last executing test programs: 6m25.834734554s ago: executing program 2 (id=21): socket$kcm(0x29, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x40, 0xf0, 0x75, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x4b, {{0x5}, {0x5, 0x24, 0x0, 0x31}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfffd, 0x0, 0xd7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x8, 0x4}}}}}]}}]}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 6m23.806917856s ago: executing program 2 (id=29): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0xf, 0x3, 0x1, 0x81, 0x2}}, {0x0, 0x0, 0x0, 0x0, @tick=0x800, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x4}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x8c) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {0xa}, {0x0, 0x5}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x8, 0xf]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32={[0x0, 0x101]}}, {0x1, 0x0, 0x0, 0x0, @tick, {0x0, 0x40}, {}, @connect}, {0x0, 0x4, 0x3, 0x80, @tick=0xfffffffa, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff85}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @tick=0x6, {}, {}, @connect={{0x8}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfffffffc, {0x6}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x8}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x20}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, @time={0x9, 0xefa}, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x800]}}, {0x0, 0x0, 0x2, 0x6, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x3}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"bfcf9b64bc42ea882d9c04f5"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xff}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x4, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0x5, 0x3}, 0x1000}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1000000}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) 6m23.728576301s ago: executing program 2 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400006000036eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) 6m23.440074931s ago: executing program 2 (id=32): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x204) 6m23.331103639s ago: executing program 2 (id=33): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c01020301090212e700000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6m23.050145395s ago: executing program 2 (id=34): read(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000003000000000008"], 0x14}}, 0x0) 6m22.49619782s ago: executing program 32 (id=34): read(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000003000000000008"], 0x14}}, 0x0) 2m3.659828909s ago: executing program 1 (id=1279): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 1m48.335857955s ago: executing program 1 (id=1279): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 1m38.951585796s ago: executing program 0 (id=1575): socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x7, 0x1, 0x0, 0x6, {{0x5, 0x4, 0x2, 0x2d, 0x14, 0x64, 0x0, 0xe0, 0x2f, 0x0, @local, @empty}}}}) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 1m38.950199084s ago: executing program 0 (id=1576): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480), 0x0) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc, 0x800}], 0x1) r2 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) io_setup(0x9, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x1, 0x8000000000}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000000008010200000000000000000e00000105000300060000001c00048008000a400000000a080005400000000808000b40000100000600024088fb0000090001"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x80) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100002c23b740c71b4010b1b501020301090224000100000000090400", @ANYRES8], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 1m37.050781251s ago: executing program 1 (id=1279): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 1m36.134980173s ago: executing program 0 (id=1587): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f3"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x4000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1m35.094877398s ago: executing program 0 (id=1591): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000180)={0x0, 0x1064, 0x0, 0x0, 0x271}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x141000, 0x6a, 0x48}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd701004000000040000000800090002"], 0x34}}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x800) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xf}, 0x1c) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*\x00', r8) keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r9 = socket$alg(0x26, 0x5, 0x0) r10 = syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c070009050102100000fa000905820240"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf002001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000206c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-256-generic)\x00'}, 0x58) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) connect$inet6(r7, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000200), &(0x7f0000000040)=@tcp6=r7}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000100), 0x4) 1m34.259996829s ago: executing program 3 (id=1595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="89e7ee2c7cdad9b4b47380c988ca4f870a9ef905dbd95c71a94ec0a4d1f7bfead1c98d8e73e18b5d3d62240c786ba26c123aa18c3ca9b2928de9bfc8d15e", 0x3e}], 0x1) 1m33.608921794s ago: executing program 5 (id=1598): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000100)="b9afd7806ef3cdb7f628bdc82116f7a0ee40bc19f543318669fa37ad88f11ec7", 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000480)={[{@usrjquota}, {@resgid}, {@abort}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@dioread_nolock}, {@nomblk_io_submit}, {@jqfmt_vfsv1}, {@nouid32}, {@auto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}], [], 0x2c}, 0x84, 0x4b6, &(0x7f0000000c00)="$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") 1m33.367093087s ago: executing program 3 (id=1599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff020000"], 0xfdef) 1m32.58146475s ago: executing program 5 (id=1600): socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x7, 0x1, 0x0, 0x6, {{0x5, 0x4, 0x2, 0x2d, 0x14, 0x64, 0x0, 0xe0, 0x2f, 0x0, @local, @empty}}}}) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 1m32.437743882s ago: executing program 5 (id=1601): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000280)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(r0) 1m32.339000096s ago: executing program 3 (id=1602): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback, 0xc, 0x1, 0x2, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000700)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) unshare(0x22020600) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @mcast2, 0x5}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r9, r1, 0x1, 0x0, 0x0, @void, @value=r4, @void, @void, r8}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r11}]}]}, 0x28}}, 0x0) 1m32.164268336s ago: executing program 3 (id=1603): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1m32.046830228s ago: executing program 5 (id=1605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f0000000b00)="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", 0x1a9}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e", 0x13}], 0x6, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 1m31.984850468s ago: executing program 3 (id=1606): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 1m31.947180859s ago: executing program 0 (id=1607): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000002480), 0x0) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc, 0x800}], 0x1) r2 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) io_setup(0x9, &(0x7f00000000c0)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000100)='9', 0x1, 0x8000000000}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000) unshare(0x68040200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000000008010200000000000000000e00000105000300060000001c00048008000a400000000a080005400000000808000b40000100000600024088fb0000090001"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x80) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100002c23b740c71b4010b1b501020301090224000100000000090400", @ANYRES8], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 1m31.81475189s ago: executing program 5 (id=1608): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000140)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 1m30.230200812s ago: executing program 0 (id=1613): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m30.179674299s ago: executing program 5 (id=1614): socket$kcm(0x29, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700000001"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x40, 0xf0, 0x75, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x4b, {{0x5}, {0x5, 0x24, 0x0, 0x31}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfffd, 0x0, 0xd7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x8, 0x4}}}}}]}}]}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 1m29.755435612s ago: executing program 33 (id=1613): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m29.621407013s ago: executing program 34 (id=1614): socket$kcm(0x29, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700000001"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x40, 0xf0, 0x75, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x4b, {{0x5}, {0x5, 0x24, 0x0, 0x31}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfffd, 0x0, 0xd7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x8, 0x4}}}}}]}}]}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 1m29.594953831s ago: executing program 3 (id=1617): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/476], 0x0, 0x307, &(0x7f0000000200)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m29.592818248s ago: executing program 35 (id=1617): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f3c981414a50ff7ada7e00c83b7ff20b21e7744e0f82318bcdcdc17601384088fa9950f4a77772da9105723cb44f1469ae4c6f6a4ea884e464d61cb3a134196eb13fbcaf923e0c1c2c188470a4da78b7ed6d8a89816dcf28a48f0bd4f4a8d69c09f43f35a7633764ca34b8db2f8e7ed083d171d7a5c0b6e4f2bb9c6b3f8f4e97a8306ed4c846ba269edb6379d1d00"/476], 0x0, 0x307, &(0x7f0000000200)="$eJzs3UtrG1cUwPEzeliSXddalFJKCxcXSkvxYAu666Km2FAqaLGtQhwIjONxIjSWjEYYZEKsRSDbrLPwIssQCIHssgkhW2/yCZI4O2+8ixciE0bzsB4TRSLIj+T/W1hHc8+Zez1zZeNraebwjzubpY20iGhyIt7ISkzi/rOG/Pp879WPy8++8p4rtTi/MpdTKiYil288mH5am/j/8ddPUrKfvXJ4lHuz/8OKyLuV6xJTRVuVHUcZaq1SqbldqPWiXdKV+s8yDdtUxbJtVmt+u7FmmWrDqmxt1ZVRXp8c36qatq2Mcl2VzLqqVVStWlfGNaNYVrquq8lxgYhkwyjW06b1KyzcP3YcOXIcx0k1xHGciOxGECT9x9SnDRbnSdf575vbMznioxwZTsOxkxj4/OPz473+X98d7Pw7u6c0LJyS5Uur/8zn8wtLSqVFNm9vF7YL3qPX/nJCimKJKXtLv602xZ0jPtHcr4t/5xdmVUtWft7c9et3twveL4f5jVb9QVDUVi9B/ZxXrzrrkzJ+Um9KTqbkG4mszwX1EmurH5Nffmqr12VKXlyViliy7s7ktvqbc0r99W++q/9MKw8AAAAAAAAAgItIV6GT9Xst/FdvRtdTrXd8hO0Zd7Ob5yWE6+uzMiXN6PX52cj1/YR8nzjDbxwAAAAAgC+IXd8pGZZlVkcTxO9l+nSRFBE3ELk17Q6m7w6/9Uc8WO9jItLbFO/fRUeQ+d3r7+GSPzAZ5YEKgvQQI4wIgg9rlIzmo6ApI1HJsaEmwMxY5JFPVzUZ6fzpCGSQZEkPPbG1hF3fSQ08tXrKm8GW7yJzHO3j+3EMK+ltkfAM9q/6c6iXwweDdPeBmjnw9mv1+aHxNlziAwAAAHCBtP3hBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzkj4+X/Nv9P/IBcPC67b39kk/i3iey/J1n2feK77DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAceh8AAP//8yCz0A==") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m15.530137802s ago: executing program 1 (id=1279): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 54.18885436s ago: executing program 1 (id=1279): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 23.695397209s ago: executing program 1 (id=1279): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 8.457772933s ago: executing program 6 (id=1843): r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0x2, 0x1, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) 8.271058374s ago: executing program 6 (id=1845): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 6.481281563s ago: executing program 6 (id=1850): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8000, 0x9, 0x8, 0xfffffffe, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(0x0, &(0x7f00000001c0)='./file0\x00') syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000080)={0x800103, 0xfffff7fd, 0x22, 0xce9, 0x1101, 0x5}) socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000200000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 6.468961778s ago: executing program 4 (id=1851): r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x80, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.239260629s ago: executing program 4 (id=1853): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) chdir(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4008040) 4.566694175s ago: executing program 8 (id=1855): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x4, 0x3, 0x5}, {0x4, 0x1000, 0x3, 0xc}, {0x0, 0x4, 0x7}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 4.126818837s ago: executing program 8 (id=1856): socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = add_key$fscrypt_v1(0x0, &(0x7f0000000480)={'fscrypt:', @auto=[0x64, 0x0, 0x38, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x64, 0x0, 0x32, 0x31, 0x0, 0x64]}, &(0x7f0000000280)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fd968a1be9b4ebbe9c2289a6b0aa00", 0xfffffffd}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x1d) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0xc810) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xcf) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) 4.047012981s ago: executing program 7 (id=1857): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, 0x0, &(0x7f0000000180)) 3.996920245s ago: executing program 6 (id=1858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002880)={0x20, 0x2, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x804c000) 3.785919735s ago: executing program 7 (id=1859): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r5, r5, 0x3, 0xfffffffffffffffd, 0x4001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = eventfd(0x0) fgetxattr(r7, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 2.60948516s ago: executing program 8 (id=1860): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 2.606410827s ago: executing program 7 (id=1861): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 2.504536758s ago: executing program 6 (id=1862): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c2800008000500ffffffff080005", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2.45508855s ago: executing program 4 (id=1863): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 2.436614555s ago: executing program 8 (id=1864): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='security.apparmor\x00') 2.362885208s ago: executing program 7 (id=1865): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'caif0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.349903165s ago: executing program 4 (id=1866): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x4, 0x3, 0x5}, {0x4, 0x1000, 0x3, 0xc}, {0x0, 0x4, 0x7}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 2.252374665s ago: executing program 8 (id=1867): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x10, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x7, 0x81, 0x2) r1 = gettid() r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000000)='!