last executing test programs: 11m30.73007739s ago: executing program 32 (id=5): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x5885, 0x0, 0x1, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, 0x0, &(0x7f0000000280)) 10m49.011561597s ago: executing program 33 (id=110): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 7m25.580631198s ago: executing program 34 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) close(0x3) 5m36.509244138s ago: executing program 0 (id=771): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5m36.111593357s ago: executing program 0 (id=772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000090601080000000000000000050000000900020073797a3100000000050001000700000024000780060004404e2300000c000180080001400a0101010c00194000"], 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5m35.91755575s ago: executing program 0 (id=773): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x1, &(0x7f0000000080)=[0x0]) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 5m35.225977727s ago: executing program 0 (id=777): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$P9_RGETLOCK(r0, &(0x7f0000000040)={0x23, 0x37, 0x1, {0x1, 0xff, 0x2, 0x0, 0x5, '}$\')&'}}, 0x23) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 5m34.936241508s ago: executing program 0 (id=778): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x24, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e8b, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x2, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @loopback}]}, 0x2c}, 0x1, 0xffffff7f}, 0x4040000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180), 0x4) 5m32.797169173s ago: executing program 0 (id=781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) chdir(&(0x7f0000000000)='./cgroup\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f0000000180)=[{0x0}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9b, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x7, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x15, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x565615ed, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x5, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8d, 0xb, 0x3, 0x3, 0x8, 0x10, 0x401, 0x0, 0x6, 0x3, 0x0, 0x4, 0x9, 0x0, 0x14f, 0x2d2b, 0x7, 0x0, 0x0, 0x7, 0x5, 0x9, 0x10000, 0x8, 0x7, 0x51, 0x8, 0x702e, 0xfffffb1c, 0x2, 0xacc, 0x0, 0x3f800000, 0x3, 0x1, 0xc, 0x2, 0x6, 0x10001, 0x4ad, 0x10001, 0x400, 0x5, 0x2008001, 0xbb0, 0x7c9c, 0x7aa, 0x7, 0x8, 0x9, 0x9, 0x3, 0x101, 0x6, 0x70, 0xc3fb, 0x36, 0xb14, 0xa63, 0x9b, 0x0, 0x4, 0x4, 0xfffffffe, 0x4, 0x7, 0x6, 0x7, 0x536380b3, 0xffff, 0x5, 0x680, 0x18, 0x101, 0x1, 0x296, 0x834, 0x3ff, 0x178a7585, 0x100, 0x1, 0x200, 0x0, 0x4, 0x7fffffff, 0x519, 0x9, 0x200, 0x8, 0x2, 0x2, 0xff, 0x7ff, 0xa0, 0x4, 0xfff, 0xf, 0x9, 0x5e700, 0x8, 0x8, 0x5, 0x9, 0xe, 0x1a43d741, 0x8, 0x5, 0x2, 0x8, 0x2, 0x1, 0x9, 0x2, 0xfffffffe, 0x2, 0x3, 0x7fff, 0x5, 0x7, 0x5, 0x2, 0x431, 0x4000e, 0xffffffe8, 0xda2, 0x0, 0x40000000, 0x7, 0x6, 0x8, 0xed, 0xff, 0x7, 0x401, 0x400, 0x64a3e81, 0x0, 0x5, 0x3d27, 0x8, 0xa, 0x2db5509f, 0x7, 0xad56, 0x1, 0x5cb, 0xfff, 0x7, 0xe, 0x6, 0x1, 0x9, 0x4, 0x400, 0x9922000, 0x200, 0x10, 0x7f, 0x9, 0x3ff, 0x100, 0xfbdf1bcb, 0x1, 0x280000, 0xb2, 0x0, 0x5, 0x9, 0x9, 0x80000000, 0x8, 0xea, 0x2, 0x78, 0x5, 0x5, 0x3, 0xff, 0x40000, 0x4, 0x4, 0x100, 0x6, 0x5, 0xb6, 0x5, 0x3, 0xa, 0x6, 0xc32, 0xc9, 0x3, 0x8, 0x6, 0x4, 0x7ff, 0x3, 0xc, 0x4, 0x3, 0x3, 0x9, 0x6, 0x1, 0x6, 0x800, 0x7, 0x28b, 0x162, 0x400, 0x3ff, 0x7, 0x3c, 0x6, 0x0, 0xfff, 0x101, 0x800, 0xfff, 0x40, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x7, 0x6, 0x3df, 0x3ff, 0x10, 0x4, 0x6, 0xc21e, 0xfe, 0x7fffffff, 0x4, 0x9, 0x7, 0x6, 0x8, 0x0, 0xbe, 0x0, 0x2, 0x20002, 0xf, 0x100, 0x7, 0x0, 0x4, 0x5, 0x3, 0x850, 0x7, 0x7, 0x191a]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) dup(0xffffffffffffffff) 5m17.543336587s ago: executing program 35 (id=781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) chdir(&(0x7f0000000000)='./cgroup\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f0000000180)=[{0x0}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9b, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x7, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x15, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x565615ed, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x5, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8d, 0xb, 0x3, 0x3, 0x8, 0x10, 0x401, 0x0, 0x6, 0x3, 0x0, 0x4, 0x9, 0x0, 0x14f, 0x2d2b, 0x7, 0x0, 0x0, 0x7, 0x5, 0x9, 0x10000, 0x8, 0x7, 0x51, 0x8, 0x702e, 0xfffffb1c, 0x2, 0xacc, 0x0, 0x3f800000, 0x3, 0x1, 0xc, 0x2, 0x6, 0x10001, 0x4ad, 0x10001, 0x400, 0x5, 0x2008001, 0xbb0, 0x7c9c, 0x7aa, 0x7, 0x8, 0x9, 0x9, 0x3, 0x101, 0x6, 0x70, 0xc3fb, 0x36, 0xb14, 0xa63, 0x9b, 0x0, 0x4, 0x4, 0xfffffffe, 0x4, 0x7, 0x6, 0x7, 0x536380b3, 0xffff, 0x5, 0x680, 0x18, 0x101, 0x1, 0x296, 0x834, 0x3ff, 0x178a7585, 0x100, 0x1, 0x200, 0x0, 0x4, 0x7fffffff, 0x519, 0x9, 0x200, 0x8, 0x2, 0x2, 0xff, 0x7ff, 0xa0, 0x4, 0xfff, 0xf, 0x9, 0x5e700, 0x8, 0x8, 0x5, 0x9, 0xe, 0x1a43d741, 0x8, 0x5, 0x2, 0x8, 0x2, 0x1, 0x9, 0x2, 0xfffffffe, 0x2, 0x3, 0x7fff, 0x5, 0x7, 0x5, 0x2, 0x431, 0x4000e, 0xffffffe8, 0xda2, 0x0, 0x40000000, 0x7, 0x6, 0x8, 0xed, 0xff, 0x7, 0x401, 0x400, 0x64a3e81, 0x0, 0x5, 0x3d27, 0x8, 0xa, 0x2db5509f, 0x7, 0xad56, 0x1, 0x5cb, 0xfff, 0x7, 0xe, 0x6, 0x1, 0x9, 0x4, 0x400, 0x9922000, 0x200, 0x10, 0x7f, 0x9, 0x3ff, 0x100, 0xfbdf1bcb, 0x1, 0x280000, 0xb2, 0x0, 0x5, 0x9, 0x9, 0x80000000, 0x8, 0xea, 0x2, 0x78, 0x5, 0x5, 0x3, 0xff, 0x40000, 0x4, 0x4, 0x100, 0x6, 0x5, 0xb6, 0x5, 0x3, 0xa, 0x6, 0xc32, 0xc9, 0x3, 0x8, 0x6, 0x4, 0x7ff, 0x3, 0xc, 0x4, 0x3, 0x3, 0x9, 0x6, 0x1, 0x6, 0x800, 0x7, 0x28b, 0x162, 0x400, 0x3ff, 0x7, 0x3c, 0x6, 0x0, 0xfff, 0x101, 0x800, 0xfff, 0x40, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x7, 0x6, 0x3df, 0x3ff, 0x10, 0x4, 0x6, 0xc21e, 0xfe, 0x7fffffff, 0x4, 0x9, 0x7, 0x6, 0x8, 0x0, 0xbe, 0x0, 0x2, 0x20002, 0xf, 0x100, 0x7, 0x0, 0x4, 0x5, 0x3, 0x850, 0x7, 0x7, 0x191a]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) dup(0xffffffffffffffff) 2m58.184660783s ago: executing program 2 (id=1350): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) 2m56.485168654s ago: executing program 2 (id=1359): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 2m56.263219983s ago: executing program 8 (id=1360): socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x221f, 0x0, 0x23, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40019e21, 0x0) 2m56.034749898s ago: executing program 7 (id=1361): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000001ec0)=""/4083, 0xff3}, {0x0}, {&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000080)=""/45, 0x2d}], 0x5}, 0x100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2m55.837697587s ago: executing program 2 (id=1362): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x34, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "fefe80"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) 2m55.551447167s ago: executing program 7 (id=1364): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m55.059565277s ago: executing program 7 (id=1366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r1) 2m55.023731747s ago: executing program 2 (id=1367): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) 2m54.894769575s ago: executing program 8 (id=1368): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)='U', 0x1080}], 0x29a, 0x0, 0x3e80}, 0x0) 2m54.792549391s ago: executing program 2 (id=1369): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) 2m54.639693907s ago: executing program 7 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 2m54.539957116s ago: executing program 8 (id=1372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)='U', 0x1080}], 0x29a, 0x0, 0x3e80}, 0x0) 2m54.362447907s ago: executing program 3 (id=1373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0x66) 2m54.29069849s ago: executing program 8 (id=1374): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000080)=""/45, 0x2d}], 0x4}, 0x100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2m53.187084317s ago: executing program 7 (id=1375): socket$key(0xf, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) 2m52.743412636s ago: executing program 8 (id=1376): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m52.618473115s ago: executing program 3 (id=1377): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x34, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "fefe80"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) 2m52.07629412s ago: executing program 3 (id=1378): socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x221f, 0x0, 0x23, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40019e21, 0x0) 2m51.631582827s ago: executing program 8 (id=1381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xe0341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000040), &(0x7f0000000180)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd63"], 0x66) 2m51.474709242s ago: executing program 2 (id=1382): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2m51.01268368s ago: executing program 3 (id=1383): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m50.537866301s ago: executing program 3 (id=1384): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0x43, 0x42, 0x1}, 0x50) 2m50.394382775s ago: executing program 3 (id=1385): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2m50.393651468s ago: executing program 7 (id=1386): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000080)=""/45, 0x2d}], 0x4}, 0x100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2m36.37776489s ago: executing program 36 (id=1381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xe0341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000040), &(0x7f0000000180)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd63"], 0x66) 2m36.240181921s ago: executing program 37 (id=1382): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2m35.170222303s ago: executing program 38 (id=1386): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000080)=""/45, 0x2d}], 0x4}, 0x100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2m35.067139098s ago: executing program 39 (id=1385): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 9.058396758s ago: executing program 1 (id=1685): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2}, {0x6, 0x3, 0x2, 0xffff0001}]}) 6.316715583s ago: executing program 5 (id=1701): mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0xe02) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f000069c000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) 5.810793825s ago: executing program 5 (id=1702): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x10000000000, 0xdc4, 0x564, 0x9ce8, 0x0, 0x20000009, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"], 0x0) r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x20, 0x0, 0x0) 5.76378419s ago: executing program 1 (id=1703): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) 5.121319106s ago: executing program 5 (id=1707): syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x7, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8}, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) r0 = socket(0x2, 0x4001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$unix(r0, &(0x7f0000000580)="6efb2dded54b2b39cf9851b869307cefee1910cae0b3b67dcb2872e525bf687dad18459f556e122c383e19fd7a36454b8c2ea7ed39ee6e3a15b2bc068908feb7aedc6ba5d54f0788f1c6c6f244dca5ab1fba5adc23523a918d8d9791b1f70132bd0ec43a13ce9ded435dd3b5cb02bf92e72be10ab8f37519ab05a80621413753dc8653de3966ef0b1b3764a49581f015858f4ea46450869bfe447080a5af4c9f6560773715774fbeaee44a607eaf960d97fb5a128c9d29dd15ff5ce11a591c04b299082c134a1f9405448f9cbf7f5777fdf49aa184ab4cc1ffec2d3e061d03b6c1ddba704a9af12672ba7626cffe82678b", 0xffd0, 0x5, 0x0, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/113, 0x71}, {0x0}, {0x0}], 0x3) 3.914414685s ago: executing program 1 (id=1711): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1002, &(0x7f0000000240)={0x8, 0x2e185a2d}) 2.896220543s ago: executing program 4 (id=1714): syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db8344ff8c1100fe000000010000ff80d144000020f3fffe00000000000000000000000200aa4e204e22000890"], 0x0) 2.754795716s ago: executing program 9 (id=1715): syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db8344ff8c1100fe000000010000ff80d144000020f3fffe0080ff00000000000000000000aa4e204e220008"], 0x0) 2.730931269s ago: executing program 1 (id=1716): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/141, 0x8d, 0x1, 0x0}, &(0x7f0000000240)=0x40) 2.721536132s ago: executing program 5 (id=1717): syz_emit_ethernet(0x3a, &(0x7f0000000080)={@random="23e5d21ab758", @remote, @val, {@ipv4}}, 0x0) 2.558617784s ago: executing program 6 (id=1718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 2.534833813s ago: executing program 9 (id=1719): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000340)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x29, 0x9, &(0x7f0000000240)="f7cd0400", 0x4) 2.524764368s ago: executing program 4 (id=1720): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680), 0x0) 2.152533038s ago: executing program 9 (id=1721): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="73b9ccc300", @random="00f7000400", @val, {@ipv6}}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 2.152297409s ago: executing program 5 (id=1722): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040)="27913c11b3c9e91fbdf59c32417020e3a81e536e", 0x14) write(r0, &(0x7f0000000080)="d99a", 0x2) 2.133823008s ago: executing program 4 (id=1723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x7}, {0x8100, 0x3, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x65, 0x0, 0x3, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "a668a6c140ca653e910687ed5f76b47db75417568aa83a088ebb4a36c6bd3891", "31ccb81e7db193395c83b3635a4e0878", {"636f8f3f89497199eb3a3b8f0b2357a5", "92af5b34791b35b7830ed64e16c85006"}}}}}}}, 0x0) 1.178925058s ago: executing program 6 (id=1724): syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @remote, @val, {@ipv4}}, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x2, 0x7ffffffffffffffb, 0x20002fffffffa}) 922.762902ms ago: executing program 5 (id=1725): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) write$char_usb(r0, &(0x7f0000000400)="ae", 0x1) write$char_usb(r0, &(0x7f0000000000)="e0309bbfcb77b042c32e605e68db708db182012f39ed2952", 0x18) 922.367055ms ago: executing program 1 (id=1726): r0 = socket(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x24, &(0x7f0000000040)="fd0cc085", 0x4) 922.090721ms ago: executing program 6 (id=1727): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) shutdown(r0, 0x1) shutdown(r0, 0x2) 831.861541ms ago: executing program 9 (id=1728): r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fchmod(r0, 0x116) 828.130122ms ago: executing program 4 (id=1729): r0 = socket(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000140)={0x8, 0x1008000003ff, 0x1, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) listen(r0, 0x8) shutdown(r0, 0x2) select(0x40, &(0x7f00000001c0)={0xe, 0x3, 0x8, 0x2, 0x3, 0x1000, 0x8000000000000000, 0x9}, 0x0, 0x0, 0x0) 622.755359ms ago: executing program 6 (id=1730): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600030a0018"], 0x4c}}, 0x0) 608.781826ms ago: executing