last executing test programs: 22m31.237736225s ago: executing program 0 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x3, r0, 0x4007) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) 22m28.874900204s ago: executing program 0 (id=149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write(r4, 0x0, 0x0) 22m24.156230588s ago: executing program 0 (id=154): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x9}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'blake2s-224-arm\x00'}}}]}, 0x138}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc000000000000000000000000fcff007f0000010000006f0000000000000000000000034e2400000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 22m22.728603876s ago: executing program 0 (id=157): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) preadv(r0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, 0x48, 0x402) 22m20.141312242s ago: executing program 0 (id=158): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) setgroups(0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) 22m15.843454323s ago: executing program 0 (id=160): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x9}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'blake2s-224-arm\x00'}}}]}, 0x180}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc000000000000000000000000fcff007f0000010000006f0000000000000000000000034e2400000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 22m0.429878158s ago: executing program 32 (id=160): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x9}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'blake2s-224-arm\x00'}}}]}, 0x180}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc000000000000000000000000fcff007f0000010000006f0000000000000000000000034e2400000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 19m59.401388188s ago: executing program 1 (id=348): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xaf86be13, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000440)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19m59.224434416s ago: executing program 1 (id=349): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x0, 0x3, 0x6, 0x400}}], 0x18, 0xc054}, 0x2c0408d0) 19m59.154705285s ago: executing program 1 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x14, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffdfffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 19m59.076664179s ago: executing program 1 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x59}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 19m58.98834589s ago: executing program 1 (id=352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 19m58.978586834s ago: executing program 1 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc40, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 19m43.063181768s ago: executing program 33 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc40, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 2m42.333583388s ago: executing program 2 (id=3946): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/237, 0xed}], 0x1}, 0x0) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) setgid(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x2400c080) 2m41.180934489s ago: executing program 2 (id=3954): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f000053f000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r0, 0x48aa8000) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000a40)=0xfff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a\x00'], 0x10) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x74, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x1d, 0x9, 0x6, 0x5, 0x7, 0x4]}, @CTA_TIMEOUT={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4184}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x0) 2m39.926785709s ago: executing program 2 (id=3957): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000440)={0x0, [{0x2, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x10001, 0x0}, {0x0, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x2, 0x0, 0xd0, 0x0}, {0x3, 0x0, 0x7fffffff, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0xf41, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x800009, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0xbadb, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000002680)=[{&(0x7f0000001600)="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", 0x9ed}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m39.440230898s ago: executing program 2 (id=3961): syz_emit_ethernet(0x0, 0x0, 0x0) 2m39.299262997s ago: executing program 2 (id=3962): r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m39.020159125s ago: executing program 2 (id=3964): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) 2m30.139227853s ago: executing program 5 (id=3997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0xffffffff, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffe2, 0x5f, 0x0, 0x0, 0x2, 0x0, 0x3ff}, 0x50) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) socket(0x28, 0x80000, 0x5) 2m29.488753009s ago: executing program 5 (id=4000): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f000053f000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r0, 0x48aa8000) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000a40)=0xfff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a\x00'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) r9 = fcntl$dupfd(r6, 0x0, r7) write$FUSE_NOTIFY_STORE(r9, 0x0, 0x0) 2m28.346936419s ago: executing program 5 (id=4003): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c0000"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m28.182051048s ago: executing program 5 (id=4005): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x8, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) 2m28.03798624s ago: executing program 5 (id=4006): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f787900000000040002801400000010000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab5"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 2m27.775178293s ago: executing program 5 (id=4008): socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x100) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x7fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket(0x1e, 0x5, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x800) 2m23.626908027s ago: executing program 34 (id=3964): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) 45.684184258s ago: executing program 3 (id=4249): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)="f7", 0x90}], 0x1}], 0x1, 0x40800) 45.482358365s ago: executing program 3 (id=4250): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)=0x7) 45.005829016s ago: executing program 3 (id=4251): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000002"], 