\x00', 0x40, 0x10, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 1.72529979s ago: executing program 6 (id=1868): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0xfffffffd}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r5, 0x0, 0x0) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r2, 0x5ed1b000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.076594787s ago: executing program 7 (id=1869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r5, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x940}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.071879164s ago: executing program 4 (id=1870): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x5) 1.070646742s ago: executing program 8 (id=1871): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) 6.448836ms ago: executing program 4 (id=1872): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10d00, 0xf) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) 0s ago: executing program 7 (id=1873): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) syz_open_dev$usbmon(0x0, 0x0, 0x0) close(0xffffffffffffffff) inotify_init1(0x800) rseq(0x0, 0x0, 0x0, 0x0) pipe(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) kernel console output (not intermixed with test programs): g): (slave bond_slave_0): Releasing backup interface [ 349.162969][ T6663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.173815][ T6663] bond0 (unregistering): Released all slaves [ 349.188405][T10257] netlink: 'syz.4.1296': attribute type 29 has an invalid length. [ 349.206237][T10260] netlink: 'syz.4.1296': attribute type 29 has an invalid length. [ 349.216307][T10263] netlink: 'syz.4.1296': attribute type 29 has an invalid length. [ 349.254655][T10265] netlink: 'syz.4.1296': attribute type 29 has an invalid length. [ 349.352532][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1300'. [ 349.362909][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1300'. [ 349.515756][T10273] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1302'. [ 349.546344][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1302'. [ 349.684831][T10275] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1303'. [ 349.820041][T10279] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1305'. [ 349.979635][T10290] netlink: 'syz.4.1309': attribute type 4 has an invalid length. [ 350.197610][ T5941] usb 4-1: USB disconnect, device number 31 [ 350.409513][T10307] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1317'. [ 350.697940][ T51] Bluetooth: hci0: command tx timeout [ 351.485487][ T6663] hsr_slave_0: left promiscuous mode [ 351.510956][ T6663] hsr_slave_1: left promiscuous mode [ 351.524161][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.532309][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.547154][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.563082][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.588248][T10328] netlink: 'syz.3.1324': attribute type 4 has an invalid length. [ 351.594202][ T6663] veth1_macvtap: left promiscuous mode [ 351.601941][ T6663] veth0_macvtap: left promiscuous mode [ 351.607255][ T980] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 351.610885][ T6663] veth1_vlan: left promiscuous mode [ 351.620522][ T6663] veth0_vlan: left promiscuous mode [ 351.757019][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 351.768611][ T49] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 351.769270][ T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.799171][ T980] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 351.810096][ T980] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 351.823106][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.842459][ T980] usb 5-1: config 0 descriptor?? [ 351.937017][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 351.950564][ T49] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.962461][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 351.975565][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 351.994084][ T49] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 352.004918][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.020799][ T49] usb 6-1: config 0 descriptor?? [ 352.027664][T10326] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 352.037782][ T49] hub 6-1:0.0: USB hub found [ 352.205056][ T6663] team0 (unregistering): Port device team_slave_1 removed [ 352.247674][ T49] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 352.264396][ T6663] team0 (unregistering): Port device team_slave_0 removed [ 352.671378][ T49] usbhid 6-1:0.0: can't add hid device: -32 [ 352.682272][ T49] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 352.727427][ T51] Bluetooth: hci0: command tx timeout [ 352.762344][T10243] chnl_net:caif_netlink_parms(): no params data found [ 353.013719][T10243] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.030250][T10343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1329'. [ 353.047462][T10243] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.055444][T10243] bridge_slave_0: entered allmulticast mode [ 353.074994][T10243] bridge_slave_0: entered promiscuous mode [ 353.092822][T10243] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.118533][T10243] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.133887][T10243] bridge_slave_1: entered allmulticast mode [ 353.141929][T10243] bridge_slave_1: entered promiscuous mode [ 353.220987][T10243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.245060][T10243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.304015][T10243] team0: Port device team_slave_0 added [ 353.320537][T10243] team0: Port device team_slave_1 added [ 353.360108][T10352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1333'. [ 353.404102][T10243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.419393][T10243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.445345][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.479503][T10243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.498262][T10243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.505447][T10243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.531425][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.539351][T10243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.652993][T10243] hsr_slave_0: entered promiscuous mode [ 353.660423][T10243] hsr_slave_1: entered promiscuous mode [ 353.671126][T10243] debugfs: 'hsr0' already exists in 'hsr' [ 353.680271][T10243] Cannot create hsr debugfs directory [ 354.754458][ T5941] usb 5-1: USB disconnect, device number 51 [ 354.823786][ T51] Bluetooth: hci0: command tx timeout [ 354.870855][T10375] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1345'. [ 354.932547][ T8724] usb 6-1: USB disconnect, device number 20 [ 355.253879][T10395] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1353'. [ 355.270205][T10243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.308594][T10243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.385141][T10243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.446257][T10243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.465943][T10403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1357'. [ 355.557614][ T5941] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 356.327205][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 356.373908][ T5941] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.445975][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 356.454138][T10243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.488984][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.520675][ T5941] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 356.535583][T10243] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.558637][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.561220][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.573872][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.597697][ T5941] usb 6-1: config 0 descriptor?? [ 356.607818][T10399] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 356.628885][ T5941] hub 6-1:0.0: USB hub found [ 356.650421][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.657658][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.722907][T10243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.740319][T10243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.823457][ T5941] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 356.887229][ T51] Bluetooth: hci0: command tx timeout [ 356.976650][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1370'. [ 357.171240][T10449] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1371'. [ 357.204790][T10243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.224961][ T5941] usbhid 6-1:0.0: can't add hid device: -32 [ 357.231151][ T5941] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 357.343772][T10243] veth0_vlan: entered promiscuous mode [ 357.409571][T10243] veth1_vlan: entered promiscuous mode [ 357.484129][T10243] veth0_macvtap: entered promiscuous mode [ 357.495387][T10243] veth1_macvtap: entered promiscuous mode [ 357.525115][T10243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.542542][T10243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.596381][ T6663] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.615497][ T6663] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.629711][ T6663] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.648519][ T6663] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.707153][ T8731] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 357.804183][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.821376][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1381'. [ 357.840316][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.890622][ T9384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.899586][ T9384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.910045][ T8731] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.940274][ T8731] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 357.967214][ T8731] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 357.989820][ T8731] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 358.003008][ T8731] usb 1-1: Manufacturer: syz [ 358.028824][ T8731] usb 1-1: config 0 descriptor?? [ 358.203506][T10476] netlink: 'syz.4.1385': attribute type 10 has an invalid length. [ 358.213347][T10476] bond0: (slave bond_slave_0): Releasing backup interface [ 358.248658][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.267768][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.409684][T10485] netlink: 788 bytes leftover after parsing attributes in process `syz.5.1389'. [ 358.428458][ T8731] usb 6-1: USB disconnect, device number 21 [ 358.503768][ T8731] usb 1-1: USB disconnect, device number 32 [ 358.534139][T10485] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1389'. [ 358.712897][T10497] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1394'. [ 358.727061][ T980] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 358.887130][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 358.907482][ T980] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 358.932972][ T980] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 358.949436][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.967336][ T980] usb 4-1: Product: syz [ 358.971546][ T980] usb 4-1: Manufacturer: syz [ 358.976158][ T980] usb 4-1: SerialNumber: syz [ 358.989885][ T980] usb 4-1: config 0 descriptor?? [ 359.770908][T10516] netlink: 'syz.4.1402': attribute type 1 has an invalid length. [ 359.779816][T10516] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1402'. [ 359.859041][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.896781][ T980] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 359.938800][T10518] __nla_validate_parse: 1 callbacks suppressed [ 359.938819][T10518] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1403'. [ 359.957081][ T8731] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 360.056897][ T980] usb 6-1: Using ep0 maxpacket: 32 [ 360.063860][ T980] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.076147][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 360.088022][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 360.106840][ T980] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 360.115948][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.141742][ T980] usb 6-1: config 0 descriptor?? [ 360.147809][T10510] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 360.157024][ T8731] usb 1-1: Using ep0 maxpacket: 32 [ 360.157698][ T980] hub 6-1:0.0: USB hub found [ 360.174964][ T8731] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 360.193672][ T8731] usb 1-1: config 0 has no interface number 0 [ 360.215642][ T8731] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 360.236645][ T8731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.244896][ T8731] usb 1-1: Product: syz [ 360.256732][ T8731] usb 1-1: Manufacturer: syz [ 360.261526][ T8731] usb 1-1: SerialNumber: syz [ 360.292911][ T8731] usb 1-1: config 0 descriptor?? [ 360.294365][T10526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1405'. [ 360.317055][ T8731] smsc95xx v2.0.0 [ 360.320763][ T8731] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 360.333532][ T8731] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 360.350774][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.365909][ T980] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 360.472361][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.644514][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.657272][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.665656][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.674853][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.683207][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.751566][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.781957][ T980] usbhid 6-1:0.0: can't add hid device: -32 [ 360.790793][ T980] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 361.572018][ T5941] usb 4-1: USB disconnect, device number 32 [ 361.906924][ T61] bridge_slave_1: left allmulticast mode [ 361.914910][ T61] bridge_slave_1: left promiscuous mode [ 361.931897][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.957761][ T61] bridge_slave_0: left allmulticast mode [ 361.971358][ T61] bridge_slave_0: left promiscuous mode [ 361.987240][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.461889][T10566] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1418'. [ 362.501825][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.513114][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.524126][ T61] bond0 (unregistering): Released all slaves [ 362.736927][ T5846] Bluetooth: hci0: command tx timeout [ 362.783533][ T8724] usb 1-1: USB disconnect, device number 33 [ 362.820977][ T8731] usb 6-1: USB disconnect, device number 22 [ 363.186809][ T980] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 363.878971][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 363.899096][ T980] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 363.919016][ T980] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 363.936990][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.945244][ T980] usb 4-1: Product: syz [ 363.949666][ T980] usb 4-1: Manufacturer: syz [ 363.954542][ T980] usb 4-1: SerialNumber: syz [ 363.962086][ T980] usb 4-1: config 0 descriptor?? [ 364.256602][T10532] chnl_net:caif_netlink_parms(): no params data found [ 364.359519][ T61] hsr_slave_0: left promiscuous mode [ 364.366381][ T61] hsr_slave_1: left promiscuous mode [ 364.382062][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.394052][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.426865][ T8724] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 364.463936][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.540120][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.808407][ T5846] Bluetooth: hci0: command tx timeout [ 364.870682][ T61] veth1_macvtap: left promiscuous mode [ 364.903628][ T61] veth0_macvtap: left promiscuous mode [ 364.949768][ T61] veth1_vlan: left promiscuous mode [ 364.986146][ T61] veth0_vlan: left promiscuous mode [ 365.402083][ T8724] usb 5-1: Using ep0 maxpacket: 32 [ 365.409820][ T8724] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.421722][ T8724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 365.433328][ T8724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 365.444800][ T8724] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 365.458109][ T8724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.474757][ T8724] usb 5-1: config 0 descriptor?? [ 365.481121][T10597] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 365.491100][ T8724] hub 5-1:0.0: USB hub found [ 365.707972][ T980] usb 4-1: USB disconnect, device number 33 [ 365.708453][ T8724] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 366.006208][ T61] team0 (unregistering): Port device team_slave_1 removed [ 366.064956][T10625] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1440'. [ 366.075801][ T61] team0 (unregistering): Port device team_slave_0 removed [ 366.149239][ T8724] usbhid 5-1:0.0: can't add hid device: -32 [ 366.157240][ T8724] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 366.794995][T10532] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.811967][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.837216][T10532] bridge_slave_0: entered allmulticast mode [ 366.844277][T10637] loop3: detected capacity change from 0 to 512 [ 366.864010][T10532] bridge_slave_0: entered promiscuous mode [ 366.872635][T10639] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 366.876595][T10532] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.891707][ T5846] Bluetooth: hci0: command tx timeout [ 366.910304][T10639] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1444'. [ 366.939735][T10637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 366.941485][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1446'. [ 366.953242][T10532] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.957120][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1446'. [ 366.976238][T10637] System