program 9 (id=1731): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000340)) 539.151305ms ago: executing program 4 (id=1732): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @local, @val, {@ipv6}}, 0x0) 418.758448ms ago: executing program 1 (id=1733): r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"], 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, 0x0, 0x0) 387.132686ms ago: executing program 6 (id=1734): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x32, &(0x7f0000000000)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) setsockopt(r0, 0x1000000029, 0x32, 0x0, 0x0) 242.742065ms ago: executing program 9 (id=1735): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x9e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00'}, 0x10) 178.732396ms ago: executing program 4 (id=1736): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 6 (id=1737): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): has no altsetting 0 [ 395.622660][ T5925] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.622715][ T5925] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.622742][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0 [ 395.630486][ T5925] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.630543][ T5925] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.630570][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0 [ 395.636310][ T5925] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.636365][ T5925] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.636391][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0 [ 395.640272][ T5925] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.640329][ T5925] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.640355][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0 [ 395.654115][ T5925] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.654172][ T5925] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.654199][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0 [ 395.655982][ T5925] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 395.656058][ T5925] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 395.656086][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0 [ 395.664946][ T5925] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 395.664973][ T5925] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 395.664993][ T5925] usb 6-1: Product: syz [ 395.665007][ T5925] usb 6-1: Manufacturer: syz [ 395.665021][ T5925] usb 6-1: SerialNumber: syz [ 395.701687][ T5925] usb 6-1: config 0 descriptor?? [ 395.746436][ T5925] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 396.064199][ T8445] netlink: 83 bytes leftover after parsing attributes in process `syz.5.598'. [ 396.197601][ T5909] usb 6-1: USB disconnect, device number 9 [ 396.381933][ C1] usb 6-1: yurex_control_callback - control failed: -71 [ 396.381997][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.766914][ C1] vkms_vblank_simulate: vblank timer overrun [ 396.905893][ T8454] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 397.186460][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.765544][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.096582][ T5909] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 398.318827][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.461948][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 398.564682][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.594462][ T9] usb 4-1: device descriptor read/64, error -71 [ 398.612149][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.758329][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.933986][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.258620][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.531971][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 399.565066][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.661882][ T9] usb 4-1: device descriptor read/64, error -71 [ 399.703446][ T1233] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 399.772664][ T9] usb usb4-port1: attempt power cycle [ 399.878523][ T8190] team0: Port device team_slave_0 added [ 399.928326][ T1233] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 399.931316][ T1233] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.931374][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.931392][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 399.931411][ T1233] usb 6-1: config 0 interface 0 has no altsetting 0 [ 399.954121][ T1233] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.954178][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.954204][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 399.954227][ T1233] usb 6-1: config 0 interface 0 has no altsetting 0 [ 399.956174][ T1233] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.956227][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.956254][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 399.956276][ T1233] usb 6-1: config 0 interface 0 has no altsetting 0 [ 399.959245][ T1233] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.959298][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.959325][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 399.959347][ T1233] usb 6-1: config 0 interface 0 has no altsetting 0 [ 399.968422][ T1233] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.968494][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.968520][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 399.968543][ T1233] usb 6-1: config 0 interface 0 has no altsetting 0 [ 399.970162][ T1233] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.970213][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.970239][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 399.970261][ T1233] usb 6-1: config 0 interface 0 has no altsetting 0 [ 399.972056][ T1233] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.972110][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.972135][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 399.972286][ T1233] usb 6-1: config 0 interface 0 has no altsetting 0 [ 399.975368][ T1233] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.975422][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.975448][ T1233] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 399.975470][ T1233] usb 6-1: config 0 interface 0 has no altsetting 0 [ 399.979253][ T1233] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 399.979278][ T1233] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 399.979300][ T1233] usb 6-1: Product: syz [ 399.979314][ T1233] usb 6-1: Manufacturer: syz [ 399.979328][ T1233] usb 6-1: SerialNumber: syz [ 400.005415][ T1233] usb 6-1: config 0 descriptor?? [ 400.098417][ T1233] yurex 6-1:0.0: Could not submitting URB [ 400.098599][ T1233] yurex 6-1:0.0: probe with driver yurex failed with error -5 [ 400.247992][ T1233] usb 6-1: USB disconnect, device number 10 [ 400.300449][ T43] hsr_slave_0: left promiscuous mode [ 400.316779][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 400.338279][ T43] hsr_slave_1: left promiscuous mode [ 400.339375][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.339403][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.373393][ T9] usb 4-1: device descriptor read/8, error -71 [ 400.405436][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.405468][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.613587][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 400.632512][ T9] usb 4-1: device descriptor read/8, error -71 [ 400.689362][ T43] veth1_macvtap: left promiscuous mode [ 400.689485][ T43] veth0_macvtap: left promiscuous mode [ 400.689775][ T43] veth1_vlan: left promiscuous mode [ 400.690160][ T43] veth0_vlan: left promiscuous mode [ 400.742380][ T9] usb usb4-port1: unable to enumerate USB device [ 402.312837][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 402.374210][ T8497] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 402.472933][ T9] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 402.474707][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 402.474766][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 402.474794][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 402.476438][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 402.476493][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 402.476523][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 402.478375][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 402.478429][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 402.478457][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 402.479915][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 402.480055][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 402.480085][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 402.481582][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 402.481635][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 402.481663][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 402.628756][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 402.628815][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 402.628844][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 402.629948][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 402.630005][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 402.630033][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 402.631125][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 402.631179][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 402.631206][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 402.730267][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 402.730299][ T9] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 402.730320][ T9] usb 6-1: Product: syz [ 402.730334][ T9] usb 6-1: Manufacturer: syz [ 402.730349][ T9] usb 6-1: SerialNumber: syz [ 402.775289][ T9] usb 6-1: config 0 descriptor?? [ 402.811584][ T9] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 403.749260][ T8499] netlink: 83 bytes leftover after parsing attributes in process `syz.5.616'. [ 403.825788][ T5925] usb 6-1: USB disconnect, device number 11 [ 403.879587][ T5925] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 405.364535][ T43] team0 (unregistering): Port device team_slave_1 removed [ 405.583849][ T43] team0 (unregistering): Port device team_slave_0 removed [ 407.625899][ T8190] team0: Port device team_slave_1 added [ 408.957176][ T8516] netlink: 24 bytes leftover after parsing attributes in process `syz.5.621'. [ 409.261963][ T5916] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 410.093940][ T5916] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 410.093970][ T5916] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 410.093991][ T5916] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 410.094044][ T5916] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.366698][ T5916] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 410.366726][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 410.366737][ T5916] usb 6-1: Product: syz [ 410.366745][ T5916] usb 6-1: Manufacturer: syz [ 410.399049][ T5916] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 411.263895][ T5916] usb 6-1: USB disconnect, device number 12 [ 412.569890][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.569907][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.569934][ T8190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.792465][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.792481][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.792508][ T8190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.858232][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.629'. [ 414.753222][ T8190] hsr_slave_0: entered promiscuous mode [ 414.754464][ T8190] hsr_slave_1: entered promiscuous mode [ 414.755267][ T8190] debugfs: 'hsr0' already exists in 'hsr' [ 414.755288][ T8190] Cannot create hsr debugfs directory [ 415.556421][ T8570] FAT-fs (loop5): unable to read boot sector [ 416.453021][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.633'. [ 417.791973][ T5916] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 417.948412][ T5916] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 417.948441][ T5916] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 417.948461][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 417.948510][ T5916] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.980231][ T5916] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 417.980262][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 417.980283][ T5916] usb 1-1: Product: syz [ 417.980298][ T5916] usb 1-1: Manufacturer: syz [ 418.854152][ T5916] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 419.055159][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 419.113820][ T5924] usb 1-1: USB disconnect, device number 29 [ 422.664950][ T8190] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 422.882101][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 422.978630][ T8190] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 423.881778][ T8190] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 423.961653][ T8190] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 424.032936][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 425.152334][ T8190] kthread_run failed with err -4 [ 426.951840][ T991] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 427.127530][ T991] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 427.127560][ T991] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 427.127581][ T991] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 427.127633][ T991] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.237629][ T991] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 427.237661][ T991] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 427.237682][ T991] usb 4-1: Product: syz [ 427.237697][ T991] usb 4-1: Manufacturer: syz [ 427.339487][ T991] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 427.773813][ T5916] usb 4-1: USB disconnect, device number 31 [ 427.799241][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 427.810737][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 427.817314][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 427.823017][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 427.823903][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.682492][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 430.289112][ T5155] Bluetooth: hci4: command tx timeout [ 431.471901][ T6616] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 431.635131][ T6616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 431.639064][ T6616] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 431.639093][ T6616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.639114][ T6616] usb 4-1: Product: syz [ 431.639129][ T6616] usb 4-1: Manufacturer: syz [ 431.639144][ T6616] usb 4-1: SerialNumber: syz [ 431.723996][ T6616] usb 4-1: config 0 descriptor?? [ 432.165346][ T6616] usb 4-1: USB disconnect, device number 32 [ 432.436062][ T5155] Bluetooth: hci4: command 0x041b tx timeout [ 432.498206][ T8517] udevd[8517]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.138147][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 434.321881][ T991] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 434.477039][ T991] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 434.477069][ T991] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 434.477123][ T991] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.479173][ T991] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 434.479204][ T991] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 434.479225][ T991] usb 6-1: Product: syz [ 434.479240][ T991] usb 6-1: Manufacturer: syz [ 434.491834][ T5155] Bluetooth: hci4: command 0x041b tx timeout [ 435.346021][ T991] cdc_wdm 6-1:1.0: skipping garbage [ 435.346065][ T991] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 435.535244][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 435.559126][ T991] usb 6-1: USB disconnect, device number 13 [ 436.632022][ T5155] Bluetooth: hci4: command 0x041b tx timeout [ 437.922018][ T5155] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 438.102142][ T8673] chnl_net:caif_netlink_parms(): no params data found [ 438.581912][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 438.583737][ T7995] bridge_slave_1: left allmulticast mode [ 438.583766][ T7995] bridge_slave_1: left promiscuous mode [ 438.584098][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.661882][ T5155] Bluetooth: hci4: command 0x041b tx timeout [ 438.675521][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 438.694815][ T7995] bridge_slave_0: left allmulticast mode [ 438.694845][ T7995] bridge_slave_0: left promiscuous mode [ 438.695122][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.740194][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 438.750403][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 438.750435][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.750455][ T9] usb 4-1: Product: syz [ 438.750469][ T9] usb 4-1: Manufacturer: syz [ 438.750484][ T9] usb 4-1: SerialNumber: syz [ 438.789480][ T9] usb 4-1: config 0 descriptor?? [ 440.028530][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.028621][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.152096][ T9] usb 4-1: USB disconnect, device number 33 [ 440.280660][ T8520] udevd[8520]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.401125][ T7995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.504750][ T7995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.561386][ T7995] bond0 (unregistering): Released all slaves [ 440.740221][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.685'. [ 440.932923][ T8797] netlink: 'syz.2.687': attribute type 1 has an invalid length. [ 440.982635][ T5923] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 441.234170][ T5923] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 441.234189][ T5923] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 441.234217][ T5923] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.236437][ T5923] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 441.236454][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 441.236464][ T5923] usb 1-1: Product: syz [ 441.236472][ T5923] usb 1-1: Manufacturer: syz [ 441.355034][ T5923] cdc_wdm 1-1:1.0: skipping garbage [ 441.355869][ T5923] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 441.421234][ T8796] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 441.439108][ T8796] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 441.559128][ T5923] usb 1-1: USB disconnect, device number 30 [ 442.202305][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.693'. [ 442.253345][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.276778][ T7995] hsr_slave_0: left promiscuous mode [ 442.309630][ T7995] hsr_slave_1: left promiscuous mode [ 442.314502][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.392535][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.911351][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.665159][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.157444][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.376902][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.526280][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.906054][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.934777][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.061913][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 445.213202][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.251775][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 445.257462][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 445.257490][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.257511][ T9] usb 6-1: Product: syz [ 445.257525][ T9] usb 6-1: Manufacturer: syz [ 445.257541][ T9] usb 6-1: SerialNumber: syz [ 445.437114][ T9] usb 6-1: config 0 descriptor?? [ 445.681509][ T7995] team0 (unregistering): Port device team_slave_1 removed [ 445.852456][ T7995] team0 (unregistering): Port device team_slave_0 removed [ 445.960656][ T6616] usb 6-1: USB disconnect, device number 14 [ 446.037923][ T8520] udevd[8520]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.567423][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.603291][ T8673] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.603435][ T8673] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.603669][ T8673] bridge_slave_0: entered allmulticast mode [ 446.672066][ T8673] bridge_slave_0: entered promiscuous mode [ 446.732073][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.732211][ T8673] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.732439][ T8673] bridge_slave_1: entered allmulticast mode [ 446.750134][ T8673] bridge_slave_1: entered promiscuous mode [ 446.946762][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 447.204378][ T8842] syz.2.702 (8842) used greatest stack depth: 18968 bytes left [ 447.426091][ T8673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.461470][ T8673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.644110][ T8878] netlink: 'syz.5.711': attribute type 1 has an invalid length. [ 451.661218][ T8673] team0: Port device team_slave_0 added [ 451.829929][ T8673] team0: Port device team_slave_1 added [ 452.182346][ T8879] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 452.183558][ T8879] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 452.369164][ T8884] gretap1: entered promiscuous mode [ 452.418664][ T8884] bond1: (slave gretap1): making interface the new active one [ 452.419152][ T8884] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 452.938087][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.938103][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.938129][ T8673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.940423][ T8673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.940435][ T8673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.940460][ T8673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.850063][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.191858][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.201399][ T8673] hsr_slave_0: entered promiscuous mode [ 454.215106][ T8673] hsr_slave_1: entered promiscuous mode [ 454.216072][ T8673] debugfs: 'hsr0' already exists in 'hsr' [ 454.216096][ T8673] Cannot create hsr debugfs directory [ 454.393529][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.462441][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.844893][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.042905][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.210618][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.549467][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.811452][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.367111][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.508369][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.647972][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.713662][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.749720][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.111322][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.398354][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.029629][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.229434][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.262429][ T8945] binder: 8944:8945 ioctl c0306201 200000000240 returned -11 [ 458.467758][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.671618][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.345833][ T8963] loop2: detected capacity change from 0 to 7 [ 459.408108][ T8963] Dev loop2: unable to read RDB block 7 [ 459.408161][ T8963] loop2: unable to read partition table [ 459.408474][ T8963] loop2: partition table beyond EOD, truncated [ 459.408505][ T8963] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 461.059122][ T8991] binder: 8988:8991 ioctl c0306201 200000000240 returned -11 [ 461.682926][ T8998] Device name cannot be null; rc = [-22] [ 463.204806][ T9005] FAT-fs (loop5): unable to read boot sector [ 466.021189][ T8673] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 466.109093][ T9042] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 466.410127][ T8673] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 466.672545][ T8673] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 467.094974][ T9054] FAT-fs (loop5): unable to read boot sector [ 468.017576][ T8673] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 469.090429][ T8673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.226549][ T8673] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.255790][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.255876][ T6501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.270782][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.270951][ T6858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.518264][ T9111] FAT-fs (loop1): unable to read boot sector [ 474.054382][ T8673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.393444][ T9151] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 478.402526][ T9166] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 478.543924][ T8673] veth0_vlan: entered promiscuous mode [ 478.597995][ T8673] veth1_vlan: entered promiscuous mode [ 478.887576][ T8673] veth0_macvtap: entered promiscuous mode [ 478.959898][ T8673] veth1_macvtap: entered promiscuous mode [ 479.105791][ T8673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.196904][ T8673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.376664][ T85] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.383117][ T85] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.384569][ T85] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.384778][ T85] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.143736][ T7932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.143756][ T7932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.346061][ T7995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.346084][ T7995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.664596][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 489.342626][ T9285] MINIX-fs: unable to read superblock [ 490.469836][ T9295] netlink: 68 bytes leftover after parsing attributes in process `syz.3.818'. [ 490.658690][ T9299] Device name cannot be null; rc = [-22] [ 491.513688][ T9319] netlink: 'syz.3.824': attribute type 1 has an invalid length. [ 491.664724][ T9322] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 491.680602][ T9322] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 492.386312][ T9336] netlink: 68 bytes leftover after parsing attributes in process `syz.2.829'. [ 492.958028][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.067719][ T9347] Device name cannot be null; rc = [-22] [ 494.021822][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.247535][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.020347][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.547433][ T9372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.840'. [ 495.548637][ T9372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.840'. [ 495.790700][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.951769][ T9378] netlink: 'syz.7.841': attribute type 1 has an invalid length. [ 496.127264][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 496.910254][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.911720][ T9384] Device name cannot be null; rc = [-22] [ 496.920734][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 496.923888][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 496.928166][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 496.931015][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 497.532405][ T9388] ./file0: Can't open blockdev [ 498.220285][ T9375] gretap1: entered promiscuous mode [ 498.730592][ T9399] input: syz0 as /devices/virtual/input/input11 [ 499.305414][ T5844] Bluetooth: hci2: command tx timeout [ 499.490875][ T9403] netlink: 68 bytes leftover after parsing attributes in process `syz.5.847'. [ 499.591233][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.368399][ T5844] Bluetooth: hci2: command tx timeout [ 501.418011][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.460356][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.460430][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.704512][ T9426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.852'. [ 501.731898][ T9423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.852'. [ 501.732333][ T9426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.852'. [ 502.154181][ T9434] Device name cannot be null; rc = [-22] [ 502.896189][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.947921][ T9438] FAT-fs (loop11): unable to read boot sector [ 504.951877][ T9162] bridge0: port 3(syz_tun) entered disabled state [ 504.964248][ T5844] Bluetooth: hci2: command tx timeout [ 505.277196][ T9162] syz_tun (unregistering): left allmulticast mode [ 505.277226][ T9162] syz_tun (unregistering): left promiscuous mode [ 505.277468][ T9162] bridge0: port 3(syz_tun) entered disabled state [ 505.723691][ T9379] chnl_net:caif_netlink_parms(): no params data found [ 505.878905][ T9459] input: syz0 as /devices/virtual/input/input12 [ 507.277148][ T5844] Bluetooth: hci2: command tx timeout [ 510.119551][ T9379] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.140716][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.141058][ T9379] bridge_slave_0: entered allmulticast mode [ 510.171373][ T9379] bridge_slave_0: entered promiscuous mode [ 510.190736][ T9379] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.190944][ T9379] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.191166][ T9379] bridge_slave_1: entered allmulticast mode [ 510.220991][ T9379] bridge_slave_1: entered promiscuous mode [ 510.799708][ T9514] input: syz0 as /devices/virtual/input/input13 [ 511.763177][ T9379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.796743][ T9379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.929306][ T9523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.875'. [ 512.026978][ T9525] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 512.228514][ T9520] netlink: 60 bytes leftover after parsing attributes in process `syz.3.875'. [ 512.229121][ T9523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.875'. [ 512.231864][ T9379] team0: Port device team_slave_0 added [ 512.235524][ T9379] team0: Port device team_slave_1 added [ 515.126457][ T9379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.126574][ T9379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.126602][ T9379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.134224][ T9379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.134240][ T9379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.134268][ T9379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.326255][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 515.478242][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 515.478270][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 515.478289][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 515.478336][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 515.478362][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 515.480656][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 515.480684][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 515.480706][ T9] usb 6-1: Product: syz [ 515.480720][ T9] usb 6-1: Manufacturer: syz [ 515.591733][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 515.591755][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 515.622476][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 515.622500][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 515.814491][ T9] usb 6-1: USB disconnect, device number 15 [ 515.835225][ T9379] hsr_slave_0: entered promiscuous mode [ 515.843536][ T9379] hsr_slave_1: entered promiscuous mode [ 515.844471][ T9379] debugfs: 'hsr0' already exists in 'hsr' [ 515.844496][ T9379] Cannot create hsr debugfs directory [ 518.042770][ T9582] netlink: 96 bytes leftover after parsing attributes in process `syz.2.893'. [ 520.769628][ T9605] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 521.149946][ T9615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.585228][ T9379] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 522.822364][ T9379] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 522.927717][ T9379] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 522.984483][ T9379] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 524.259981][ T9379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.358596][ T9379] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.423659][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.424744][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.470390][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.470575][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.714293][ T9653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.498770][ T9379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.739986][ T9379] veth0_vlan: entered promiscuous mode [ 527.788457][ T9379] veth1_vlan: entered promiscuous mode [ 528.149062][ T9379] veth0_macvtap: entered promiscuous mode [ 528.311751][ T9379] veth1_macvtap: entered promiscuous mode [ 528.500592][ T9379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.548774][ T9379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.559959][ T85] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.560184][ T85] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.561790][ T1161] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.562003][ T1161] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.602399][ T9699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 529.825561][ T9721] FAT-fs (loop15): unable to read boot sector [ 530.725313][ T9731] netlink: 'syz.3.938': attribute type 4 has an invalid length. [ 531.839931][ T9737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.251041][ T6111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.251456][ T6111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.560280][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.560301][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.562374][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.943'. [ 534.820668][ T9767] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 534.850188][ T9767] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 537.377102][ T9801] netem: incorrect gi model size [ 537.377122][ T9801] netem: change failed [ 537.964543][ T9808] FAT-fs (loop7): unable to read boot sector [ 539.153177][ T9819] input: syz0 as /devices/virtual/input/input14 [ 543.363127][ T9481] IPVS: starting estimator thread 0... [ 543.455051][ T9869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.462947][ T9867] IPVS: using max 8 ests per chain, 19200 per kthread [ 544.189953][ T9857] input: syz0 as /devices/virtual/input/input15 [ 544.334278][ T9878] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 546.359716][ T9898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.997'. [ 546.360173][ T9895] netlink: 60 bytes leftover after parsing attributes in process `syz.2.997'. [ 546.494703][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.999'. [ 546.612640][ T9907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.762788][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1002'. [ 547.662283][ T9924] input: syz0 as /devices/virtual/input/input16 [ 549.356282][ T9945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.494272][ T9975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.470028][T10002] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 554.749145][ T5155] Bluetooth: hci4: command 0x041b tx timeout [ 554.780770][T10017] netlink: 'syz.3.1037': attribute type 1 has an invalid length. [ 555.047787][T10020] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 555.106169][T10020] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 556.552657][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.909911][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.078745][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.553667][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.854361][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.933692][T10053] tipc: Started in network mode [ 557.933728][T10053] tipc: Node identity 4ecf3e3e5459, cluster identity 4711 [ 557.934521][T10053] tipc: Enabled bearer , priority 0 [ 557.954728][T10053] syzkaller0: entered promiscuous mode [ 557.954755][T10053] syzkaller0: entered allmulticast mode [ 557.974862][T10053] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 558.060955][T10054] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 558.143294][T10060] tipc: Resetting bearer [ 558.193099][T10052] tipc: Resetting bearer [ 558.425344][T10052] tipc: Disabling bearer [ 558.962219][T10082] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1060'. [ 558.987136][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.313621][T10085] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 559.513428][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.666001][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.373625][T10107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1067'. [ 560.375386][T10105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1067'. [ 560.854628][T10117] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 561.085039][T10126] overlayfs: failed to resolve './file1': -2 [ 562.014814][T10144] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1083'. [ 562.015158][T10141] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1083'. [ 562.301202][T10152] binder: 10151:10152 ioctl 4018620d 0 returned -22 [ 562.309480][T10152] binder: 10151:10152 ioctl c0306201 200000000240 returned -11 [ 562.564005][T10160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1089'. [ 562.782294][T10164] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 562.889683][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.889768][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.987165][T10168] overlayfs: failed to resolve './file0': -2 [ 563.268344][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1096'. [ 563.437769][T10177] netlink: 'syz.7.1097': attribute type 9 has an invalid length. [ 563.437792][T10177] netlink: 'syz.7.1097': attribute type 7 has an invalid length. [ 563.437806][T10177] netlink: 'syz.7.1097': attribute type 8 has an invalid length. [ 563.648857][T10186] binder: 10183:10186 ioctl 4018620d 0 returned -22 [ 563.663725][T10186] binder: 10183:10186 ioctl c0306201 200000000240 returned -11 [ 563.872584][T10192] overlayfs: failed to resolve './file0': -2 [ 563.889873][T10191] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 563.933947][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 563.995731][T10199] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1106'. [ 564.630974][T10213] FAT-fs (loop11): unable to read boot sector [ 565.573419][T10224] binder: 10223:10224 ioctl 4018620d 0 returned -22 [ 565.576663][T10224] binder: 10223:10224 ioctl c0306201 200000000240 returned -11 [ 565.833347][T10229] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 565.959319][T10238] syz_tun: entered allmulticast mode [ 565.985608][T10237] syz_tun: left allmulticast mode [ 566.086583][T10242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1127'. [ 566.267616][T10247] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1129'. [ 567.637031][T10273] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 568.136588][T10286] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1146'. [ 569.994901][T10307] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 570.325820][T10321] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1159'. [ 570.420419][T10324] netlink: ct family unspecified [ 570.420456][T10324] openvswitch: netlink: Actions may not be safe on all matching packets [ 570.437919][T10316] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.845204][T10366] syzkaller1: entered promiscuous mode [ 572.845237][T10366] syzkaller1: entered allmulticast mode [ 574.915020][T10383] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 575.848167][ T8864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.263290][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1191'. [ 576.393421][ T8864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.684041][T10417] warning: `syz.7.1193' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 577.873211][T10426] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 578.092456][ T8864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.206586][T10428] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1196'. [ 579.945368][ T8864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.971503][ T8864] bridge_slave_1: left allmulticast mode [ 580.971537][ T8864] bridge_slave_1: left promiscuous mode [ 580.971797][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.081864][ T8864] bridge_slave_0: left allmulticast mode [ 581.081895][ T8864] bridge_slave_0: left promiscuous mode [ 581.082157][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.048909][ T8864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.138847][ T8864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.165162][ T8864] bond0 (unregistering): Released all slaves [ 584.186498][ T8864] bond1 (unregistering): Released all slaves [ 584.244335][T10470] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1212'. [ 584.556664][ T8864] IPVS: stopping backup sync thread 5978 ... [ 584.639339][T10490] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1217'. [ 589.753655][T10538] FAT-fs (loop17): unable to read boot sector [ 592.848808][T10553] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1232'. [ 594.307508][ T8864] hsr_slave_0: left promiscuous mode [ 595.169623][ T8864] hsr_slave_1: left promiscuous mode [ 595.170527][ T8864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.170556][ T8864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.788511][ T8864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.788575][ T8864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.932562][ T8864] veth1_macvtap: left promiscuous mode [ 596.932686][ T8864] veth0_macvtap: left promiscuous mode [ 596.932998][ T8864] veth1_vlan: left promiscuous mode [ 596.933209][ T8864] veth0_vlan: left promiscuous mode [ 597.900298][T10634] FAT-fs (loop5): unable to read boot sector [ 600.266558][ T8864] team0 (unregistering): Port device team_slave_1 removed [ 600.477424][ T8864] team0 (unregistering): Port device team_slave_0 removed [ 602.786225][T10645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1252'. [ 609.164109][ T8864] IPVS: stop unused estimator thread 0... [ 610.244723][T10791] FAT-fs (loop7): unable to read boot sector [ 611.282654][T10801] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1295'. [ 611.284233][T10797] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1295'. [ 614.559172][T10849] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1309'. [ 614.560870][T10843] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1309'. [ 616.165195][T10880] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1322'. [ 616.165977][T10878] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1322'. [ 617.341510][T10898] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1329'. [ 618.365534][T10919] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1334'. [ 618.605431][T10916] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1334'. [ 619.195718][T10940] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1340'. [ 624.340636][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.340714][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.759494][T10959] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1348'. [ 631.862511][ T9481] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 632.014747][ T9481] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 632.016654][ T9481] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.016735][ T9481] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.016761][ T9481] usb 3-1: config 0 interface 0 has no altsetting 0 [ 632.018315][ T9481] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.018371][ T9481] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.018400][ T9481] usb 3-1: config 0 interface 0 has no altsetting 0 [ 632.019816][ T9481] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.019869][ T9481] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.019896][ T9481] usb 3-1: config 0 interface 0 has no altsetting 0 [ 632.021320][ T9481] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.021372][ T9481] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.021399][ T9481] usb 3-1: config 0 interface 0 has no altsetting 0 [ 632.024976][ T9481] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.025028][ T9481] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.025054][ T9481] usb 3-1: config 0 interface 0 has no altsetting 0 [ 632.039078][ T9481] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.053672][ T9481] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.053704][ T9481] usb 3-1: config 0 interface 0 has no altsetting 0 [ 632.064835][ T9481] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.064891][ T9481] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.064918][ T9481] usb 3-1: config 0 interface 0 has no altsetting 0 [ 632.069358][ T9481] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 632.069411][ T9481] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 632.069439][ T9481] usb 3-1: config 0 interface 0 has no altsetting 0 [ 632.080025][ T9481] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 632.080053][ T9481] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 632.080074][ T9481] usb 3-1: Product: syz [ 632.080088][ T9481] usb 3-1: Manufacturer: syz [ 632.080102][ T9481] usb 3-1: SerialNumber: syz [ 632.104774][ T9481] usb 3-1: config 0 descriptor?? [ 632.145588][ T9481] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 632.473146][ T9481] usb 3-1: USB disconnect, device number 29 [ 632.486280][ T9481] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 633.460602][T10999] Device name cannot be null; rc = [-22] [ 633.918752][T11003] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1361'. [ 635.703975][ T5923] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 635.814752][T11045] FAT-fs (loop15): unable to read boot sector [ 636.392880][ T5923] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 636.397528][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.397596][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.397626][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 636.437365][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.437426][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.437455][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 636.438871][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.438930][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.438958][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 636.496902][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.496969][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.496998][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 636.498528][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.498582][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.498610][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 636.559331][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.559392][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.559421][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 636.561214][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.561269][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.561297][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 636.576783][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 636.576840][ T5923] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 636.576868][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 636.647059][ T5923] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 636.647091][ T5923] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 636.647112][ T5923] usb 3-1: Product: syz [ 636.647127][ T5923] usb 3-1: Manufacturer: syz [ 636.647142][ T5923] usb 3-1: SerialNumber: syz [ 636.693059][ T5923] usb 3-1: config 0 descriptor?? [ 636.734012][ T5923] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 636.858705][T11044] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1374'. [ 636.963460][ T5925] usb 3-1: USB disconnect, device number 30 [ 636.989875][ T5925] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 637.734795][T11056] Device name cannot be null; rc = [-22] [ 653.849919][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 653.873862][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 653.901569][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 653.902872][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 653.904492][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 653.905274][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 654.010942][ T9] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 654.012531][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.012589][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.012615][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.014023][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.014076][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.014104][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.015580][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.015636][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.015664][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.017063][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.017116][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.017142][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.019046][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.019099][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.019125][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.020875][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.020930][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.020957][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.022333][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.022391][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.022418][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.028931][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 654.028988][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 654.029015][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 654.033003][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 654.033030][ T9] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 654.033050][ T9] usb 6-1: Product: syz [ 654.033064][ T9] usb 6-1: Manufacturer: syz [ 654.033078][ T9] usb 6-1: SerialNumber: syz [ 654.045001][ T9] usb 6-1: config 0 descriptor?? [ 654.074920][ T9] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 654.320384][ T5923] usb 6-1: USB disconnect, device number 16 [ 654.324542][ T5923] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 654.456311][ T5155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 654.478155][ T5155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 654.479459][ T5155] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 654.483585][ T5155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 654.484414][ T5155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 655.164403][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 655.185259][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 655.197801][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 655.214031][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 655.214864][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 655.336753][ T5155] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 655.366488][ T5155] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 655.377212][ T5155] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 655.380633][ T5155] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 655.381419][ T5155] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 655.989543][ T5155] Bluetooth: hci0: command tx timeout [ 656.551457][ T5155] Bluetooth: hci6: command tx timeout [ 657.269800][ T5155] Bluetooth: hci7: command tx timeout [ 657.435916][ T5155] Bluetooth: hci8: command tx timeout [ 658.079927][ T5155] Bluetooth: hci0: command tx timeout [ 658.639508][ T5155] Bluetooth: hci6: command tx timeout [ 659.349126][ T5155] Bluetooth: hci7: command tx timeout [ 659.519306][ T5155] Bluetooth: hci8: command tx timeout [ 660.151472][ T5155] Bluetooth: hci0: command tx timeout [ 660.715675][ T5155] Bluetooth: hci6: command tx timeout [ 661.429130][ T5155] Bluetooth: hci7: command tx timeout [ 661.608930][ T5155] Bluetooth: hci8: command tx timeout [ 662.228884][ T5155] Bluetooth: hci0: command tx timeout [ 662.788893][ T5155] Bluetooth: hci6: command tx timeout [ 663.509129][ T5155] Bluetooth: hci7: command tx timeout [ 663.668978][ T5155] Bluetooth: hci8: command tx timeout [ 665.089537][T11079] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1386'. [ 665.096589][T11080] pim6reg1: entered promiscuous mode [ 665.096620][T11080] pim6reg1: entered allmulticast mode [ 669.352692][ T7995] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.478028][ T5923] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 669.640939][ T5923] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 669.644217][ T5923] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.645196][ T5923] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.645227][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.661478][ T5923] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.661536][ T5923] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.661565][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.662682][ T5923] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.662734][ T5923] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.662763][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.664969][ T5923] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.665024][ T5923] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.665052][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.769467][ T5923] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.769527][ T5923] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.769557][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.770830][ T5923] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.770882][ T5923] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.770910][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.808005][ T5923] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.808063][ T5923] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.808091][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.857875][ T5923] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.857940][ T5923] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.857968][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.886412][ T5923] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 669.886483][ T5923] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 669.886505][ T5923] usb 6-1: Product: syz [ 669.886520][ T5923] usb 6-1: Manufacturer: syz [ 669.886535][ T5923] usb 6-1: SerialNumber: syz [ 669.931581][ T5923] usb 6-1: config 0 descriptor?? [ 669.970812][ T5923] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 669.978335][ T7995] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.164765][ T9481] usb 6-1: USB disconnect, device number 17 [ 670.169744][ T9481] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 670.411265][ T7995] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.742200][ T7995] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.261345][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1403'. [ 671.979260][T11110] chnl_net:caif_netlink_parms(): no params data found [ 671.993744][T11099] chnl_net:caif_netlink_parms(): no params data found [ 672.023856][T11107] chnl_net:caif_netlink_parms(): no params data found [ 672.032550][T11102] chnl_net:caif_netlink_parms(): no params data found [ 672.758051][ T7995] bridge_slave_1: left allmulticast mode [ 672.758086][ T7995] bridge_slave_1: left promiscuous mode [ 672.758367][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.829104][ T7995] bridge_slave_0: left allmulticast mode [ 672.829136][ T7995] bridge_slave_0: left promiscuous mode [ 672.829392][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.987821][ T7995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.050688][ T7995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.073880][ T7995] bond0 (unregistering): Released all slaves [ 676.221718][T11110] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.221924][T11110] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.222155][T11110] bridge_slave_0: entered allmulticast mode [ 676.224254][T11110] bridge_slave_0: entered promiscuous mode [ 676.225616][T11099] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.225748][T11099] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.225942][T11099] bridge_slave_0: entered allmulticast mode [ 676.228337][T11099] bridge_slave_0: entered promiscuous mode [ 676.255224][T11107] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.255356][T11107] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.255580][T11107] bridge_slave_0: entered allmulticast mode [ 676.268413][T11107] bridge_slave_0: entered promiscuous mode [ 676.328486][T11102] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.328572][T11102] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.328746][T11102] bridge_slave_0: entered allmulticast mode [ 676.330237][T11102] bridge_slave_0: entered promiscuous mode [ 676.331831][T11110] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.331921][T11110] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.332033][T11110] bridge_slave_1: entered allmulticast mode [ 676.333485][T11110] bridge_slave_1: entered promiscuous mode [ 676.334962][T11099] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.335063][T11099] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.335356][T11099] bridge_slave_1: entered allmulticast mode [ 676.336790][T11099] bridge_slave_1: entered promiscuous mode [ 676.340336][T11107] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.340478][T11107] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.340660][T11107] bridge_slave_1: entered allmulticast mode [ 676.343186][T11107] bridge_slave_1: entered promiscuous mode [ 676.597924][T11102] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.598035][T11102] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.598184][T11102] bridge_slave_1: entered allmulticast mode [ 676.599670][T11102] bridge_slave_1: entered promiscuous mode [ 677.086748][T11110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.193457][T11099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.204892][T11107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.327252][ T7995] hsr_slave_0: left promiscuous mode [ 677.347147][ T7995] hsr_slave_1: left promiscuous mode [ 677.347891][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.347909][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.399611][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.399642][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.481220][ T7995] veth1_macvtap: left promiscuous mode [ 677.481343][ T7995] veth0_macvtap: left promiscuous mode [ 677.481632][ T7995] veth1_vlan: left promiscuous mode [ 677.481854][ T7995] veth0_vlan: left promiscuous mode [ 680.120415][ T7995] team0 (unregistering): Port device team_slave_1 removed [ 680.387164][ T7995] team0 (unregistering): Port device team_slave_0 removed [ 682.940671][T11110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.953653][T11102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.970013][T11099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.974581][T11107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.195562][T11102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.048568][T11099] team0: Port device team_slave_0 added [ 685.051359][T11107] team0: Port device team_slave_0 added [ 685.069966][T11110] team0: Port device team_slave_0 added [ 685.554401][T11221] FAT-fs (loop11): unable to read boot sector [ 685.890724][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.893275][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.259486][T11102] team0: Port device team_slave_0 added [ 686.272889][T11099] team0: Port device team_slave_1 added [ 686.275454][T11107] team0: Port device team_slave_1 added [ 686.288672][T11110] team0: Port device team_slave_1 added [ 686.322068][T11102] team0: Port device team_slave_1 added [ 686.336329][T11223] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1409'. [ 686.774832][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1410'. [ 