5942] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 954.081057][ T5942] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.081085][ T5942] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.081109][ T5942] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 954.082395][ T5942] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 954.082424][ T5942] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 954.082446][ T5942] usb 8-1: Manufacturer: syz [ 954.170531][ T5942] usb 8-1: config 0 descriptor?? [ 954.603516][ T5942] usbhid 8-1:0.0: can't add hid device: -71 [ 954.603665][ T5942] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 954.651046][ T5942] usb 8-1: USB disconnect, device number 20 [ 954.709208][T12308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 954.800487][T12308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 954.864879][T12308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 955.091524][T12308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 956.385470][T12308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.216245][T12308] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.248828][ T7905] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.248931][ T7905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.295648][T12138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.514883][ T7905] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.514984][ T7905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.809394][ T13] bridge_slave_1: left allmulticast mode [ 958.809426][ T13] bridge_slave_1: left promiscuous mode [ 958.809683][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.867921][ T13] bridge_slave_0: left allmulticast mode [ 958.867945][ T13] bridge_slave_0: left promiscuous mode [ 958.868178][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.959971][ T13] bridge_slave_1: left allmulticast mode [ 958.959995][ T13] bridge_slave_1: left promiscuous mode [ 958.960164][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.054588][ T13] bridge_slave_0: left allmulticast mode [ 959.054613][ T13] bridge_slave_0: left promiscuous mode [ 959.054799][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.535499][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.577481][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.630815][ T13] bond0 (unregistering): Released all slaves [ 961.248210][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.308010][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.335383][ T13] bond0 (unregistering): Released all slaves [ 962.266844][ T13] hsr_slave_0: left promiscuous mode [ 962.306807][ T13] hsr_slave_1: left promiscuous mode [ 962.307608][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.307628][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.337547][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.337568][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.487309][ T13] hsr_slave_0: left promiscuous mode [ 962.517667][ T13] hsr_slave_1: left promiscuous mode [ 962.518465][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.547291][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.619079][ T13] veth1_macvtap: left promiscuous mode [ 962.619157][ T13] veth0_macvtap: left promiscuous mode [ 962.619329][ T13] veth1_vlan: left promiscuous mode [ 962.619447][ T13] veth0_vlan: left promiscuous mode [ 962.751867][ T13] veth1_macvtap: left promiscuous mode [ 962.751955][ T13] veth0_macvtap: left promiscuous mode [ 962.752152][ T13] veth1_vlan: left promiscuous mode [ 962.752305][ T13] veth0_vlan: left promiscuous mode [ 964.347787][ T13] team0 (unregistering): Port device team_slave_1 removed [ 964.411690][ T13] team0 (unregistering): Port device team_slave_0 removed [ 965.855222][ T13] team0 (unregistering): Port device team_slave_1 removed [ 965.917484][ T13] team0 (unregistering): Port device team_slave_0 removed [ 966.233392][T12138] veth0_vlan: entered promiscuous mode [ 966.287320][T12138] veth1_vlan: entered promiscuous mode [ 966.455094][T12721] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 966.455125][T12721] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 966.455369][T12721] vhci_hcd vhci_hcd.0: Device attached [ 966.470523][T12138] veth0_macvtap: entered promiscuous mode [ 966.613350][T12721] random: crng reseeded on system resumption [ 966.880676][T12138] veth1_macvtap: entered promiscuous mode [ 966.886974][ T5807] usb 48-1: SetAddress Request (18) to port 0 [ 966.887043][ T5807] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd [ 967.156020][T12722] vhci_hcd: connection reset by peer [ 967.181708][ T3603] vhci_hcd vhci_hcd.7: stop threads [ 967.181735][ T3603] vhci_hcd vhci_hcd.7: release socket [ 967.181809][ T3603] vhci_hcd vhci_hcd.7: disconnect device [ 967.430624][T12138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.495914][T12138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.613055][T12308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.634713][ T8930] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.635694][ T8930] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.636362][ T8930] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.664613][ T8930] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.384127][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.384151][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.699516][T12360] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 