zones: 1-12 [ 367.006976][T10532] bridge_slave_1: entered allmulticast mode [ 367.015433][T10532] bridge_slave_1: entered promiscuous mode [ 367.015765][T10637] EXT4-fs error (device loop3): ext4_iget_extra_inode:5034: inode #15: comm syz.3.1443: corrupted in-inode xattr: invalid ea_ino [ 367.058455][T10637] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1443: couldn't read orphan inode 15 (err -117) [ 367.104469][T10637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.135363][T10532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.165178][T10532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.176119][T10637] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1443: invalid indirect mapped block 234881024 (level 0) [ 367.310734][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.323786][ T8724] usb 5-1: USB disconnect, device number 52 [ 367.418830][T10532] team0: Port device team_slave_0 added [ 367.432526][T10532] team0: Port device team_slave_1 added [ 367.507030][ T8731] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 367.569254][T10532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.577418][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.603427][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.672733][T10532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.793523][ T8731] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.972089][ T8731] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.263540][ T8731] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 368.288695][ T8731] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 368.300335][ T8731] usb 6-1: Manufacturer: syz [ 368.308627][ T8731] usb 6-1: config 0 descriptor?? [ 368.337677][T10532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.349806][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.375732][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.395746][T10532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.504589][T10532] hsr_slave_0: entered promiscuous mode [ 368.520696][T10532] hsr_slave_1: entered promiscuous mode [ 368.528295][T10532] debugfs: 'hsr0' already exists in 'hsr' [ 368.534157][T10532] Cannot create hsr debugfs directory [ 368.557461][T10649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.577296][T10649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.641565][T10673] netlink: 'syz.4.1457': attribute type 1 has an invalid length. [ 368.652778][T10673] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1457'. [ 368.768174][ T5889] usb 6-1: USB disconnect, device number 23 [ 368.967838][ T5846] Bluetooth: hci0: command tx timeout [ 369.038153][ T980] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 369.206971][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 369.217940][ T980] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.255668][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 369.311330][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 369.337143][ T980] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 369.359933][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.387440][ T980] usb 1-1: config 0 descriptor?? [ 369.407068][T10680] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 369.419289][T10532] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.431644][ T980] hub 1-1:0.0: USB hub found [ 369.453730][T10532] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.497765][T10532] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.525234][T10532] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.551843][T10707] netlink: 'syz.5.1471': attribute type 1 has an invalid length. [ 369.572282][T10707] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1471'. [ 369.653148][ T980] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 369.735188][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 369.794316][T10532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.822182][T10532] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.856475][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.863663][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.903248][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.910490][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.189008][ T980] usbhid 1-1:0.0: can't add hid device: -32 [ 370.195341][ T980] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 370.217298][ T5941] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 370.957044][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 370.978679][ T5941] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.998142][ T5941] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.008299][ T5941] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.032519][ T5941] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 371.057267][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 371.066185][T10532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.076190][ T5941] usb 6-1: Product: syz [ 371.082227][ T5941] usb 6-1: Manufacturer: syz [ 371.094117][ T5941] usb 6-1: SerialNumber: syz [ 371.119068][ T5941] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input13 [ 371.189898][T10532] veth0_vlan: entered promiscuous mode [ 371.224527][T10532] veth1_vlan: entered promiscuous mode [ 371.304033][T10532] veth0_macvtap: entered promiscuous mode [ 371.331400][T10532] veth1_macvtap: entered promiscuous mode [ 371.353502][ T5941] usb 6-1: USB disconnect, device number 24 [ 371.379209][ T5941] appletouch 6-1:1.0: input: appletouch disconnected [ 371.405525][T10532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.445570][T10532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.445699][T10751] netlink: 'syz.3.1485': attribute type 1 has an invalid length. [ 371.462294][T10751] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1485'. [ 371.473919][ T1105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.494660][ T1105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.512695][ T1105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.550995][ T1105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.673026][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.693643][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.734734][ T6663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.753027][ T6663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.814344][T10760] ALSA: seq fatal error: cannot create timer (-22) [ 372.088306][ T10] usb 1-1: USB disconnect, device number 34 [ 372.643080][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 372.853251][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.896572][T10772] xt_CT: No such helper "syz0" [ 372.947912][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.005916][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 373.057301][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 373.065357][ T10] usb 1-1: SerialNumber: syz [ 373.317663][ T10] usb 1-1: 0:2 : does not exist [ 373.343685][ T10] usb 1-1: USB disconnect, device number 35 [ 374.586775][ T980] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 374.746802][ T980] usb 6-1: Using ep0 maxpacket: 16 [ 374.888763][ T980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.906966][ T980] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.966151][ T980] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 375.065471][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.288659][ T980] usb 6-1: Product: syz [ 375.373198][ T980] usb 6-1: Manufacturer: syz [ 375.496987][ T980] usb 6-1: SerialNumber: syz [ 375.543994][ T980] usb 6-1: config 0 descriptor?? [ 375.615344][ T8731] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 375.645271][ T6663] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.856760][ T8731] usb 4-1: Using ep0 maxpacket: 32 [ 375.878264][ T8731] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.433270][ T6663] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.450432][ T8731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 376.467665][ T8731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 376.481571][ T8731] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 376.491173][ T8731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.508356][ T8731] usb 4-1: config 0 descriptor?? [ 376.522892][T10809] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 376.571755][ T6663] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.631790][ T8731] hub 4-1:0.0: USB hub found [ 376.741807][ T6663] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.835405][ T8731] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 376.934257][ T8724] usb 6-1: USB disconnect, device number 25 [ 377.018302][T10833] xt_CT: No such helper "syz0" [ 377.101420][ T6663] bridge_slave_1: left allmulticast mode [ 377.117545][ T6663] bridge_slave_1: left promiscuous mode [ 377.136971][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.161331][ T6663] bridge_slave_0: left allmulticast mode [ 377.186978][ T6663] bridge_slave_0: left promiscuous mode [ 377.196994][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.239377][ T8731] usbhid 4-1:0.0: can't add hid device: -32 [ 377.262376][ T8731] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 377.314937][T10844] loop5: detected capacity change from 0 to 2048 [ 377.392727][T10844] loop5: p1 p3 [ 377.398150][T10844] loop5: p1 size 67110656 extends beyond EOD, truncated [ 377.446947][T10844] loop5: p3 size 100663296 extends beyond EOD, truncated [ 377.470620][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.489533][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.497817][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.511301][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.519822][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.944139][ T6663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.956324][ T6663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.967188][ T6663] bond0 (unregistering): Released all slaves [ 378.060737][ T8727] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 378.227581][ T8727] usb 1-1: Using ep0 maxpacket: 16 [ 378.251691][ T8727] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 378.265864][ T8727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 378.294482][ T8727] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 378.334865][ T8727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.366746][ T8727] usb 1-1: Product: syz [ 378.371002][ T8727] usb 1-1: Manufacturer: syz [ 378.400936][ T8727] usb 1-1: SerialNumber: syz [ 378.430197][ T8727] usb 1-1: config 0 descriptor?? [ 378.453940][T10874] xt_CT: No such helper "syz0" [ 378.455164][ T8727] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 378.477233][ T980] usb 4-1: USB disconnect, device number 34 [ 378.493965][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.652577][T10883] netlink: 'syz.4.1527': attribute type 10 has an invalid length. [ 378.898333][T10892] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 378.927128][T10892] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1529'. [ 378.938332][T10893] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1530'. [ 379.121299][ T6663] hsr_slave_0: left promiscuous mode [ 379.138880][ T6663] hsr_slave_1: left promiscuous mode [ 379.145208][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.167566][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.186444][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.206278][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.255238][ T6663] veth1_macvtap: left promiscuous mode [ 379.281854][ T6663] veth0_macvtap: left promiscuous mode [ 379.290514][ T6663] veth1_vlan: left promiscuous mode [ 379.296040][ T6663] veth0_vlan: left promiscuous mode [ 379.336823][ T980] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 379.440737][T10904] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1533'. [ 379.491391][ T980] usb 6-1: Using ep0 maxpacket: 16 [ 379.499859][ T980] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 379.530338][ T980] usb 6-1: config 4 has no interface number 0 [ 379.536509][ T980] usb 6-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 379.546569][ T980] usb 6-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 379.557297][ T980] usb 6-1: config 4 interface 51 has no altsetting 0 [ 379.566367][ T980] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 379.575730][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.585860][ T980] usb 6-1: Product: syz [ 379.593801][ T980] usb 6-1: Manufacturer: syz [ 379.598714][ T980] usb 6-1: SerialNumber: syz [ 379.612376][ T51] Bluetooth: hci0: command tx timeout [ 379.624760][T10895] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 379.632676][T10895] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 379.858569][T10889] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 379.866043][T10889] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 379.986641][ T6663] team0 (unregistering): Port device team_slave_1 removed [ 380.031627][ T6663] team0 (unregistering): Port device team_slave_0 removed [ 380.541358][ T980] cdc_eem 6-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.5-1, CDC EEM Device, fe:2b:4f:3b:9c:5d [ 380.562770][ T980] usb 6-1: USB disconnect, device number 26 [ 380.571713][ T980] cdc_eem 6-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.5-1, CDC EEM Device [ 380.693535][T10849] chnl_net:caif_netlink_parms(): no params data found [ 380.856282][ T5941] usb 1-1: USB disconnect, device number 36 [ 380.976561][T10849] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.988534][T10849] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.995883][T10849] bridge_slave_0: entered allmulticast mode [ 381.008939][T10849] bridge_slave_0: entered promiscuous mode [ 381.026996][T10849] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.035046][T10849] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.043537][T10849] bridge_slave_1: entered allmulticast mode [ 381.050231][ T8727] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 381.060766][T10849] bridge_slave_1: entered promiscuous mode [ 381.134553][T10849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.155590][T10929] netlink: 'syz.4.1541': attribute type 10 has an invalid length. [ 381.199713][T10849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.211868][T10926] xt_CT: No such helper "syz0" [ 381.234034][ T8727] usb 4-1: config 0 has an invalid interface number: 227 but max is 0 [ 381.255720][ T8727] usb 4-1: config 0 has no interface number 0 [ 381.264539][ T8727] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=ab.24 [ 381.274197][ T8727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.299286][ T8727] usb 4-1: config 0 descriptor?? [ 381.330180][T10933] netlink: 'syz.4.1542': attribute type 10 has an invalid length. [ 381.355374][T10933] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1542'. [ 381.369687][T10849] team0: Port device team_slave_0 added [ 381.395009][T10849] team0: Port device team_slave_1 added [ 381.481780][T10849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.496760][T10849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.540735][ T8727] snd-usb-audio 4-1:0.227: probe with driver snd-usb-audio failed with error -71 [ 381.555083][T10849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.566285][ T8727] usb 4-1: USB disconnect, device number 35 [ 381.585355][T10849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.596164][T10849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.624144][T10849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.688532][ T51] Bluetooth: hci0: command tx timeout [ 381.723605][T10849] hsr_slave_0: entered promiscuous mode [ 381.737871][T10849] hsr_slave_1: entered promiscuous mode [ 381.744655][T10849] debugfs: 'hsr0' already exists in 'hsr' [ 381.764947][T10849] Cannot create hsr debugfs directory [ 381.826898][ T8731] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 382.037919][ T8731] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.058617][ T8731] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 382.089850][ T8731] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 382.099055][ T8731] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 382.134373][ T8731] usb 1-1: Manufacturer: syz [ 382.168865][ T8731] usb 1-1: config 0 descriptor?? [ 382.395299][T10939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.412058][T10939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.643358][ T980] usb 1-1: USB disconnect, device number 37 [ 382.675529][T10849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 382.704346][T10849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 382.726173][T10849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.754974][T10849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 382.841472][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1560'. [ 