687.099458][T11099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.099474][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.099501][T11099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.128504][T11107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.128520][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.128547][T11107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.129875][T11110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.129888][T11110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.129914][T11110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.140182][T11102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.140197][T11102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.140223][T11102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.145266][T11099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.145279][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.145305][T11099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.155024][T11107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.155039][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.155065][T11107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.385587][T11110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.385603][T11110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.385630][T11110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.404962][T11102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.404978][T11102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.405004][T11102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.552510][ T7995] IPVS: stop unused estimator thread 0... [ 689.441646][T11243] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1417'. [ 689.506930][T11099] hsr_slave_0: entered promiscuous mode [ 689.510118][T11099] hsr_slave_1: entered promiscuous mode [ 689.511127][T11099] debugfs: 'hsr0' already exists in 'hsr' [ 689.511152][T11099] Cannot create hsr debugfs directory [ 689.523147][T11110] hsr_slave_0: entered promiscuous mode [ 689.524481][T11110] hsr_slave_1: entered promiscuous mode [ 689.525361][T11110] debugfs: 'hsr0' already exists in 'hsr' [ 689.525384][T11110] Cannot create hsr debugfs directory [ 689.550803][T11107] hsr_slave_0: entered promiscuous mode [ 689.552086][T11107] hsr_slave_1: entered promiscuous mode [ 689.552994][T11107] debugfs: 'hsr0' already exists in 'hsr' [ 689.553017][T11107] Cannot create hsr debugfs directory [ 689.566721][T11102] hsr_slave_0: entered promiscuous mode [ 689.567942][T11102] hsr_slave_1: entered promiscuous mode [ 689.568772][T11102] debugfs: 'hsr0' already exists in 'hsr' [ 689.568794][T11102] Cannot create hsr debugfs directory [ 692.404747][ T7995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.916560][T11265] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1424'. [ 693.066364][ T7995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.609777][ T7995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.790633][ T7995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.155069][T11298] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1431'. [ 696.848858][T11099] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 696.908597][ T7995] bridge_slave_1: left allmulticast mode [ 696.908630][ T7995] bridge_slave_1: left promiscuous mode [ 696.908929][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.206451][ T7995] bridge_slave_0: left allmulticast mode [ 697.206484][ T7995] bridge_slave_0: left promiscuous mode [ 697.206788][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.415301][ T7995] bond1 (unregistering): (slave gretap1): Releasing active interface [ 700.576727][ T7995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.644871][ T7995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.690688][ T7995] bond0 (unregistering): Released all slaves [ 700.708622][ T7995] bond1 (unregistering): Released all slaves [ 700.729401][ T7995] bond2 (unregistering): Released all slaves [ 700.757188][ T7995] bond3 (unregistering): Released all slaves [ 700.820566][T11099] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 701.039915][ T7995] IPVS: stopping backup sync thread 6460 ... [ 701.227180][T11099] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 701.321686][T11318] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1438'. [ 701.486928][T11099] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 704.364145][ T7995] hsr_slave_0: left promiscuous mode [ 704.413954][ T7995] hsr_slave_1: left promiscuous mode [ 704.414559][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.414577][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.446083][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.446112][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.556382][ T7995] veth1_macvtap: left promiscuous mode [ 704.556505][ T7995] veth0_macvtap: left promiscuous mode [ 704.556798][ T7995] veth1_vlan: left promiscuous mode [ 704.557006][ T7995] veth0_vlan: left promiscuous mode [ 707.034572][ T7995] team0 (unregistering): Port device team_slave_1 removed [ 707.255813][ T7995] team0 (unregistering): Port device team_slave_0 removed [ 709.852627][T11346] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1445'. [ 710.698350][T11099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.539226][T11099] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.613812][T10619] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.614038][T10619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.840579][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.841763][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.031604][T11099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.182465][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 715.202884][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 715.204114][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 715.205640][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 715.206775][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 716.107950][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 716.145592][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 716.149471][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 716.168495][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 716.192925][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 716.378782][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 716.390441][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 716.391823][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 716.398847][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 716.400194][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 716.581660][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 716.605707][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 716.607406][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 716.623337][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 716.628226][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 717.262688][ T5844] Bluetooth: hci1: command tx timeout [ 718.302394][ T5844] Bluetooth: hci2: command tx timeout [ 718.542462][ T5844] Bluetooth: hci0: command tx timeout [ 718.706167][ T5844] Bluetooth: hci3: command tx timeout [ 719.345655][ T5844] Bluetooth: hci1: command tx timeout [ 720.689433][ T5155] Bluetooth: hci0: command tx timeout [ 720.689528][ T5844] Bluetooth: hci2: command tx timeout [ 720.782338][ T5844] Bluetooth: hci3: command tx timeout [ 721.421937][ T5844] Bluetooth: hci1: command tx timeout [ 722.701863][ T5844] Bluetooth: hci2: command tx timeout [ 722.701900][ T5844] Bluetooth: hci0: command tx timeout [ 722.836124][T11470] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1474'. [ 722.867664][ T5155] Bluetooth: hci3: command tx timeout [ 723.511964][ T5155] Bluetooth: hci1: command tx timeout [ 724.848046][ T5155] Bluetooth: hci0: command tx timeout [ 724.848078][ T5155] Bluetooth: hci2: command tx timeout [ 724.941902][ T5844] Bluetooth: hci3: command tx timeout [ 725.445644][ T85] bridge_slave_1: left allmulticast mode [ 725.451894][ T85] bridge_slave_1: left promiscuous mode [ 725.452206][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.533409][ T85] bridge_slave_0: left allmulticast mode [ 725.533442][ T85] bridge_slave_0: left promiscuous mode [ 725.533709][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.282175][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.343601][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.366300][ T85] bond0 (unregistering): Released all slaves [ 727.468657][T11409] chnl_net:caif_netlink_parms(): no params data found [ 727.719835][T11420] chnl_net:caif_netlink_parms(): no params data found [ 728.106703][ T85] hsr_slave_0: left promiscuous mode [ 728.152932][ T85] hsr_slave_1: left promiscuous mode [ 728.161583][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.213200][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.343643][ T85] team0 (unregistering): Port device team_slave_1 removed [ 729.583863][ T85] team0 (unregistering): Port device team_slave_0 removed [ 731.641649][T11496] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1481'. [ 731.725428][T11422] chnl_net:caif_netlink_parms(): no params data found [ 733.111080][T11424] chnl_net:caif_netlink_parms(): no params data found [ 734.042058][T11409] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.042267][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.042476][T11409] bridge_slave_0: entered allmulticast mode [ 734.045235][T11409] bridge_slave_0: entered promiscuous mode [ 734.146043][T11409] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.146252][T11409] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.146464][T11409] bridge_slave_1: entered allmulticast mode [ 734.150191][T11409] bridge_slave_1: entered promiscuous mode [ 734.555799][T11420] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.555960][T11420] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.556188][T11420] bridge_slave_0: entered allmulticast mode [ 734.563136][T11420] bridge_slave_0: entered promiscuous mode [ 734.772863][T11420] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.773045][T11420] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.773243][T11420] bridge_slave_1: entered allmulticast mode [ 734.777240][T11420] bridge_slave_1: entered promiscuous mode [ 734.952449][T11409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.263912][T11422] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.264162][T11422] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.264437][T11422] bridge_slave_0: entered allmulticast mode [ 735.267177][T11422] bridge_slave_0: entered promiscuous mode [ 735.273968][T11409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.383261][T11529] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1488'. [ 735.459925][T11424] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.460067][T11424] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.460945][T11424] bridge_slave_0: entered allmulticast mode [ 735.465621][T11424] bridge_slave_0: entered promiscuous mode [ 735.495292][T11422] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.495430][T11422] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.495702][T11422] bridge_slave_1: entered allmulticast mode [ 735.498481][T11422] bridge_slave_1: entered promiscuous mode [ 735.662110][T11420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.664730][T11424] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.664872][T11424] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.665076][T11424] bridge_slave_1: entered allmulticast mode [ 735.686558][T11424] bridge_slave_1: entered promiscuous mode [ 737.194604][T11420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.379344][T11409] team0: Port device team_slave_0 added [ 738.613999][T11422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.632922][T11409] team0: Port device team_slave_1 added [ 738.746109][T11424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.759606][T11422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.002963][T11420] team0: Port device team_slave_0 added [ 739.009670][T11424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.323535][T11420] team0: Port device team_slave_1 added [ 739.564396][T11409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.564413][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.564440][T11409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.823998][T11422] team0: Port device team_slave_0 added [ 739.826443][T11409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.826457][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.826485][T11409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.984775][T11424] team0: Port device team_slave_0 added [ 740.110605][T11422] team0: Port device team_slave_1 added [ 740.127684][T11563] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1495'. [ 740.130145][T11420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.130159][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.130184][T11420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.144337][T11424] team0: Port device team_slave_1 added [ 740.297738][T11420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.297755][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.297780][T11420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.871906][T11422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.871923][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.871949][T11422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.001544][T11424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.001560][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.001588][T11424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.122752][T11422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.122769][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.122800][T11422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.137601][T11424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.137615][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.137642][T11424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.150017][T11409] hsr_slave_0: entered promiscuous mode [ 741.151328][T11409] hsr_slave_1: entered promiscuous mode [ 741.152210][T11409] debugfs: 'hsr0' already exists in 'hsr' [ 741.152232][T11409] Cannot create hsr debugfs directory [ 741.559042][T11420] hsr_slave_0: entered promiscuous mode [ 741.561147][T11420] hsr_slave_1: entered promiscuous mode [ 741.562015][T11420] debugfs: 'hsr0' already exists in 'hsr' [ 741.562038][T11420] Cannot create hsr debugfs directory [ 742.353883][T11422] hsr_slave_0: entered promiscuous mode [ 742.355285][T11422] hsr_slave_1: entered promiscuous mode [ 742.356380][T11422] debugfs: 'hsr0' already exists in 'hsr' [ 742.356403][T11422] Cannot create hsr debugfs directory [ 742.391306][T11424] hsr_slave_0: entered promiscuous mode [ 742.392676][T11424] hsr_slave_1: entered promiscuous mode [ 742.393626][T11424] debugfs: 'hsr0' already exists in 'hsr' [ 742.393649][T11424] Cannot create hsr debugfs directory [ 747.190017][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.190096][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.309686][ T85] bridge_slave_1: left allmulticast mode [ 747.309721][ T85] bridge_slave_1: left promiscuous mode [ 747.309987][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.390870][ T85] bridge_slave_0: left allmulticast mode [ 747.390904][ T85] bridge_slave_0: left promiscuous mode [ 747.391374][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.481938][ T85] bridge_slave_1: left allmulticast mode [ 747.481971][ T85] bridge_slave_1: left promiscuous mode [ 747.482317][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.550746][ T85] bridge_slave_0: left allmulticast mode [ 747.550778][ T85] bridge_slave_0: left promiscuous mode [ 747.551043][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.634155][ T85] bridge_slave_1: left allmulticast mode [ 747.634186][ T85] bridge_slave_1: left promiscuous mode [ 747.634449][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.720916][ T85] bridge_slave_0: left allmulticast mode [ 747.720951][ T85] bridge_slave_0: left promiscuous mode [ 747.721206][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.289714][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.379906][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.444478][ T85] bond0 (unregistering): Released all slaves [ 748.468888][ T9481] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 748.622402][ T9481] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 748.622431][ T9481] usb 6-1: config 0 has no interface number 0 [ 748.622480][ T9481] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 748.622503][ T9481] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 748.622530][ T9481] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 748.622556][ T9481] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 748.622583][ T9481] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 748.622610][ T9481] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 748.622652][ T9481] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 748.622676][ T9481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.640997][ T9481] usb 6-1: config 0 descriptor?? [ 748.642334][T11614] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 748.642625][T11614] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 748.657718][ T9481] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 748.864909][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.952041][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.022028][ T85] bond0 (unregistering): Released all slaves [ 749.071213][T11614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.071799][T11614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.077202][ T9481] usb 6-1: USB disconnect, device number 18 [ 749.085019][ T9481] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 749.380260][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.460831][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.522097][ T85] bond0 (unregistering): Released all slaves [ 749.728283][T11616] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1503'. [ 751.388800][ T85] hsr_slave_0: left promiscuous mode [ 751.429080][ T85] hsr_slave_1: left promiscuous mode [ 751.430145][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.475148][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.608905][ T85] hsr_slave_0: left promiscuous mode [ 751.628683][ T85] hsr_slave_1: left promiscuous mode [ 751.629659][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.680870][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.819124][ T85] hsr_slave_0: left promiscuous mode [ 751.838712][ T85] hsr_slave_1: left promiscuous mode [ 751.839626][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.880498][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.699461][ T85] team0 (unregistering): Port device team_slave_1 removed [ 752.872124][ T85] team0 (unregistering): Port device team_slave_0 removed [ 754.080637][ T85] team0 (unregistering): Port device team_slave_1 removed [ 754.229869][ T85] team0 (unregistering): Port device team_slave_0 removed [ 755.539008][ T85] team0 (unregistering): Port device team_slave_1 removed [ 755.672006][ T85] team0 (unregistering): Port device team_slave_0 removed [ 759.052528][T11638] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1510'. [ 759.153577][T11409] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 759.220466][T11640] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1511'. [ 759.250007][T11409] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 759.331727][T11409] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 759.495612][T11409] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 759.709293][T11420] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 759.727778][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 759.781139][T11420] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 759.847159][T11420] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 759.881287][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 759.883567][ T9] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 759.883595][ T9] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 759.883620][ T9] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.883649][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 759.886682][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 759.886709][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.886730][ T9] usb 6-1: Product: syz [ 759.886745][ T9] usb 6-1: Manufacturer: syz [ 759.886760][ T9] usb 6-1: SerialNumber: syz [ 760.083157][T11420] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 760.184272][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 760.383071][T11424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 760.457683][T11424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 760.580813][T11424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 760.593062][T11642] usblp0:failed reading printer status (-32) [ 760.612789][ T5925] usb 6-1: USB disconnect, device number 19 [ 760.631708][ T5925] usblp0: removed [ 760.686112][T11424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 760.885144][T11422] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 760.916458][T11422] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 760.963770][T11422] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 760.996617][T11409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.000606][T11422] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 761.203013][T11409] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.286805][T10619] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.287517][T10619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.324734][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.325655][ T6501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.425528][T11420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.537681][ T6615] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 761.604199][T11424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.624903][T11420] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.680956][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.681224][ T6501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.690231][ T6615] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 761.690262][ T6615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 761.690288][ T6615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 761.690311][ T6615] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 761.690352][ T6615] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 761.690375][ T6615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.696075][ T6615] usb 6-1: config 0 descriptor?? [ 761.840965][ T7995] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.854459][ T7995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.952011][T11424] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.128294][T11422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.148043][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.148194][ T8864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.254830][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.255077][ T8864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.297721][ T6615] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 762.457960][ T9481] usb 6-1: USB disconnect, device number 20 [ 762.461248][T11422] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.554915][T11688] fido_id[11688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 762.614779][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.615491][ T8864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.660541][T11409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.731279][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.737384][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.219724][T11420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.044667][T11424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.435586][T11409] veth0_vlan: entered promiscuous mode [ 765.444169][T11422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.724210][T11409] veth1_vlan: entered promiscuous mode [ 766.171577][T11424] veth0_vlan: entered promiscuous mode [ 766.275970][T11424] veth1_vlan: entered promiscuous mode [ 766.335506][T11420] veth0_vlan: entered promiscuous mode [ 766.351730][T11409] veth0_macvtap: entered promiscuous mode [ 766.412921][T11409] veth1_macvtap: entered promiscuous mode [ 766.444072][T11420] veth1_vlan: entered promiscuous mode [ 766.571536][T11409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.668210][T11424] veth0_macvtap: entered promiscuous mode [ 766.679923][T11409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.683164][T11422] veth0_vlan: entered promiscuous mode [ 766.750538][T11424] veth1_macvtap: entered promiscuous mode [ 766.789666][ T1015] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.820516][ T1015] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.837311][T11422] veth1_vlan: entered promiscuous mode [ 766.838948][ T1015] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.879456][ T1015] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.895638][T11420] veth0_macvtap: entered promiscuous mode [ 767.050845][T11420] veth1_macvtap: entered promiscuous mode [ 767.064202][T11424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.223720][T11424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.440279][ T8864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.484955][ T8864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.520546][ T8864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.609755][ T8864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.789595][T11420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.825483][ T8864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.825503][ T8864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.932004][T11420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.935548][T11422] veth0_macvtap: entered promiscuous mode [ 768.156874][T11422] veth1_macvtap: entered promiscuous mode [ 768.162544][ T72] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.192517][ T72] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.212347][ T72] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.327822][ T72] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.371783][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.371804][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.681424][T11422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.707208][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.707226][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.920548][T11422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.133643][T10619] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.148351][T10619] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.163797][T10619] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.164625][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.164642][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.186783][T10619] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.461262][ T8864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.461283][ T8864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.101271][ T6501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.101292][ T6501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.333387][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.333407][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.756882][ T5916] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 770.957137][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 771.263287][ T5916] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 771.263356][ T5916] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 771.263385][ T5916] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 771.263412][ T5916] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 771.263440][ T5916] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 771.347811][ T5916] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 771.347870][ T5916] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 771.347900][ T5916] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 771.347925][ T5916] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 771.347953][ T5916] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 771.483003][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.483023][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.589073][ T5916] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 771.589151][ T5916] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 771.589180][ T5916] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 771.589205][ T5916] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 771.589230][ T5916] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 771.611345][ T5916] usb 6-1: string descriptor 0 read error: -22 [ 771.611492][ T5916] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 771.611515][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.652887][ T5916] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 771.721063][ T5909] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 771.876278][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 771.890407][ T5909] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 771.890450][ T5909] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 771.890491][ T5909] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 771.890518][ T5909] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 771.890544][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 771.894857][ T5909] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 771.894884][ T5909] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 771.894907][ T5909] usb 2-1: Product: syz [ 771.894927][ T5909] usb 2-1: Manufacturer: syz [ 771.894941][ T5909] usb 2-1: SerialNumber: syz [ 771.904742][ T5909] usb 2-1: config 0 descriptor?? [ 771.952158][ T5909] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 771.987974][ T5909] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 772.091772][ T6615] usb 6-1: USB disconnect, device number 21 [ 772.304822][T11801] adutux: No device or device unplugged -19 [ 772.325933][ T5991] usb 2-1: USB disconnect, device number 9 [ 772.342069][ T5991] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 772.816308][ T5991] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 772.906259][ T6615] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 