968.799751][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.799769][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.802420][T12360] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 968.898818][T12360] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 969.005829][T12360] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 969.517058][ T8531] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 969.765719][ T8531] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 969.765769][ T8531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.765797][ T8531] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.765820][ T8531] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 969.883482][ T8531] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 969.883557][ T8531] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 969.883622][ T8531] usb 4-1: Manufacturer: syz [ 970.016201][ T8531] usb 4-1: config 0 descriptor?? [ 970.584462][T12384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 970.590554][ T8531] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 970.612040][ T8531] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 970.690948][T12384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 970.735564][T12384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 970.818096][T12384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 970.849909][T11920] usb 4-1: USB disconnect, device number 6 [ 971.000702][T12308] veth0_vlan: entered promiscuous mode [ 971.092290][T12308] veth1_vlan: entered promiscuous mode [ 971.280173][T12308] veth0_macvtap: entered promiscuous mode [ 971.302194][T12308] veth1_macvtap: entered promiscuous mode [ 971.353298][T12360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.435981][T12308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.478670][T12308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.508124][T12360] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.534333][T12384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.559326][ T1452] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.581527][ T1452] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.609418][ T1379] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.609526][ T1379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.611799][ T1452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.833685][ T1452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.860539][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.862936][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.957090][ T5807] usb 48-1: device descriptor read/8, error -110 [ 972.005016][T12384] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.294312][ T1379] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.294492][ T1379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.335847][ T8930] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.335947][ T8930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.344318][T12765] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 972.344462][T12765] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 972.344831][T12765] vhci_hcd vhci_hcd.0: Device attached [ 972.350482][T12765] random: crng reseeded on system resumption [ 972.526616][ T5807] usb 48-1: SetAddress Request (19) to port 0 [ 972.526760][ T5807] usb 48-1: new SuperSpeed USB device number 19 using vhci_hcd [ 972.709102][T12766] vhci_hcd: connection closed [ 972.720598][ T7905] vhci_hcd vhci_hcd.7: stop threads [ 972.720628][ T7905] vhci_hcd vhci_hcd.7: release socket [ 972.720701][ T7905] vhci_hcd vhci_hcd.7: disconnect device [ 972.724204][ T5807] usb 48-1: enqueue for inactive port 0 [ 972.873944][ T5807] usb usb48-port1: attempt power cycle [ 972.999922][ T8930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.999940][ T8930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.216380][ T8930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.216403][ T8930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.550073][ T5807] usb usb48-port1: unable to enumerate USB device [ 975.756128][T12360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.966846][T12041] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 976.092451][T12360] veth0_vlan: entered promiscuous mode [ 976.122082][T12384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.135347][T12041] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 976.135398][T12041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.135418][T12041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.135434][T12041] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 976.150919][T12041] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 976.150998][T12041] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 976.151058][T12041] usb 5-1: Manufacturer: syz [ 976.231144][T12041] usb 5-1: config 0 descriptor?? [ 976.262431][T12360] veth1_vlan: entered promiscuous mode [ 976.413364][T12360] veth0_macvtap: entered promiscuous mode [ 976.438334][T12360] veth1_macvtap: entered promiscuous mode [ 976.614174][T12360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.698351][T12041] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 976.706781][T12360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.787298][T12041] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 976.888745][ T91] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.893824][ T91] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.934107][ T91] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.982329][ T91] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.982612][T12384] veth0_vlan: entered promiscuous mode [ 977.157940][T12384] veth1_vlan: entered promiscuous mode [ 977.661297][T12794] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1669'. [ 979.955869][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.955886][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.100217][T12807] comedi comedi0: Minor 8 could not be opened [ 981.172717][ T8531] usb 5-1: USB disconnect, device number 3 [ 981.378558][T12384] veth0_macvtap: entered promiscuous mode [ 981.400112][T12384] veth1_macvtap: entered promiscuous mode [ 981.405806][ T1379] wlan1: Created IBSS using[ 981.405806][ T1379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.405827][ T1379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.417258][ T8531] ================================================================== [ 981.417343][ T8531] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 981.417491][ T8531] Read of size 8 at addr ffffc9001ce02008 by task kworker/1:2/8531 [ 981.417509][ T8531] [ 981.417544][ T8531] CPU: 1 UID: 0 PID: 8531 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 981.417574][ T8531] Tainted: [L]=SOFTLOCKUP [ 981.417582][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.417596][ T8531] Workqueue: usb_hub_wq hub_event [ 981.417702][ T8531] Call Trace: [ 981.417711][ T8531] [ 981.417720][ T8531] dump_stack_lvl+0xe8/0x150 [ 981.417817][ T8531] print_report+0xba/0x230 [ 981.417852][ T8531] ? __list_add_valid_or_report+0x4e/0x130 [ 981.417880][ T8531] kasan_report+0x117/0x150 [ 981.417956][ T8531] ? __list_add_valid_or_report+0x4e/0x130 [ 981.417986][ T8531] __list_add_valid_or_report+0x4e/0x130 [ 981.418014][ T8531] kcov_remote_stop+0x457/0x680 [ 981.418064][ T8531] hub_event+0x49d8/0x4f60 [ 981.418112][ T8531] ? __pfx_hub_event+0x10/0x10 [ 981.418142][ T8531] ? process_scheduled_works+0xa8d/0x18c0 [ 981.418187][ T8531] ? process_scheduled_works+0xa8d/0x18c0 [ 981.418219][ T8531] process_scheduled_works+0xb6e/0x18c0 [ 981.418265][ T8531] ? __pfx_process_scheduled_works+0x10/0x10 [ 981.418298][ T8531] ? assign_work+0x3d5/0x5e0 [ 981.418329][ T8531] worker_thread+0xa53/0xfc0 [ 981.418375][ T8531] kthread+0x388/0x470 [ 981.418398][ T8531] ? __pfx_worker_thread+0x10/0x10 [ 981.418426][ T8531] ? __pfx_kthread+0x10/0x10 [ 981.418446][ T8531] ret_from_fork+0x51e/0xb90 [ 981.418494][ T8531] ? __pfx_ret_from_fork+0x10/0x10 [ 981.418522][ T8531] ? __switch_to+0xc7d/0x1450 [ 981.418561][ T8531] ? __pfx_kthread+0x10/0x10 [ 981.418585][ T8531] ret_from_fork_asm+0x1a/0x30 [ 981.418615][ T8531] [ 981.418666][ T8531] [ 981.418672][ T8531] The buggy address belongs to a vmalloc virtual mapping [ 981.418713][ T8531] Memory state around the buggy address: [ 981.418751][ T8531] ffffc9001ce01f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 981.418766][ T8531] ffffc9001ce01f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 981.418805][ T8531] >ffffc9001ce02000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 981.418817][ T8531] ^ [ 981.418829][ T8531] ffffc9001ce02080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 981.418844][ T8531] ffffc9001ce02100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 981.418856][ T8531] ================================================================== [ 981.418958][ T8531] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 981.418978][ T8531] CPU: 1 UID: 0 PID: 8531 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 981.419008][ T8531] Tainted: [L]=SOFTLOCKUP [ 981.419017][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.419032][ T8531] Workqueue: usb_hub_wq hub_event [ 981.419056][ T8531] Call Trace: [ 981.419065][ T8531] [ 981.419073][ T8531] vpanic+0x56c/0xa60 [ 981.419109][ T8531] ? __pfx_vpanic+0x10/0x10 [ 981.419141][ T8531] ? __pfx___schedule+0x10/0x10 [ 981.419266][ T8531] panic+0xc5/0xd0 [ 981.419298][ T8531] ? __pfx_panic+0x10/0x10 [ 981.419332][ T8531] ? preempt_schedule_thunk+0x16/0x30 [ 981.419362][ T8531] ? __list_add_valid_or_report+0x4e/0x130 [ 981.419386][ T8531] check_panic_on_warn+0x89/0xb0 [ 981.419422][ T8531] ? __list_add_valid_or_report+0x4e/0x130 [ 981.419444][ T8531] end_report+0x73/0x180 [ 981.419464][ T8531] ? __list_add_valid_or_report+0x4e/0x130 [ 981.419485][ T8531] kasan_report+0x128/0x150 [ 981.419506][ T8531] ? __list_add_valid_or_report+0x4e/0x130 [ 981.419534][ T8531] __list_add_valid_or_report+0x4e/0x130 [ 981.419556][ T8531] kcov_remote_stop+0x457/0x680 [ 981.419581][ T8531] hub_event+0x49d8/0x4f60 [ 981.419626][ T8531] ? __pfx_hub_event+0x10/0x10 [ 981.419651][ T8531] ? process_scheduled_works+0xa8d/0x18c0 [ 981.419689][ T8531] ? process_scheduled_works+0xa8d/0x18c0 [ 981.419718][ T8531] process_scheduled_works+0xb6e/0x18c0 [ 981.419763][ T8531] ? __pfx_process_scheduled_works+0x10/0x10 [ 981.419797][ T8531] ? assign_work+0x3d5/0x5e0 [ 981.419828][ T8531] worker_thread+0xa53/0xfc0 [ 981.419872][ T8531] kthread+0x388/0x470 [ 981.419895][ T8531] ? __pfx_worker_thread+0x10/0x10 [ 981.419924][ T8531] ? __pfx_kthread+0x10/0x10 [ 981.419947][ T8531] ret_from_fork+0x51e/0xb90 [ 981.419979][ T8531] ? __pfx_ret_from_fork+0x10/0x10 [ 981.420008][ T8531] ? __switch_to+0xc7d/0x1450 [ 981.420035][ T8531] ? __pfx_kthread+0x10/0x10 [ 981.420058][ T8531] ret_from_fork_asm+0x1a/0x30 [ 981.420087][ T8531] [ 981.420712][ T8531] Kernel Offset: disabled