382.912790][T10849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.943046][T10849] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.956281][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.963581][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.984721][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.991957][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.037661][ T8731] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 383.147119][ T980] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 383.208485][ T8731] usb 6-1: no configurations [ 383.213154][ T8731] usb 6-1: can't read configurations, error -22 [ 383.315885][T10849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.328174][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 383.339179][ T980] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 383.356829][ T980] usb 5-1: config 4 has no interface number 0 [ 383.363118][ T980] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 383.377588][ T8731] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 383.386752][ T980] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 383.404259][T10849] veth0_vlan: entered promiscuous mode [ 383.409975][ T980] usb 5-1: config 4 interface 51 has no altsetting 0 [ 383.422415][ T980] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 383.444676][T10849] veth1_vlan: entered promiscuous mode [ 383.452100][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.468689][ T980] usb 5-1: Product: syz [ 383.479749][ T980] usb 5-1: Manufacturer: syz [ 383.490868][ T980] usb 5-1: SerialNumber: syz [ 383.505970][T10983] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.514077][ T10] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 383.517171][T10983] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.539345][T10849] veth0_macvtap: entered promiscuous mode [ 383.551027][T10849] veth1_macvtap: entered promiscuous mode [ 383.569318][ T8731] usb 6-1: no configurations [ 383.584878][T10849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.584907][ T8731] usb 6-1: can't read configurations, error -22 [ 383.614442][ T8731] usb usb6-port1: attempt power cycle [ 383.622641][T10849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.650342][ T9394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.677689][ T9394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.690214][ T9394] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.701353][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.712002][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 383.727802][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.748340][ T9394] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.765115][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 383.768166][T10973] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.774516][ T51] Bluetooth: hci0: command tx timeout [ 383.786956][ T10] usb 4-1: SerialNumber: syz [ 383.816602][T10973] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.877062][ T980] cdc_eem 5-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.4-1, CDC EEM Device, c2:7b:9b:b8:0a:6a [ 383.893809][ T6663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.911610][ T6663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.958547][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.967009][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.967033][ T8731] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 384.009593][ T8731] usb 6-1: no configurations [ 384.018655][ T8731] usb 6-1: can't read configurations, error -22 [ 384.024893][ T10] cdc_acm 4-1:1.0: skipping garbage [ 384.057488][ T10] usb 4-1: USB disconnect, device number 36 [ 384.064469][ T8727] usb 5-1: USB disconnect, device number 53 [ 384.078884][ T8727] cdc_eem 5-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.4-1, CDC EEM Device [ 384.169034][ T8731] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 384.220581][ T8731] usb 6-1: no configurations [ 384.225235][ T8731] usb 6-1: can't read configurations, error -22 [ 384.243718][ T8731] usb usb6-port1: unable to enumerate USB device [ 385.476896][ T8707] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 386.092527][ T8707] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.136798][ T8707] usb 1-1: config 0 interface 0 has no altsetting 0 [ 386.258585][ T8707] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 386.282763][ T8707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.291880][T11029] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1579'. [ 386.319846][ T8707] usb 1-1: Product: syz [ 386.332617][ T8707] usb 1-1: Manufacturer: syz [ 386.376857][ T8707] usb 1-1: SerialNumber: syz [ 386.391522][ T8707] usb 1-1: config 0 descriptor?? [ 386.411458][ T8707] option 1-1:0.0: GSM modem (1-port) converter detected [ 386.612700][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.657005][ T8707] usb 1-1: USB disconnect, device number 38 [ 386.679996][ T8707] option 1-1:0.0: device disconnected [ 388.091488][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.199549][T11051] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1587'. [ 388.454404][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.502836][ T8731] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 388.658299][T11064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1591'. [ 388.680179][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.702028][ T8731] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 388.735266][ T8731] usb 5-1: can't read configurations, error -61 [ 388.898058][ T8731] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 389.074905][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.078939][ T8724] kernel read not supported for file /850/fdinfo (pid: 8724 comm: kworker/1:11) [ 389.093970][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.105174][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.107139][ T8727] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 389.126452][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.136311][ T8731] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 389.145879][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.155902][ T8731] usb 5-1: can't read configurations, error -61 [ 389.198555][ T8731] usb usb5-port1: attempt power cycle [ 389.236427][ T36] bridge_slave_1: left allmulticast mode [ 389.245780][ T36] bridge_slave_1: left promiscuous mode [ 389.255776][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.266423][ T36] bridge_slave_0: left allmulticast mode [ 389.275618][ T36] bridge_slave_0: left promiscuous mode [ 389.282098][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.326927][ T8727] usb 1-1: Using ep0 maxpacket: 16 [ 389.338894][ T8727] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 389.356792][ T8727] usb 1-1: config 4 has no interface number 0 [ 389.363287][ T8727] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 389.383987][ T8727] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 389.394783][ T8727] usb 1-1: config 4 interface 51 has no altsetting 0 [ 389.408527][ T8727] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 389.424280][ T8727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.433192][ T8727] usb 1-1: Product: syz [ 389.434022][T11079] netlink: 26 bytes leftover after parsing attributes in process `syz.5.1597'. [ 389.442453][ T8727] usb 1-1: Manufacturer: syz [ 389.451532][ T8727] usb 1-1: SerialNumber: syz [ 389.464683][T11064] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 389.472579][T11064] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 389.566927][ T8731] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 389.605928][ T8731] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 389.620409][ T8731] usb 5-1: can't read configurations, error -61 [ 389.693638][T11060] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 389.702579][T11060] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 389.762402][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.766987][ T8731] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 389.783658][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.793795][ T36] bond0 (unregistering): Released all slaves [ 389.815088][ T8731] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 389.828509][ T8731] usb 5-1: can't read configurations, error -61 [ 389.835386][ T8731] usb usb5-port1: unable to enumerate USB device [ 389.880582][ T8727] cdc_eem 1-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, ee:21:91:1a:7e:2d [ 389.957643][ T5916] usb 1-1: USB disconnect, device number 39 [ 390.185850][ T5916] cdc_eem 1-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device [ 390.353543][T11088] loop5: detected capacity change from 0 to 512 [ 390.365514][T11088] EXT4-fs: Ignoring removed nomblk_io_submit option [ 390.533620][T11088] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #2: block 3: comm syz.5.1598: lblock 0 mapped to illegal pblock 3 (length 1) [ 390.557972][T11088] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1598: error -117 reading directory block [ 390.571231][T11088] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 390.591200][T11088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.884624][ T6051] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.206957][ T5846] Bluetooth: hci0: command tx timeout [ 391.475316][ T36] hsr_slave_0: left promiscuous mode [ 391.516966][ T36] hsr_slave_1: left promiscuous mode [ 391.525885][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.542832][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.602592][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.639197][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.879677][ T36] veth1_macvtap: left promiscuous mode [ 391.885275][ T36] veth0_macvtap: left promiscuous mode [ 391.891284][ T8707] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 391.914605][ T36] veth1_vlan: left promiscuous mode [ 391.924957][ T36] veth0_vlan: left promiscuous mode [ 392.588890][ T36] team0 (unregistering): Port device team_slave_1 removed [ 392.639147][ T36] team0 (unregistering): Port device team_slave_0 removed [ 393.264976][T11068] chnl_net:caif_netlink_parms(): no params data found [ 393.287038][ T5846] Bluetooth: hci0: command tx timeout [ 393.758563][T11068] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.765897][T11068] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.776907][T11068] bridge_slave_0: entered allmulticast mode [ 393.784867][T11068] bridge_slave_0: entered promiscuous mode [ 393.810607][T11068] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.834167][T11068] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.882138][T11068] bridge_slave_1: entered allmulticast mode [ 393.916439][T11068] bridge_slave_1: entered promiscuous mode [ 394.200354][T11068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.244584][T11136] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1619'. [ 394.279436][T11068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.460050][T11068] team0: Port device team_slave_0 added [ 394.591612][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.610045][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.618487][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.626564][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.635061][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.690719][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.735499][T11068] team0: Port device team_slave_1 added [ 394.752618][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 394.763615][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 394.771878][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 394.789940][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 394.799571][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.854098][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 394.864248][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 394.873361][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.885336][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 394.902723][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 394.913853][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 394.937840][ T5916] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 394.949771][T11068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.957293][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.987665][T11068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.029434][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.045870][T11068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.053695][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.079785][T11068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.117088][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 395.145518][ T5916] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 395.154065][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.158672][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.164917][ T5916] usb 5-1: config 0 has no interface number 0 [ 395.181015][ T5916] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 395.191269][ T5916] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.204582][ T5916] usb 5-1: config 0 interface 41 has no altsetting 0 [ 395.213817][ T5916] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 395.223279][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.231812][ T5916] usb 5-1: Product: syz [ 395.236097][ T5916] usb 5-1: Manufacturer: syz [ 395.243727][T11068] hsr_slave_0: entered promiscuous mode [ 395.252423][ T5916] usb 5-1: SerialNumber: syz [ 395.252834][T11068] hsr_slave_1: entered promiscuous mode [ 395.260600][ T5916] usb 5-1: config 0 descriptor?? [ 395.268430][T11068] debugfs: 'hsr0' already exists in 'hsr' [ 395.275518][T11068] Cannot create hsr debugfs directory [ 395.281571][T11142] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 395.299240][ T5916] dm9601 5-1:0.41: probe with driver dm9601 failed with error -22 [ 395.327596][ T5916] sr9700 5-1:0.41: probe with driver sr9700 failed with error -22 [ 395.367417][ T51] Bluetooth: hci0: command tx timeout [ 395.537812][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.637076][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.771173][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.873986][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.323981][ T36] bridge_slave_1: left allmulticast mode [ 396.329885][ T36] bridge_slave_1: left promiscuous mode [ 396.335587][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.344991][ T36] bridge_slave_0: left allmulticast mode [ 396.351118][ T36] bridge_slave_0: left promiscuous mode [ 396.359482][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.371309][ T36] bridge_slave_1: left allmulticast mode [ 396.378155][ T36] bridge_slave_1: left promiscuous mode [ 396.383913][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.393273][ T36] bridge_slave_0: left allmulticast mode [ 396.399114][ T36] bridge_slave_0: left promiscuous mode [ 396.404864][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.727712][ T51] Bluetooth: hci1: command tx timeout [ 396.798054][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.811037][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.821158][ T36] bond0 (unregistering): Released all slaves [ 396.902254][ T51] Bluetooth: hci3: command tx timeout [ 396.967078][ T51] Bluetooth: hci4: command tx timeout [ 397.031460][ T36] team0: Port device geneve1 removed [ 397.190887][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.202896][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.213290][ T36] bond0 (unregistering): Released all slaves [ 397.293438][ T8731] infiniband syz2: ib_query_port failed (-19) [ 397.311766][T11139] chnl_net:caif_netlink_parms(): no params data found [ 397.448891][ T51] Bluetooth: hci0: command tx timeout [ 397.474850][T11068] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 397.490324][T11068] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 397.517683][ T36] tipc: Left network mode [ 397.562662][T11068] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 397.588352][ T36] tipc: Left network mode [ 397.619103][T11145] chnl_net:caif_netlink_parms(): no params data found [ 397.640293][T11068] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 397.677924][ T8707] usb 5-1: USB disconnect, device number 58 [ 398.388664][T11139] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.395875][T11139] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.403406][T11139] bridge_slave_0: entered allmulticast mode [ 398.413133][T11139] bridge_slave_0: entered promiscuous mode [ 398.553038][T11139] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.561341][T11139] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.570147][T11139] bridge_slave_1: entered allmulticast