772.989210][ T5991] usb 2-1: Using ep0 maxpacket: 32 [ 772.999193][ T5991] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 772.999237][ T5991] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 772.999278][ T5991] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 772.999305][ T5991] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 772.999333][ T5991] usb 2-1: config 0 interface 0 has no altsetting 0 [ 773.017082][ T5991] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 773.017110][ T5991] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 773.017131][ T5991] usb 2-1: Product: syz [ 773.017145][ T5991] usb 2-1: Manufacturer: syz [ 773.017159][ T5991] usb 2-1: SerialNumber: syz [ 773.056065][ T6615] usb 10-1: Using ep0 maxpacket: 16 [ 773.061114][ T6615] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 773.061142][ T6615] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 773.061167][ T6615] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.061195][ T6615] usb 10-1: config 1 interface 0 has no altsetting 0 [ 773.126117][ T6615] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 773.126148][ T6615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.126169][ T6615] usb 10-1: Product: syz [ 773.126185][ T6615] usb 10-1: Manufacturer: syz [ 773.126199][ T6615] usb 10-1: SerialNumber: syz [ 773.362552][ T5991] usb 2-1: config 0 descriptor?? [ 773.396441][ T5991] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 773.411691][ T5991] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 773.547183][ T6615] usblp 10-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 773.792807][T11846] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20003 [ 774.016547][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.017068][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.761126][ T5901] usb 2-1: USB disconnect, device number 10 [ 775.761152][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 775.774612][ T5901] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 775.775836][ T9481] usb 10-1: USB disconnect, device number 2 [ 775.811050][ T9481] usblp1: removed [ 776.116902][T11876] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1543'. [ 776.203435][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1543'. [ 777.425721][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1552'. [ 778.141745][T11926] FAT-fs (loop13): unable to read boot sector [ 782.979998][ T37] audit: type=1326 audit(1758967180.861:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11982 comm="syz.5.1578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f116d05eec9 code=0x0 [ 783.299875][ T37] audit: type=1326 audit(1758967181.201:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11985 comm="syz.1.1579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e4d81eec9 code=0x0 [ 785.897382][T12010] FAT-fs (loop9): unable to read boot sector [ 787.664819][T12076] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1608'. [ 787.694459][ T5925] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 787.864403][ T5925] usb 7-1: Using ep0 maxpacket: 8 [ 787.866838][ T5925] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 787.866888][ T5925] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 787.866907][ T5925] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 787.866928][ T5925] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 787.866948][ T5925] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.866982][ T5925] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 787.867011][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.393121][ T5925] usb 7-1: GET_CAPABILITIES returned 0 [ 788.393171][ T5925] usbtmc 7-1:16.0: can't read capabilities [ 788.561719][T12094] FAT-fs (loop9): unable to read boot sector [ 789.373501][ T5925] usb 7-1: USB disconnect, device number 2 [ 789.396323][T12073] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 789.906047][ T5925] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 790.057798][ T5925] usb 7-1: Using ep0 maxpacket: 8 [ 790.060645][ T5925] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 790.060705][ T5925] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 790.060728][ T5925] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 790.060751][ T5925] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 790.060778][ T5925] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 790.060825][ T5925] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 790.060848][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.368371][ T5925] usb 7-1: usb_control_msg returned -32 [ 790.368425][ T5925] usbtmc 7-1:16.0: can't read capabilities [ 792.366737][ T6615] usb 7-1: USB disconnect, device number 3 [ 794.317111][T12191] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1645'. [ 794.613706][ T5901] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 794.784316][ T5901] usb 10-1: Using ep0 maxpacket: 8 [ 794.786972][ T5901] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 794.787033][ T5901] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 794.787057][ T5901] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 794.787084][ T5901] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 794.787109][ T5901] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 794.787153][ T5901] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 794.787177][ T5901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.861205][ T5901] usb 10-1: GET_CAPABILITIES returned 0 [ 795.861253][ T5901] usbtmc 10-1:16.0: can't read capabilities [ 796.776189][ T5901] usb 10-1: USB disconnect, device number 3 [ 797.123420][ T5901] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 797.278668][ T5901] usb 10-1: Using ep0 maxpacket: 8 [ 797.289557][ T5901] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 797.289617][ T5901] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 797.289642][ T5901] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 797.289668][ T5901] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 797.289694][ T5901] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.289739][ T5901] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 797.289763][ T5901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.426199][ T5901] usb 10-1: usb_control_msg returned -71 [ 797.426257][ T5901] usbtmc 10-1:16.0: can't read capabilities [ 797.504261][ T5901] usb 10-1: USB disconnect, device number 4 [ 798.085371][T12251] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1666'. [ 798.815716][ T5901] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 799.223068][ T5901] usb 7-1: Using ep0 maxpacket: 8 [ 799.226294][ T5901] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 799.226356][ T5901] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 799.226381][ T5901] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 799.226406][ T5901] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 799.226431][ T5901] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 799.226473][ T5901] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 799.226497][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.317810][T12283] Device name cannot be null; rc = [-22] [ 800.154825][ T5901] usb 7-1: GET_CAPABILITIES returned 0 [ 800.154873][ T5901] usbtmc 7-1:16.0: can't read capabilities [ 800.275094][ T5901] usb 7-1: USB disconnect, device number 4 [ 800.365049][T12291] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1678'. [ 800.773054][ T5901] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 800.840081][ T37] audit: type=1326 audit(1758967198.743:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12308 comm="syz.1.1685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e4d81eec9 code=0xffff0000 [ 800.936535][ T5901] usb 7-1: Using ep0 maxpacket: 8 [ 800.940665][ T5901] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 800.940725][ T5901] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 800.940749][ T5901] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 800.940774][ T5901] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 800.940799][ T5901] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 800.940844][ T5901] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 800.940875][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.157776][ T5901] usb 7-1: usb_control_msg returned -32 [ 801.157826][ T5901] usbtmc 7-1:16.0: can't read capabilities [ 801.514984][T12321] Device name cannot be null; rc = [-22] [ 802.325415][ T5925] usb 7-1: USB disconnect, device number 5 [ 802.685382][T12333] syz.5.1692 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 803.102522][ T5925] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 803.270250][ T5925] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 803.270285][ T5925] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 803.270313][ T5925] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 803.270336][ T5925] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 803.270381][ T5925] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 803.270410][ T5925] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.354870][ T5925] usb 10-1: config 0 descriptor?? [ 803.869670][ T5925] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 804.082659][ T5925] usb 10-1: USB disconnect, device number 5 [ 804.176622][T12358] fido_id[12358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 804.272262][T12364] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1704'. [ 804.958011][T12379] Device name cannot be null; rc = [-22] [ 807.798404][T12415] FAT-fs (loop13): unable to read boot sector [ 808.633273][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.633348][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.304533][ T6616] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 809.504406][ T6616] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 809.504434][ T6616] usb 6-1: config 0 has no interface number 0 [ 809.504484][ T6616] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 809.504508][ T6616] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 809.504535][ T6616] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 809.504562][ T6616] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 809.504589][ T6616] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 809.504616][ T6616] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 809.504659][ T6616] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 809.504682][ T6616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.620804][ T6616] usb 6-1: config 0 descriptor?? [ 809.627304][T12433] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 809.628381][T12433] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 809.651780][ T6616] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 809.801442][T12452] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 809.801466][T12452] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12452, name: syz.4.1736 [ 809.801484][T12452] preempt_count: 1, expected: 0 [ 809.801495][T12452] RCU nest depth: 1, expected: 1 [ 809.801510][T12452] 3 locks held by syz.4.1736/12452: [ 809.801521][T12452] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0x1a/0x140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 809.801586][T12452] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 809.801640][T12452] #2: ffff88805c2c7a98 (&stab->lock){+...}-{3:3}, at: sock_map_delete_elem+0xb7/0x170 [ 809.801716][T12452] Preemption disabled at: [ 809.801722][T12452] [] bpf_test_timer_enter+0xf8/0x140 [ 809.801764][T12452] CPU: 0 UID: 0 PID: 12452 Comm: syz.4.1736 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 809.801788][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 809.801805][T12452] Call Trace: [ 809.801813][T12452] [ 809.801821][T12452] dump_stack_lvl+0x189/0x250 [ 809.801854][T12452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 809.801884][T12452] ? __pfx__printk+0x10/0x10 [ 809.801909][T12452] ? print_lock_name+0xde/0x100 [ 809.801944][T12452] ? bpf_test_timer_enter+0xf8/0x140 [ 809.801979][T12452] __might_resched+0x44b/0x5d0 [ 809.802013][T12452] ? bpf_test_timer_enter+0xf8/0x140 [ 809.802042][T12452] ? __pfx___might_resched+0x10/0x10 [ 809.802067][T12452] ? sock_map_delete_elem+0xb7/0x170 [ 809.802113][T12452] rt_spin_lock+0xc7/0x2c0 [ 809.802144][T12452] ? __pfx_rt_spin_lock+0x10/0x10 [ 809.802169][T12452] ? ktime_get+0x3e/0x1f0 [ 809.802190][T12452] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 809.802213][T12452] ? __pfx___cant_migrate+0x10/0x10 [ 809.802240][T12452] ? sock_map_delete_elem+0xa2/0x170 [ 809.802270][T12452] sock_map_delete_elem+0xb7/0x170 [ 809.802306][T12452] bpf_prog_2c29ac5cdc6b1842+0x43/0x4b [ 809.802334][T12452] bpf_flow_dissect+0x132/0x400 [ 809.802364][T12452] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 809.802411][T12452] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 809.802444][T12452] ? __fget_files+0x2a/0x420 [ 809.802480][T12452] ? __fget_files+0x2a/0x420 [ 809.802513][T12452] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 809.802545][T12452] bpf_prog_test_run+0x2ca/0x340 [ 809.802577][T12452] __sys_bpf+0x581/0x870 [ 809.802605][T12452] ? __pfx___sys_bpf+0x10/0x10 [ 809.802653][T12452] ? rcu_is_watching+0x15/0xb0 [ 809.802691][T12452] __x64_sys_bpf+0x7c/0x90 [ 809.802714][T12452] do_syscall_64+0xfa/0x3b0 [ 809.802733][T12452] ? lockdep_hardirqs_on+0x9c/0x150 [ 809.802764][T12452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.802786][T12452] ? clear_bhb_loop+0x60/0xb0 [ 809.802812][T12452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.802837][T12452] RIP: 0033:0x7f2bc3f5eec9 [ 809.802855][T12452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.802874][T12452] RSP: 002b:00007f2bc21be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 809.802895][T12452] RAX: ffffffffffffffda RBX: 00007f2bc41b5fa0 RCX: 00007f2bc3f5eec9 [ 809.802912][T12452] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 809.802931][T12452] RBP: 00007f2bc3fe1f91 R08: 0000000000000000 R09: 0000000000000000 [ 809.802945][T12452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.802957][T12452] R13: 00007f2bc41b6038 R14: 00007f2bc41b5fa0 R15: 00007ffc45ae9918 [ 809.802992][T12452] [ 810.513114][T12433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.513578][T12433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.707235][ T6615] usb 6-1: USB disconnect, device number 22 [ 810.771277][ T6615] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 814.412618][ T6111] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.805918][ T6111] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.126711][ T6111] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.499057][ T6111] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.954582][ T6111] bridge_slave_1: left allmulticast mode [ 815.954616][ T6111] bridge_slave_1: left promiscuous mode [ 815.956889][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.061844][ T6111] bridge_slave_0: left allmulticast mode [ 816.061877][ T6111] bridge_slave_0: left promiscuous mode [ 816.062123][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.353263][ T6111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.412574][ T6111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.445786][ T6111] bond0 (unregistering): Released all slaves