mode [ 398.577819][T11139] bridge_slave_1: entered promiscuous mode [ 398.627312][ T8731] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 398.641039][T11139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.658997][T11139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.777989][T11143] chnl_net:caif_netlink_parms(): no params data found [ 398.790722][ T8731] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.807078][ T8731] usb 5-1: config 0 interface 0 has no altsetting 0 [ 398.807145][ T51] Bluetooth: hci1: command tx timeout [ 398.817480][ T8731] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 398.846743][ T8731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.854778][ T8731] usb 5-1: Product: syz [ 398.876976][ T8731] usb 5-1: Manufacturer: syz [ 398.882647][ T8731] usb 5-1: SerialNumber: syz [ 398.951701][ T8731] usb 5-1: config 0 descriptor?? [ 398.958564][T11139] team0: Port device team_slave_0 added [ 398.968014][ T51] Bluetooth: hci3: command tx timeout [ 398.973724][ T8731] option 5-1:0.0: GSM modem (1-port) converter detected [ 398.974238][T11139] team0: Port device team_slave_1 added [ 399.047518][ T51] Bluetooth: hci4: command tx timeout [ 399.107041][T11145] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.114375][T11145] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.122236][T11145] bridge_slave_0: entered allmulticast mode [ 399.143408][T11145] bridge_slave_0: entered promiscuous mode [ 399.183429][T11139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.190609][T11139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.217057][T11139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.231915][T11145] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.245442][T11145] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.252776][T11145] bridge_slave_1: entered allmulticast mode [ 399.261018][T11145] bridge_slave_1: entered promiscuous mode [ 399.286960][T11139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.294020][T11139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.320379][T11139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.412861][T11145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.428035][T11145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.555358][T11143] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.565720][T11143] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.574752][T11143] bridge_slave_0: entered allmulticast mode [ 399.584949][T11143] bridge_slave_0: entered promiscuous mode [ 399.624326][ T980] usb 5-1: USB disconnect, device number 59 [ 399.634920][T11145] team0: Port device team_slave_0 added [ 399.639055][ T980] option 5-1:0.0: device disconnected [ 399.667069][T11143] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.676934][T11143] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.684256][T11143] bridge_slave_1: entered allmulticast mode [ 399.692214][T11143] bridge_slave_1: entered promiscuous mode [ 399.720396][T11139] hsr_slave_0: entered promiscuous mode [ 399.727171][T11139] hsr_slave_1: entered promiscuous mode [ 399.733613][T11139] debugfs: 'hsr0' already exists in 'hsr' [ 399.739422][T11139] Cannot create hsr debugfs directory [ 399.750884][T11145] team0: Port device team_slave_1 added [ 399.850702][T11143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.897613][T11145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.904607][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.942951][T11145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.982693][T11145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.991043][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.023400][T11145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.094993][T11143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.516434][T11143] team0: Port device team_slave_0 added [ 400.533814][T11145] hsr_slave_0: entered promiscuous mode [ 400.541373][T11145] hsr_slave_1: entered promiscuous mode [ 400.548669][T11145] debugfs: 'hsr0' already exists in 'hsr' [ 400.554422][T11145] Cannot create hsr debugfs directory [ 400.565885][ T36] hsr_slave_0: left promiscuous mode [ 400.575683][ T36] hsr_slave_1: left promiscuous mode [ 400.581742][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.589398][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.598196][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.605631][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.618211][ T36] hsr_slave_0: left promiscuous mode [ 400.624285][ T36] hsr_slave_1: left promiscuous mode [ 400.630631][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.638140][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.646005][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.653759][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.692087][ T36] veth1_macvtap: left promiscuous mode [ 400.697800][ T36] veth0_macvtap: left promiscuous mode [ 400.703387][ T36] veth1_vlan: left promiscuous mode [ 400.708776][ T36] veth0_vlan: left promiscuous mode [ 400.715355][ T36] veth1_macvtap: left promiscuous mode [ 400.721102][ T36] veth0_macvtap: left promiscuous mode [ 400.728423][ T36] veth1_vlan: left promiscuous mode [ 400.733693][ T36] veth0_vlan: left promiscuous mode [ 400.887329][ T51] Bluetooth: hci1: command tx timeout [ 401.046962][ T51] Bluetooth: hci3: command tx timeout [ 401.131695][ T51] Bluetooth: hci4: command tx timeout [ 401.303131][ T36] team_slave_1 (unregistering): left promiscuous mode [ 401.310825][ T36] team0 (unregistering): Port device team_slave_1 removed [ 401.353456][ T36] team_slave_0 (unregistering): left promiscuous mode [ 401.363264][ T36] team0 (unregistering): Port device team_slave_0 removed [ 402.186807][ T36] team0 (unregistering): Port device team_slave_1 removed [ 402.230293][ T36] team0 (unregistering): Port device team_slave_0 removed [ 402.706299][T11143] team0: Port device team_slave_1 added [ 402.858239][T11143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.865443][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.892251][T11143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.908397][T11143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.915602][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.950759][T11143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.966957][ T51] Bluetooth: hci1: command tx timeout [ 403.114573][T11068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.127146][ T51] Bluetooth: hci3: command tx timeout [ 403.207029][ T51] Bluetooth: hci4: command tx timeout [ 403.271954][T11143] hsr_slave_0: entered promiscuous mode [ 403.278538][T11143] hsr_slave_1: entered promiscuous mode [ 403.622328][T11068] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.669799][T11139] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 403.682388][T11139] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 403.737891][ T6663] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.745033][ T6663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.758717][T11139] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 403.948745][T11139] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 403.962973][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.970175][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.606003][T11145] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 404.624192][T11145] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 404.640888][T11145] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 404.654374][T11145] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 405.569233][T11143] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 405.584545][T11143] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 405.639862][T11143] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 405.672368][T11143] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 405.737478][ T10] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 405.785102][T11145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.898791][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.921869][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.932985][T11145] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.959943][ T10] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 405.969745][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.978833][ T10] usb 5-1: Product: syz [ 405.983034][ T10] usb 5-1: Manufacturer: syz [ 405.988170][ T10] usb 5-1: SerialNumber: syz [ 406.004263][ T10] usb 5-1: config 0 descriptor?? [ 406.017624][ T10] option 5-1:0.0: GSM modem (1-port) converter detected [ 406.027980][ T6663] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.035219][ T6663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.069158][ T6663] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.076435][ T6663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.106477][T11139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.129562][T11068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.219655][T11139] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.228641][ T8707] usb 5-1: USB disconnect, device number 60 [ 406.238580][ T8707] option 5-1:0.0: device disconnected [ 406.255160][T11143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.282000][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.289196][ T9390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.313659][T11068] veth0_vlan: entered promiscuous mode [ 406.334474][T11143] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.344755][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.351975][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.370807][T11068] veth1_vlan: entered promiscuous mode [ 406.464332][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.471622][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.505231][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.512512][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.560784][T11068] veth0_macvtap: entered promiscuous mode [ 406.595579][T11068] veth1_macvtap: entered promiscuous mode [ 406.699664][T11068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.747331][T11068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.872706][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.965618][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.987971][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.027161][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.089426][T11145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.284073][T11139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.402011][T11143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.443060][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.480305][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.564422][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.574350][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.023124][ T6663] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.071287][T11145] veth0_vlan: entered promiscuous mode [ 408.160136][T11145] veth1_vlan: entered promiscuous mode [ 408.167659][ T49] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 408.230807][ T6663] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.305020][T11143] veth0_vlan: entered promiscuous mode [ 408.314342][T11139] veth0_vlan: entered promiscuous mode [ 408.338728][T11143] veth1_vlan: entered promiscuous mode [ 408.347025][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 408.363988][ T49] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 408.369435][T11139] veth1_vlan: entered promiscuous mode [ 408.379886][ T49] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.386197][T11145] veth0_macvtap: entered promiscuous mode [ 408.398132][ T49] usb 5-1: config 0 has no interface number 0 [ 408.404277][ T49] usb 5-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.431721][ T49] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 408.443256][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.454863][ T49] usb 5-1: Product: syz [ 408.459002][ T6663] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.465074][ T49] usb 5-1: Manufacturer: syz [ 408.474272][ T49] usb 5-1: SerialNumber: syz [ 408.490467][T11145] veth1_macvtap: entered promiscuous mode [ 408.501189][ T49] usb 5-1: config 0 descriptor?? [ 408.533062][T11145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.552444][T11145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.589009][ T1105] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.598525][ T1105] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.613310][T11139] veth0_macvtap: entered promiscuous mode [ 408.621512][ T1105] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.648895][ T6663] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.681313][T11143] veth0_macvtap: entered promiscuous mode [ 408.691834][ T1105] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.712917][T11143] veth1_macvtap: entered promiscuous mode [ 408.721337][T11139] veth1_macvtap: entered promiscuous mode [ 408.786369][T11139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.803936][T11143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.844852][T11139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.861497][T11143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.979491][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.990024][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.022517][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.024380][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.054750][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.124288][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.139408][ T48] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.185016][ T48] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.199959][ T48] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.220948][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.235575][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.261078][ T48] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.294493][ T6663] bridge_slave_1: left allmulticast mode [ 409.302168][ T6663] bridge_slave_1: left promiscuous mode [ 409.311906][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.336160][ T6663] bridge_slave_0: left allmulticast mode [ 409.342150][ T6663] bridge_slave_0: left promiscuous mode [ 409.342784][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.352456][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.363718][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.373061][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.382426][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.392709][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.778358][ T6663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.791417][ T6663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.801958][ T6663] bond0 (unregistering): Released all slaves [ 409.956070][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.977084][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.054827][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.054843][ T9390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.054859][ T9390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.070787][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.143780][T11272] tipc: Started in network mode [ 410.154223][T11272] tipc: Node identity ee4185be58bb, cluster identity 4711 [ 410.163474][T11272] tipc: Enabled bearer , priority 10 [ 410.240801][T11271] tipc: Disabling bearer [ 410.277481][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.285362][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.502139][T11279] loop7: detected capacity change from 0 to 512 [ 410.518669][T11279] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 410.547428][T11279] EXT4-fs (loop7): orphan cleanup on readonly fs [ 410.554741][T11279] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.1635: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 410.575217][T11279] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.1635: Bad quota inode: 3, type: 0 [ 410.594386][T11279] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 410.626738][T11279] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 410.655923][T11279] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 410.686773][ T8731] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 410.898285][ T8731] usb 9-1: Using ep0 maxpacket: 16 [ 410.927353][ T8731] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.988725][ T8731] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.072836][ T8731] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 411.093175][ T10] usb 5-1: USB disconnect, device number 61 [ 411.108670][ T8731] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 411.154375][T11145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.165933][ T8731] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.184739][ T8731] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 411.233435][ T8731] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 411.254233][ T8731] usb 9-1: Manufacturer: syz [ 411.285222][ T8731] usb 9-1: config 0 descriptor?? [ 411.419409][ T6663] hsr_slave_0: left promiscuous mode [ 411.433181][ T6663] hsr_slave_1: left promiscuous mode [ 411.455101][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.456292][ T51] Bluetooth: hci0: command tx timeout [ 411.462865][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.479055][ T6663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.537525][ T6663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.737007][ T8707] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 412.760852][ T6663] veth1_macvtap: left promiscuous mode [ 412.775232][ T6663] veth0_macvtap: left promiscuous mode [ 412.787057][ T6663] veth1_vlan: left promiscuous mode [ 412.792447][ T6663] veth0_vlan: left promiscuous mode [ 412.813967][ T8731] rc_core: IR keymap rc-hauppauge not found [ 412.829857][ T8731] Registered IR keymap rc-empty [ 412.835639][ T8731] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 412.856916][ T8731] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 412.857814][T11305] loop6: detected capacity change from 0 to 2048 [ 412.890535][ T8731] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 412.907654][ T8707] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.910835][ T8731] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input14 [ 412.949754][ T8731] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 412.952463][ T8707] usb 8-1: config 0 interface 0 has no altsetting 0 [ 412.968300][T11305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.987856][ T8731] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 413.001833][ T8707] usb 8-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 413.023292][ T8707] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.038584][ T8731] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 413.059981][ T8707] usb 8-1: Product: syz [ 413.069159][ T8731] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 413.075933][ T8707] usb 8-1: Manufacturer: syz [ 413.090309][ T8707] usb 8-1: SerialNumber: syz [ 413.100053][ T8731] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 413.130260][ T8707] usb 8-1: config 0 descriptor?? [ 413.140372][ T8731] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 413.153097][ T8707] option 8-1:0.0: GSM modem (1-port) converter detected [ 413.191457][ T8731] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 413.219003][ T8731] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 413.248842][ T8731] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 413.294196][ T8731] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 413.329535][ T8731] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 413.342538][ T8731] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 413.386184][ T8731] usb 9-1: USB disconnect, device number 2 [ 413.521693][T11311] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1643'. [ 413.531480][ T51] Bluetooth: hci0: command tx timeout [ 413.730217][ T6663] team0 (unregistering): Port device team_slave_1 removed [ 413.823825][ T6663] team0 (unregistering): Port device team_slave_0 removed [ 414.400274][T11317] tipc: Started in network mode [ 414.412651][T11317] tipc: Node identity 422f92ad900c, cluster identity 4711 [ 414.443742][T11317] tipc: Enabled bearer , priority 10 [ 414.682004][T11315] tipc: Disabling bearer [ 415.234289][T11269] chnl_net:caif_netlink_parms(): no params data found [ 415.609101][ T51] Bluetooth: hci0: command tx timeout [ 416.045704][T11361] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1656'. [ 416.068650][T11269] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.078280][T11269] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.085611][T11269] bridge_slave_0: entered allmulticast mode [ 416.109154][T11269] bridge_slave_0: entered promiscuous mode [ 416.134609][T11269] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.159734][T11269] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.175166][T11269] bridge_slave_1: entered allmulticast mode [ 416.196213][T11269] bridge_slave_1: entered promiscuous mode [ 417.722804][ T5846] Bluetooth: hci0: command tx timeout [ 417.827990][T11269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.159354][T11371] tipc: Enabled bearer , priority 10 [ 418.237071][T11269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.332977][T11367] tipc: Disabling bearer [ 418.429949][T11269] team0: Port device team_slave_0 added [ 418.445310][T11269] team0: Port device team_slave_1 added [ 418.541714][T11269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.560931][T11269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.590944][T11269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.643804][ T8731] usb 8-1: USB disconnect, device number 2 [ 418.652049][ T8731] option 8-1:0.0: device disconnected [ 418.684173][T11269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.692306][T11269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.913340][T11269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.707448][ T8728] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 420.013006][ T8728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.071122][ T8728] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 420.116278][ T8728] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 420.137952][T11269] hsr_slave_0: entered promiscuous mode [ 420.143717][ T8728] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 420.153449][T11269] hsr_slave_1: entered promiscuous mode [ 420.162801][ T8728] usb 5-1: Product: syz [ 420.170657][ T8728] usb 5-1: Manufacturer: syz [ 420.179941][ T8728] usb 5-1: SerialNumber: syz [ 420.190759][ T8728] usb 5-1: config 0 descriptor?? [ 420.205727][T11269] debugfs: 'hsr0' already exists in 'hsr' [ 420.219010][T11269] Cannot create hsr debugfs directory [ 420.226230][T11408] loop7: detected capacity change from 0 to 2048 [ 420.245703][T11408] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.294150][T11410] Bluetooth: MGMT ver 1.23 [ 420.482152][T11413] tipc: Enabled bearer , priority 10 [ 420.529791][T11411] tipc: Disabling bearer [ 420.640147][T11420] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1677'. [ 421.576261][ T49] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 421.834443][T11436] loop7: detected capacity change from 0 to 1024 [ 421.936942][ T49] usb 9-1: Using ep0 maxpacket: 8 [ 421.954036][ T49] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.969514][ T49] usb 9-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 421.984993][ T49] usb 9-1: config 0 interface 0 has no altsetting 0 [ 421.992126][ T49] usb 9-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 422.001648][ T49] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.015418][ T49] usb 9-1: config 0 descriptor?? [ 422.027402][ T49] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 422.048564][ T59] hfsplus: b-tree write err: -5, ino 4 [ 422.123373][T11269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.290688][T11269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 422.302236][T11269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 422.312595][T11269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 422.329027][ T5846] Bluetooth: hci0: command tx timeout [ 422.898093][ T5941] usb 5-1: USB disconnect, device number 62 [ 422.976462][T11269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.000731][T11269] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.242475][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.249748][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.264145][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.271405][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.642947][ T49] usb 9-1: USB disconnect, device number 3 [ 424.799608][T11468] netlink: 788 bytes leftover after parsing attributes in process `syz.6.1690'. [ 425.083099][T11476] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1690'. [ 425.612198][T11269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.663440][T11488] netlink: 'syz.8.1695': attribute type 1 has an invalid length. [ 425.687793][T11488] netlink: 208 bytes leftover after parsing attributes in process `syz.8.1695'. [ 425.848136][T11269] veth0_vlan: entered promiscuous mode [ 425.871759][T11269] veth1_vlan: entered promiscuous mode [ 426.064019][T11499] ALSA: seq fatal error: cannot create timer (-22) [ 426.610906][T11269] veth0_macvtap: entered promiscuous mode [ 426.703653][T11269] veth1_macvtap: entered promiscuous mode [ 426.790217][T11269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.836352][T11269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.884208][ T9384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.906278][ T9384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.961084][ T9384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.007884][ T9384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.043216][T11515] tipc: Enabling of bearer rejected, failed to enable media [ 427.220660][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.266717][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.343063][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.344017][T11526] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1708'. [ 427.358310][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.785976][T11534] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1711'. [ 428.400450][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'. [ 429.398951][ T9384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.516756][ T980] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 429.542933][ T9384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.611609][ T9384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.675802][ T9384] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.679421][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.698633][ T980] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 429.707884][ T980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.718588][ T980] usb 7-1: config 0 descriptor?? [ 429.818595][ T9384] bridge_slave_1: left allmulticast mode [ 429.824319][ T9384] bridge_slave_1: left promiscuous mode [ 429.830206][ T9384] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.840890][ T9384] bridge_slave_0: left allmulticast mode [ 429.846575][ T9384] bridge_slave_0: left promiscuous mode [ 429.852749][ T9384] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.185792][ T980] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 430.290736][ T980] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0004/input/input16 [ 431.504315][ T980] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 431.589718][ T9384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.697748][ T9384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.758524][ T9384] bond0 (unregistering): Released all slaves [ 431.998334][T11569] tipc: Enabling of bearer rejected, failed to enable media [ 432.542632][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1726'. [ 432.598191][ T8727] usb 7-1: USB disconnect, device number 2 [ 432.805958][T11586] netlink: 'syz.7.1727': attribute type 1 has an invalid length. [ 432.838075][T11586] netlink: 208 bytes leftover after parsing attributes in process `syz.7.1727'. [ 432.907401][T11591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1728'. [ 432.953400][T11595] loop6: detected capacity change from 0 to 256 [ 432.970033][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 432.981852][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.991039][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.008107][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.022272][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 434.182082][T11599] loop6: detected capacity change from 0 to 512 [ 435.029815][ T8707] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 435.526847][ T8707] usb 5-1: Using ep0 maxpacket: 16 [ 435.544355][ T8707] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 435.552735][ T8707] usb 5-1: config 4 has no interface number 0 [ 435.559320][ T8707] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 435.574945][ T8707] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 435.612329][ T8707] usb 5-1: config 4 interface 51 has no altsetting 0 [ 436.396940][ T8707] usb 5-1: string descriptor 0 read error: -71 [ 436.403335][ T8707] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 436.450228][ T8707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.523826][ T8707] usb 5-1: can't set config #4, error -71 [ 436.709545][ T5846] Bluetooth: hci0: command tx timeout [ 438.038670][ T8707] usb 5-1: USB disconnect, device number 63 [ 438.089608][T11622] netlink: 788 bytes leftover after parsing attributes in process `syz.8.1737'. [ 438.175622][T11625] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1737'. [ 439.537002][ T5846] Bluetooth: hci0: command tx timeout [ 439.934857][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.115245][ T8707] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 440.316843][ T8707] usb 8-1: Using ep0 maxpacket: 16 [ 440.397258][ T8707] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 440.503784][ T8707] usb 8-1: config 0 has no interface number 0 [ 440.560754][ T8707] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 440.653256][ T8707] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 440.685161][ T8707] usb 8-1: config 0 interface 41 has no altsetting 0 [ 440.686809][ T49] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 440.739849][ T8707] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 440.756391][ T8707] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.764942][ T8707] usb 8-1: Product: syz [ 440.786058][ T8707] usb 8-1: Manufacturer: syz [ 440.792925][ T8707] usb 8-1: SerialNumber: syz [ 440.857118][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1743'. [ 440.866223][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1743'. [ 440.867057][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 440.920482][ T8707] usb 8-1: config 0 descriptor?? [ 440.925833][ T49] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 440.930343][T11633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 440.946969][T11633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 440.957634][ T49] usb 5-1: config 0 has no interface number 0 [ 440.963807][ T49] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 441.003594][ T9384] hsr_slave_0: left promiscuous mode [ 441.010443][ T49] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 441.026445][ T49] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 441.041505][ T9384] hsr_slave_1: left promiscuous mode [ 441.050183][ T9384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.064835][ T49] usb 5-1: config 0 interface 41 has no altsetting 0 [ 441.071829][ T9384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.089231][ T49] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 441.094808][ T9384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.120098][ T9384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.129917][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.155305][ T49] usb 5-1: Product: syz [ 441.175052][T11633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 441.176862][ T49] usb 5-1: Manufacturer: syz [ 441.202924][T11633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 441.213610][ T49] usb 5-1: SerialNumber: syz [ 441.222032][ T9384] veth1_macvtap: left promiscuous mode [ 441.237666][ T49] usb 5-1: config 0 descriptor?? [ 441.243455][T11635] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 441.261884][ T9384] veth0_macvtap: left promiscuous mode [ 441.269081][ T9384] veth1_vlan: left promiscuous mode [ 441.271360][ T49] dm9601 5-1:0.41: probe with driver dm9601 failed with error -22 [ 441.274652][ T9384] veth0_vlan: left promiscuous mode [ 441.516757][ T49] sr9700 5-1:0.41: probe with driver sr9700 failed with error -22 [ 441.617222][ T5846] Bluetooth: hci0: command tx timeout [ 441.807849][ T8707] Error reading MAC address [ 441.816998][ T5902] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 442.020789][T11633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 442.112464][T11633] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 442.246980][ T5902] usb 7-1: Using ep0 maxpacket: 32 [ 442.289920][ T5902] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.324115][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 442.342657][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 442.362868][ T5902] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 442.372236][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.388632][ T5902] usb 7-1: config 0 descriptor?? [ 442.394884][T11659] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 443.357108][ T8707] sr9700 8-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 443.367197][ T5902] hub 7-1:0.0: USB hub found [ 443.389742][ T5902] hub 7-1:0.0: 2 ports detected [ 443.397169][ T49] usb 5-1: USB disconnect, device number 64 [ 443.540769][T11675] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1751'. [ 443.556071][T11675] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1751'. [ 443.697503][ T5846] Bluetooth: hci0: command tx timeout [ 443.719487][ T980] usb 8-1: USB disconnect, device number 3 [ 444.388863][ T980] hub 7-1:0.0: hub_ext_port_status failed (err = 0) [ 444.519385][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1757'. [ 444.556399][T11690] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1756'. [ 444.656526][ T9384] team0 (unregistering): Port device team_slave_1 removed [ 444.754787][ T9384] team0 (unregistering): Port device team_slave_0 removed [ 445.164121][ T49] usb 7-1: USB disconnect, device number 3 [ 445.181391][T11695] option changes via remount are deprecated (pid=11693 comm=syz.7.1759) [ 445.755598][ T980] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 445.900267][T11692] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1758'. [ 445.916776][ T980] usb 8-1: Using ep0 maxpacket: 16 [ 445.967182][ T980] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 445.975378][ T980] usb 8-1: config 0 has no interface number 0 [ 446.009844][ T980] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 446.030285][ T980] usb 8-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 446.041688][ T980] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 446.051979][ T980] usb 8-1: config 0 interface 41 has no altsetting 0 [ 446.063312][ T980] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 446.074706][ T980] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.086929][ T980] usb 8-1: Product: syz [ 446.091182][ T980] usb 8-1: Manufacturer: syz [ 446.096053][ T980] usb 8-1: SerialNumber: syz [ 446.119411][ T980] usb 8-1: config 0 descriptor?? [ 446.182689][T11698] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 446.284985][ T980] dm9601 8-1:0.41: probe with driver dm9601 failed with error -22 [ 446.350323][T11711] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1763'. [ 446.388218][ T980] sr9700 8-1:0.41: probe with driver sr9700 failed with error -22 [ 446.483702][T11711] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1763'. [ 447.028610][ T5902] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 447.085800][T11592] chnl_net:caif_netlink_parms(): no params data found [ 447.142516][T11719] kvm: kvm [11718]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x14001 [ 447.159301][T11719] kvm: kvm [11718]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x10001 [ 447.174465][T11719] kvm: kvm [11718]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x10000 [ 447.183570][T11719] kvm: kvm [11718]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x14000 [ 447.196281][T11719] kvm: kvm [11718]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10038 [ 447.202218][ T5902] usb 7-1: Using ep0 maxpacket: 16 [ 447.209272][T11719] kvm: kvm [11718]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x14038 [ 447.244064][ T5902] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 447.270050][ T5902] usb 7-1: config 0 has no interface number 0 [ 447.276408][ T5902] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 447.299513][ T5902] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 447.330630][ T5902] usb 7-1: config 0 interface 41 has no altsetting 0 [ 447.353593][ T5902] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 447.373541][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.385069][ T5902] usb 7-1: Product: syz [ 447.391140][ T5902] usb 7-1: Manufacturer: syz [ 447.395905][ T5902] usb 7-1: SerialNumber: syz [ 447.404274][ T5902] usb 7-1: config 0 descriptor?? [ 447.411896][T11715] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 447.419651][T11715] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 447.431522][T11592] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.447790][T11592] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.455072][T11592] bridge_slave_0: entered allmulticast mode [ 447.474004][T11592] bridge_slave_0: entered promiscuous mode [ 447.485603][T11592] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.492984][T11592] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.500362][T11592] bridge_slave_1: entered allmulticast mode [ 447.508372][T11592] bridge_slave_1: entered promiscuous mode [ 447.552061][T11592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.565192][T11592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.637272][T11715] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 447.649997][T11715] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 447.651504][T11592] team0: Port device team_slave_0 added [ 447.680533][T11592] team0: Port device team_slave_1 added [ 448.259679][T11592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.266781][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.320879][ T5902] Error reading MAC address [ 448.335695][T11715] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 448.353259][T11715] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 448.369787][T11592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.383876][T11592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.394658][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.421178][T11592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.557466][ T8728] usb 8-1: USB disconnect, device number 4 [ 448.641188][T11748] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1773'. [ 448.741998][T11592] hsr_slave_0: entered promiscuous mode [ 448.752492][T11592] hsr_slave_1: entered promiscuous mode [ 448.796035][T11592] debugfs: 'hsr0' already exists in 'hsr' [ 448.901045][T11592] Cannot create hsr debugfs directory [ 448.944918][ T5902] sr9700 7-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 449.535160][T11752] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1775'. [ 449.545444][T11752] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1775'. [ 450.043933][T11766] siw: device registration error -23 [ 452.486169][ T8731] usb 7-1: USB disconnect, device number 4 [ 452.562987][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1781'. [ 452.756785][ T980] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 452.772918][T11592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 452.789258][T11592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 452.805498][T11592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 452.825787][T11592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 452.877061][ T8731] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 452.916886][ T980] usb 9-1: Using ep0 maxpacket: 32 [ 452.926107][ T980] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 452.945720][ T980] usb 9-1: config 0 has no interface number 0 [ 452.956604][ T980] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 452.966320][T11592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.986536][ T980] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 453.003264][ T980] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.009798][T11592] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.027994][ T980] usb 9-1: Product: syz [ 453.032208][ T980] usb 9-1: Manufacturer: syz [ 453.042218][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.046809][ T980] usb 9-1: SerialNumber: syz [ 453.049555][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.062222][ T8731] usb 7-1: Using ep0 maxpacket: 32 [ 453.070285][ T980] usb 9-1: config 0 descriptor?? [ 453.073436][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.082478][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.091495][ T8731] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.103578][ T8731] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.106833][ T980] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 453.113522][ T8731] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.129923][ T980] em28xx 9-1:0.132: Video interface 132 found: [ 453.159041][ T8731] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 453.168445][ T8731] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 453.182834][ T8731] usb 7-1: Product: syz [ 453.188477][ T8731] usb 7-1: Manufacturer: syz [ 453.193666][ T8731] usb 7-1: SerialNumber: syz [ 453.562278][ T8731] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input17 [ 453.730678][ T8731] usb 7-1: USB disconnect, device number 5 [ 453.756143][ T8731] appletouch 7-1:1.0: input: appletouch disconnected [ 453.778179][ T980] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 453.856581][ T980] em28xx 9-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 453.858917][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1785'. [ 453.866382][ T980] em28xx 9-1:0.132: board has no eeprom [ 453.967674][ T980] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 453.982225][ T980] em28xx 9-1:0.132: analog set to bulk mode. [ 454.000144][ T8707] em28xx 9-1:0.132: Registering V4L2 extension [ 454.040224][ T980] usb 9-1: USB disconnect, device number 4 [ 454.068137][ T980] em28xx 9-1:0.132: Disconnecting em28xx [ 454.077140][ T49] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 454.138278][T11592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.156872][T11800] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1787'. [ 454.192205][T11800] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1787'. [ 454.256541][ T8707] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 454.257968][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 454.281874][ T8707] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 454.295128][ T49] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 454.306954][T11592] veth0_vlan: entered promiscuous mode [ 454.312883][ T8707] em28xx 9-1:0.132: No AC97 audio processor [ 454.316827][ T49] usb 5-1: config 0 has no interface number 0 [ 454.347162][ T49] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 454.357248][T11592] veth1_vlan: entered promiscuous mode [ 454.363942][ T8707] usb 9-1: Decoder not found [ 454.376751][ T8707] em28xx 9-1:0.132: failed to create media graph [ 454.383171][ T8707] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 454.384750][ T49] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 454.446400][ T8707] em28xx 9-1:0.132: Remote control support is not available for this card. [ 454.468084][ T49] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 454.471032][T11592] veth0_macvtap: entered promiscuous mode [ 454.494201][ T49] usb 5-1: config 0 interface 41 has no altsetting 0 [ 454.501089][ T980] em28xx 9-1:0.132: Closing input extension [ 454.516471][ T980] em28xx 9-1:0.132: Freeing device [ 454.551266][T11592] veth1_macvtap: entered promiscuous mode [ 454.577770][ T49] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 454.596999][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.615463][ T49] usb 5-1: Product: syz [ 454.622012][T11592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.627346][ T49] usb 5-1: Manufacturer: syz [ 454.669387][ T49] usb 5-1: SerialNumber: syz [ 455.062118][ T49] usb 5-1: config 0 descriptor?? [ 455.074065][T11789] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 455.220719][ T49] dm9601 5-1:0.41: probe with driver dm9601 failed with error -22 [ 455.243257][ T49] sr9700 5-1:0.41: probe with driver sr9700 failed with error -22 [ 455.324138][T11592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.385439][T11817] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1793'. [ 455.643050][ T9394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.740555][ T6606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.839160][ T6606] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.914684][ T6606] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.054771][ T980] usb 5-1: USB disconnect, device number 65 [ 457.905603][T11837] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1799'. [ 458.088366][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1799'. [ 458.247656][ T9384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.262372][ T9384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.325823][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.353550][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.512113][ T8707] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 459.666926][ T8707] usb 8-1: Using ep0 maxpacket: 32 [ 459.690390][ T8707] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 459.706390][ T59] gretap0: left allmulticast mode [ 459.712674][ T8707] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 459.724728][ T59] gretap0: left promiscuous mode [ 459.735235][ T59] bridge0: port 3(gretap0) entered disabled state [ 459.755005][ T8707] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 459.782758][ T59] bridge_slave_1: left allmulticast mode [ 459.910597][ T49] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 459.956767][ T59] bridge_slave_1: left promiscuous mode [ 459.963121][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.061425][ T59] bridge_slave_0: left allmulticast mode [ 460.085966][ T59] bridge_slave_0: left promiscuous mode [ 460.182580][ T49] usb 7-1: Using ep0 maxpacket: 32 [ 460.200440][ T49] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 460.212689][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.302303][ T8707] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 460.321035][ T49] usb 7-1: config 0 has no interface number 0 [ 460.355617][ T8707] usb 8-1: config 0 interface 0 has no altsetting 0 [ 460.409065][ T49] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.624636][ T49] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 460.794685][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.879521][ T8707] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 460.899276][ T49] usb 7-1: Product: syz [ 460.903502][ T49] usb 7-1: Manufacturer: syz [ 460.905644][ T8707] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 460.920101][ T49] usb 7-1: SerialNumber: syz [ 460.921688][ T8707] usb 8-1: Product: syz [ 460.938452][ T49] usb 7-1: config 0 descriptor?? [ 460.946364][ T8707] usb 8-1: Manufacturer: syz [ 460.951161][ T8707] usb 8-1: SerialNumber: syz [ 460.953236][ T49] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 460.966133][ T49] em28xx 7-1:0.132: Video interface 132 found: [ 460.997695][ T8707] usb 8-1: config 0 descriptor?? [ 461.012919][ T8707] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 461.038485][ T8707] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 461.243604][ T8727] usb 8-1: USB disconnect, device number 5 [ 461.260664][ T8727] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 461.355366][ T49] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 461.433955][ T49] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 461.446720][ T49] em28xx 7-1:0.132: board has no eeprom [ 461.459010][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.469401][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.479628][ T59] bond0 (unregistering): Released all slaves [ 461.494168][T11859] veth0_vlan: entered allmulticast mode [ 461.508756][T11860] veth0_vlan: left promiscuous mode [ 461.515368][T11860] veth0_vlan: entered promiscuous mode [ 461.536271][ T49] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 461.544321][ T49] em28xx 7-1:0.132: analog set to bulk mode. [ 461.657170][ T8727] em28xx 7-1:0.132: Registering V4L2 extension [ 461.826872][ T49] usb 7-1: USB disconnect, device number 6 [ 461.855442][ T49] em28xx 7-1:0.132: Disconnecting em28xx [ 463.031090][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1809'. [ 463.210521][ T8727] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 463.227746][ T8727] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 463.235236][ T8727] em28xx 7-1:0.132: No AC97 audio processor [ 463.287548][ T8727] usb 7-1: Decoder not found [ 463.296565][ T8727] em28xx 7-1:0.132: failed to create media graph [ 463.593340][ T8727] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 463.683541][ T8727] em28xx 7-1:0.132: Remote control support is not available for this card. [ 463.697263][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.281870][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 464.293387][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 464.325755][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 464.447250][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 464.506610][ T49] em28xx 7-1:0.132: Closing input extension [ 464.532753][ T49] em28xx 7-1:0.132: Freeing device [ 464.675303][T11898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.851036][ T59] hsr_slave_0: left promiscuous mode [ 464.866736][ T59] hsr_slave_1: left promiscuous mode [ 464.889200][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.898971][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.037482][ T8727] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 465.593052][ T8727] usb 5-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 465.612695][ T8727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.709664][ T8727] ums-cypress 5-1:1.0: USB Mass Storage device detected [ 465.801362][ T9394] smc: removing ib device syz0 [ 466.665817][ T51] Bluetooth: hci0: command tx timeout [ 466.799615][ T8727] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 466.834638][ T980] usb 5-1: USB disconnect, device number 66 [ 466.950304][ T59] team0 (unregistering): Port device team_slave_1 removed [ 466.963611][ T8727] usb 8-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 466.973596][ T8727] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.981731][ T8727] usb 8-1: Product: syz [ 466.985929][ T8727] usb 8-1: Manufacturer: syz [ 466.991343][ T8727] usb 8-1: SerialNumber: syz [ 466.999896][ T8727] usb 8-1: config 0 descriptor?? [ 467.030278][ T51] Bluetooth: hci5: urb ffff88805cac4c00 submission failed (2) [ 467.040254][ T59] team0 (unregistering): Port device team_slave_0 removed [ 467.954799][ T5902] usb 8-1: USB disconnect, device number 6 [ 469.455738][ T51] Bluetooth: hci0: command tx timeout [ 469.649648][ T51] Bluetooth: hci2: unexpected cc 0x0402 length: 4 > 1 [ 469.656528][ T51] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 471.536913][ T51] Bluetooth: hci0: command tx timeout [ 472.995846][T11977] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1838'. [ 473.886514][ T51] Bluetooth: hci0: command tx timeout [ 475.291287][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1845'. [ 475.387252][T12001] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.514988][T12001] bridge_slave_1 (unregistering): left allmulticast mode [ 476.692762][T12001] bridge_slave_1 (unregistering): left promiscuous mode [ 476.701462][T12010] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1848'. [ 476.729648][T12001] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.952910][T11889] chnl_net:caif_netlink_parms(): no params data found [ 477.172318][T12027] netlink: 'syz.6.1850': attribute type 10 has an invalid length. [ 477.180410][T12027] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1850'. [ 478.358679][T12035] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1854'. [ 478.372310][T12027] team0: Port device geneve0 added [ 478.437210][T12034] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1854'. [ 479.211690][T12042] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.1855'. [ 479.676316][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.931783][T11889] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.939350][T12059] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1861'. [ 480.944559][T11889] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.965702][T11889] bridge_slave_0: entered allmulticast mode [ 481.001567][T11889] bridge_slave_0: entered promiscuous mode [ 481.094283][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.143059][T11889] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.169279][T11889] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.175175][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1865'. [ 481.185695][T11889] bridge_slave_1: entered allmulticast mode [ 481.196387][T11889] bridge_slave_1: entered promiscuous mode [ 481.372234][T12073] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1865'. [ 481.731547][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.752772][T12070] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1866'. [ 482.392290][T11889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.945059][T11143] [ 483.947445][T11143] ============================================ [ 483.953674][T11143] WARNING: possible recursive locking detected [ 483.959846][T11143] 6.16.0-rc4-next-20250703-syzkaller #0 Not tainted [ 483.966430][T11143] -------------------------------------------- [ 483.972596][T11143] syz-executor/11143 is trying to acquire lock: [ 483.978833][T11143] ffff8880542bc8c8 (&sb->s_type->i_mutex_key#27){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 483.989119][T11143] [ 483.989119][T11143] but task is already holding lock: [ 483.996478][T11143] ffff8880542b91c8 (&sb->s_type->i_mutex_key#27){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 484.007722][T11143] [ 484.007722][T11143] other info that might help us debug this: [ 484.015786][T11143] Possible unsafe locking scenario: [ 484.015786][T11143] [ 484.023236][T11143] CPU0 [ 484.026521][T11143] ---- [ 484.029808][T11143] lock(&sb->s_type->i_mutex_key#27); [ 484.035281][T11143] lock(&sb->s_type->i_mutex_key#27); [ 484.040748][T11143] [ 484.040748][T11143] *** DEADLOCK *** [ 484.040748][T11143] [ 484.048892][T11143] May be due to missing lock nesting notation [ 484.048892][T11143] [ 484.057211][T11143] 4 locks held by syz-executor/11143: [ 484.062578][T11143] #0: ffff888025a540e0 (&type->s_umount_key#91){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 484.072781][T11143] #1: ffff88804d47c8a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 484.082370][T11143] #2: ffffffff8f6d0e30 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 484.094477][T11143] #3: ffff8880542b91c8 (&sb->s_type->i_mutex_key#27){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 484.106162][T11143] [ 484.106162][T11143] stack backtrace: [ 484.112075][T11143] CPU: 1 UID: 0 PID: 11143 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 484.112096][T11143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 484.112109][T11143] Call Trace: [ 484.112116][T11143] [ 484.112124][T11143] dump_stack_lvl+0x189/0x250 [ 484.112153][T11143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.112176][T11143] ? __pfx__printk+0x10/0x10 [ 484.112194][T11143] ? print_lock_name+0xde/0x100 [ 484.112213][T11143] print_deadlock_bug+0x28b/0x2a0 [ 484.112237][T11143] validate_chain+0x1a3f/0x2140 [ 484.112269][T11143] __lock_acquire+0xab9/0xd20 [ 484.112291][T11143] ? rpc_close_pipes+0x10a/0x730 [ 484.112320][T11143] lock_acquire+0x120/0x360 [ 484.112336][T11143] ? rpc_close_pipes+0x10a/0x730 [ 484.112360][T11143] down_write+0x96/0x1f0 [ 484.112376][T11143] ? rpc_close_pipes+0x10a/0x730 [ 484.112393][T11143] ? __pfx_down_write+0x10/0x10 [ 484.112408][T11143] ? __pfx_find_submount+0x10/0x10 [ 484.112425][T11143] ? _raw_spin_unlock+0x28/0x50 [ 484.112445][T11143] ? d_walk+0x6f4/0x780 [ 484.112461][T11143] rpc_close_pipes+0x10a/0x730 [ 484.112479][T11143] ? d_invalidate+0x204/0x260 [ 484.112500][T11143] ? __pfx_rpc_close_pipes+0x10/0x10 [ 484.112520][T11143] ? up_write+0x1c4/0x420 [ 484.112541][T11143] ? __pfx_rpc_close_pipes+0x10/0x10 [ 484.112560][T11143] __simple_recursive_removal+0x20b/0x510 [ 484.112581][T11143] ? __pfx_rpc_close_pipes+0x10/0x10 [ 484.112601][T11143] rpc_unlink+0x56/0x80 [ 484.112618][T11143] rpc_pipefs_event+0xc0/0x170 [ 484.112634][T11143] notifier_call_chain+0x1b3/0x3e0 [ 484.112658][T11143] blocking_notifier_call_chain+0x6a/0x90 [ 484.112680][T11143] rpc_kill_sb+0xd0/0x190 [ 484.112701][T11143] deactivate_locked_super+0xb9/0x130 [ 484.112721][T11143] cleanup_mnt+0x425/0x4c0 [ 484.112739][T11143] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.112763][T11143] task_work_run+0x1d1/0x260 [ 484.112780][T11143] ? __pfx_task_work_run+0x10/0x10 [ 484.112795][T11143] ? __x64_sys_umount+0x122/0x160 [ 484.112817][T11143] ? exit_to_user_mode_loop+0x40/0x110 [ 484.112836][T11143] exit_to_user_mode_loop+0xec/0x110 [ 484.112853][T11143] do_syscall_64+0x2bd/0x3b0 [ 484.112867][T11143] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.112889][T11143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.112904][T11143] ? clear_bhb_loop+0x60/0xb0 [ 484.112920][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.112938][T11143] RIP: 0033:0x7f7df3d8fc57 [ 484.112953][T11143] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 484.112967][T11143] RSP: 002b:00007ffc72a75948 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 484.112983][T11143] RAX: 0000000000000000 RBX: 00007f7df3e10925 RCX: 00007f7df3d8fc57 [ 484.112994][T11143] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc72a75a00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 484.113003][T11143] RBP: 00007ffc72a75a00 R08: 0000000000000000 R09: 0000000000000000 [ 484.113013][T11143] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc72a76a90 [ 484.113023][T11143] R13: 00007f7df3e10925 R14: 0000000000076152 R15: 00007ffc72a76ad0 [ 484.113040][T11143] [ 484.437670][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.768975][T11889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.051700][ T59] bridge_slave_1: left allmulticast mode [ 485.068696][ T59] bridge_slave_1: left promiscuous mode [ 485.074464][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.197330][ T59] bridge_slave_0: left allmulticast mode [ 485.203052][ T59] bridge_slave_0: left promiscuous mode [ 485.256805][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.593151][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.603528][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.614096][ T59] bond0 (unregistering): Released all slaves [ 485.925023][ T59] hsr_slave_0: left promiscuous mode [ 485.931425][ T59] hsr_slave_1: left promiscuous mode [ 485.938690][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.946159][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.955260][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.963052][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.975040][ T59] veth1_macvtap: left promiscuous mode [ 485.980853][ T59] veth0_macvtap: left promiscuous mode [ 485.986434][ T59] veth1_vlan: left promiscuous mode [ 485.992122][ T59] veth0_vlan: left promiscuous mode [ 486.167186][ T59] team0 (unregistering): Port device team_slave_1 removed [ 486.197103][ T59] team0 (unregistering): Port device team_slave_0 removed [ 486.587639][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.653351][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.692203][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.731504][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.809484][ T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.851085][ T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.892182][ T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.950898][ T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.008859][ T59] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.049469][ T59] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.109369][ T59] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.169242][ T59] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.238983][ T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.310827][ T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.351800][ T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.400991][ T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.466748][ T59] bridge_slave_0: left allmulticast mode [ 487.472518][ T59] bridge_slave_0: left promiscuous mode [ 487.478412][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.487513][ T59] bridge_slave_1: left allmulticast mode [ 487.493172][ T59] bridge_slave_1: left promiscuous mode [ 487.499467][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.508417][ T59] bridge_slave_0: left allmulticast mode [ 487.514109][ T59] bridge_slave_0: left promiscuous mode [ 487.520131][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.530884][ T59] bridge_slave_1: left allmulticast mode [ 487.536532][ T59] bridge_slave_1: left promiscuous mode [ 487.542470][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.550785][ T59] bridge_slave_0: left allmulticast mode [ 487.556432][ T59] bridge_slave_0: left promiscuous mode [ 487.562306][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.571633][ T59] bridge_slave_1: left allmulticast mode [ 487.577529][ T59] bridge_slave_1: left promiscuous mode [ 487.583243][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.591676][ T59] bridge_slave_0: left allmulticast mode [ 487.597560][ T59] bridge_slave_0: left promiscuous mode [ 487.603230][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.613025][ T59] bridge_slave_1: left allmulticast mode [ 487.618935][ T59] bridge_slave_1: left promiscuous mode [ 487.624597][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.633291][ T59] bridge_slave_0: left allmulticast mode [ 487.639553][ T59] bridge_slave_0: left promiscuous mode [ 487.645187][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.774504][ T59] team0: Port device geneve0 removed [ 487.832721][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.843006][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.853132][ T59] bond0 (unregistering): Released all slaves [ 487.920007][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.930407][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.940249][ T59] bond0 (unregistering): Released all slaves [ 488.017395][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.027513][ T59] bond0 (unregistering): Released all slaves [ 488.093536][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.103525][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.114983][ T59] bond0 (unregistering): Released all slaves [ 488.170082][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.180342][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.190617][ T59] bond0 (unregistering): Released all slaves [ 489.803166][ T59] tipc: Left network mode [ 489.808292][ T59] tipc: Disabling bearer [ 489.813697][ T59] tipc: Left network mode [ 489.819771][ T59] tipc: Left network mode [ 490.465735][ T59] hsr_slave_0: left promiscuous mode [ 490.471493][ T59] hsr_slave_1: left promiscuous mode [ 490.477331][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.484752][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.492591][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.500124][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.510502][ T59] hsr_slave_0: left promiscuous mode [ 490.516274][ T59] hsr_slave_1: left promiscuous mode [ 490.522113][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.529561][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.537909][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.545316][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.555141][ T59] hsr_slave_0: left promiscuous mode [ 490.560918][ T59] hsr_slave_1: left promiscuous mode [ 490.566564][ T59] batman_adv: batadv0: Removing interface: dummy0 [ 490.573746][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.581315][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.589102][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.596511][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.607156][ T59] hsr_slave_0: left promiscuous mode [ 490.612913][ T59] hsr_slave_1: left promiscuous mode [ 490.618673][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.626065][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.635000][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.642465][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.660677][ T59] veth1_macvtap: left promiscuous mode [ 490.666200][ T59] veth0_macvtap: left promiscuous mode [ 490.671865][ T59] veth1_vlan: left promiscuous mode [ 490.677218][ T59] veth0_vlan: left promiscuous mode [ 490.683307][ T59] veth1_macvtap: left promiscuous mode [ 490.688963][ T59] veth0_macvtap: left promiscuous mode [ 490.694509][ T59] veth1_vlan: left promiscuous mode [ 490.700220][ T59] veth0_vlan: left promiscuous mode [ 490.706172][ T59] veth1_macvtap: left promiscuous mode [ 490.711800][ T59] veth0_macvtap: left promiscuous mode [ 490.717524][ T59] veth1_vlan: left promiscuous mode [ 490.722791][ T59] veth0_vlan: left promiscuous mode [ 490.729109][ T59] veth1_macvtap: left promiscuous mode [ 490.734604][ T59] veth0_macvtap: left promiscuous mode [ 490.740226][ T59] veth1_vlan: left promiscuous mode [ 490.745491][ T59] veth0_vlan: left promiscuous mode [ 491.011494][ T59] team0 (unregistering): Port device team_slave_1 removed [ 491.040523][ T59] team0 (unregistering): Port device team_slave_0 removed [ 491.230048][ T59] team0 (unregistering): Port device team_slave_1 removed [ 491.253767][ T59] team0 (unregistering): Port device team_slave_0 removed [ 491.440380][ T59] team0 (unregistering): Port device team_slave_1 removed [ 491.468658][ T59] team0 (unregistering): Port device team_slave_0 removed [ 491.645421][ T59] team0 (unregistering): Port device team_slave_1 removed [ 491.679563][ T59] team0 (unregistering): Port device team_slave_0 removed