0x80}}, 0x0) 44.76442304s ago: executing program 3 (id=4253): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 44.614358557s ago: executing program 3 (id=4254): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd", 0x6a}, {&(0x7f00000024c0)}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x1, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000180), 0x0) 44.083733879s ago: executing program 3 (id=4255): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x10) 28.907170747s ago: executing program 35 (id=4255): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x10) 7.744323326s ago: executing program 4 (id=4310): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x40025b0c, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000315000300686173683a69702c706f72742c6e657400"], 0x50}}, 0x0) 7.399803897s ago: executing program 6 (id=4311): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000f2c000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x1000000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r5 = syz_io_uring_setup(0xdaa, 0x0, &(0x7f0000000100), &(0x7f0000000000)) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000200)={0xb, 0x1, 0x3}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r6, 0x0, 0x0, 0x0, 0x80800}) listen(r6, 0x5) io_uring_enter(r7, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r11 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x8000, 0x0) write$RDMA_USER_CM_CMD_BIND(r11, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) io_uring_enter(r5, 0x1, 0xffffffff, 0x1, 0x0, 0x0) 5.087295871s ago: executing program 6 (id=4312): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) socket(0x1e, 0x4, 0x0) r1 = syz_io_uring_setup(0x378c, &(0x7f0000000380)={0x0, 0x4093, 0x10100, 0x10000003, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4126}}) io_uring_enter(r1, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x9, 0x1d, "534a85015f0f2b8f5dd68b0cb81a0553fbc127b115288b938a4a82f15e7fe002c05a09fb03ce28eefc8e36339f3329659065f6bd44cfabfd3fc6a206342bf35e", "4eb50fabe4d9a620f7327881d26a2b29a8e1f42f7907521c250cacdcb6f027ac9ff0cc0ac6a807db43e82b13d8bc1bb0ad752906a0a2c501ecab0549c519248f", "e892038420710000009c8400", [0x4, 0xfffffffffffffffc]}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x400c005}, 0x0) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) read(r8, &(0x7f0000000380)=""/144, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.904125143s ago: executing program 4 (id=4313): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000f2c000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x1000000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) syz_io_uring_setup(0xdaa, 0x0, &(0x7f0000000100), &(0x7f0000000000)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r5, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 3.517305973s ago: executing program 6 (id=4314): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000500)="b1d703c6bc0fdc49822856d08b6bff7c", 0x10}]) sendmmsg$alg(r1, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x200080d0) 2.757131874s ago: executing program 4 (id=4315): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 2.56561828s ago: executing program 6 (id=4316): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r0, 0x0, 0x4044050) 2.12423687s ago: executing program 4 (id=4317): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x95) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) 1.219257626s ago: executing program 4 (id=4318): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4400046}) 1.179610759s ago: executing program 4 (id=4319): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000f2c000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x1000000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r5 = syz_io_uring_setup(0xdaa, 0x0, &(0x7f0000000100), &(0x7f0000000000)) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000200)={0xb, 0x1, 0x3}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r6, 0x0, 0x0, 0x0, 0x80800}) listen(r6, 0x5) io_uring_enter(r7, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r11 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x8000, 0x0) write$RDMA_USER_CM_CMD_BIND(r11, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) io_uring_enter(r5, 0x1, 0xffffffff, 0x1, 0x0, 0x0) 148.287768ms ago: executing program 6 (id=4320): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 0s ago: executing program 6 (id=4321): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/237, 0xed}], 0x1}, 0x0) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x3}, 0x0) kernel console output (not intermixed with test programs): axpacket 56832, setting to 1024 [ 1320.854096][T11083] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1320.854119][T11083] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1320.854141][T11083] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1320.854182][T11083] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1320.854203][T11083] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.916988][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1320.937406][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.937460][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1320.937497][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1320.937516][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.014059][ T9] usb 4-1: config 0 descriptor?? [ 1321.087306][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1321.155890][T11083] usb 7-1: GET_CAPABILITIES returned 0 [ 1321.155939][T11083] usbtmc 7-1:16.0: can't read capabilities [ 1321.470144][T11083] usb 7-1: USB disconnect, device number 44 [ 1322.646825][T10845] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1322.803643][T10845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.803675][T10845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.803711][T10845] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1322.803732][T10845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.810028][T10845] usb 7-1: config 0 descriptor?? [ 1322.918275][T18434] vivid-007: disconnect [ 1323.346846][T10845] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 1323.353251][T10845] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1323.388250][ T43] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1323.491061][T11083] usb 4-1: USB disconnect, device number 24 [ 1323.539584][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1323.541424][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.541448][ T43] usb 6-1: config 0 has no interfaces? [ 1323.542496][T10845] cp2112 0003:10C4:EA90.001A: Part Number: 0x82 Device Version: 0xFE [ 1323.545424][ T43] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1323.545439][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.545449][ T43] usb 6-1: Product: syz [ 1323.545455][ T43] usb 6-1: Manufacturer: syz [ 1323.545462][ T43] usb 6-1: SerialNumber: syz [ 1323.668307][T18434] vivid-007: reconnect [ 1323.778901][ T43] usb 6-1: config 0 descriptor?? [ 1324.481582][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3693'. [ 1324.727086][T18448] syz_tun: entered allmulticast mode [ 1324.732411][T18448] syz_tun: left allmulticast mode [ 1326.183299][T15221] usb 6-1: USB disconnect, device number 34 [ 1326.500773][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1326.547549][T12727] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1327.786803][T12727] usb 4-1: Using ep0 maxpacket: 8 [ 1327.904196][T12727] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1327.904216][T12727] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1327.904229][T12727] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1327.904240][T12727] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1327.905453][T12727] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1327.905478][T12727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.259136][T12727] usb 4-1: GET_CAPABILITIES returned 0 [ 1328.259553][T12727] usbtmc 4-1:16.0: can't read capabilities [ 1328.890450][T18479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3705'. [ 1329.079106][T10845] cp2112 0003:10C4:EA90.001A: error reading lock byte: -110 [ 1329.110568][T11083] usb 4-1: USB disconnect, device number 25 [ 1329.315823][T18483] binder_alloc: 18482: binder_alloc_buf size 64768 failed, no address space [ 1329.315909][T18483] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 1330.527486][T15221] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 1330.555139][ T9] usb 7-1: USB disconnect, device number 45 [ 1330.686268][T15221] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1330.686294][T15221] usb 5-1: config 0 has no interface number 0 [ 1330.686368][T15221] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1330.686387][T15221] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1330.686411][T15221] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1330.686433][T15221] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1330.686456][T15221] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1330.686475][T15221] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1330.686513][T15221] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1330.686533][T15221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.738780][T15221] usb 5-1: config 0 descriptor?? [ 1330.739916][T18487] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1330.870299][T15221] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1330.973214][T12727] usb 5-1: USB disconnect, device number 40 [ 1331.045499][T12727] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1331.139653][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3716'. [ 1331.710604][T18515] binder_alloc: 18514: binder_alloc_buf size 64768 failed, no address space [ 1331.710618][T18515] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 1331.796923][T11083] usb 7-1: new low-speed USB device number 46 using dummy_hcd [ 1332.004970][T11083] usb 7-1: config 7 has an invalid interface number: 252 but max is 0 [ 1332.004987][T11083] usb 7-1: config 7 has no interface number 0 [ 1332.005006][T11083] usb 7-1: config 7 interface 252 has no altsetting 0 [ 1332.050545][T11083] usb 7-1: string descriptor 0 read error: -22 [ 1332.050636][T11083] usb 7-1: New USB device found, idVendor=bbb7, idProduct=0005, bcdDevice=56.c0 [ 1332.050648][T11083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.522148][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3727'. [ 1333.906890][ T9] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 1334.076400][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1334.076427][ T9] usb 5-1: config 0 has no interface number 0 [ 1334.076474][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1334.076495][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1334.076519][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1334.076541][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1334.076564][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1334.076584][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1334.076625][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1334.076646][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.083294][ T9] usb 5-1: config 0 descriptor?? [ 1334.127727][T18538] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1334.210726][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1334.334247][T18538] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1334.351647][ T9] usb 5-1: USB disconnect, device number 41 [ 1334.377787][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1334.384074][T18543] binder_alloc: 18542: binder_alloc_buf size 64768 failed, no address space [ 1334.384094][T18543] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 1334.704324][ T9] usb 7-1: USB disconnect, device number 46 [ 1334.719067][T18550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1335.235214][T18550] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3733'. [ 1335.259877][T18550] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3733'. [ 1335.375856][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3739'. [ 1335.482090][T12727] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1335.618381][T12727] usb 5-1: device descriptor read/64, error -71 [ 1335.877098][T12727] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1336.006842][T12727] usb 5-1: device descriptor read/64, error -71 [ 1336.064288][T18575] binder_alloc: 18574: binder_alloc_buf size 64768 failed, no address space [ 1336.064303][T18575] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 1336.126919][T12727] usb usb5-port1: attempt power cycle [ 1336.226977][ T9] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1336.317366][T18578] tipc: Started in network mode [ 1336.317385][T18578] tipc: Node identity 966ea5c2d868, cluster identity 4711 [ 1336.333491][T18578] tipc: Enabled bearer , priority 0 [ 1336.335801][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3745'. [ 1336.378811][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.385231][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1336.386543][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1336.386567][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1336.386585][ T9] usb 7-1: SerialNumber: syz [ 1336.468415][T18581] tipc: Resetting bearer [ 1336.486917][T12727] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1336.510586][T12727] usb 5-1: device descriptor read/8, error -71 [ 1336.731007][ T9] usb 7-1: 0:2 : does not exist [ 1336.731094][ T9] usb 7-1: unit 255 not found! [ 1336.732527][T18577] tipc: Disabling bearer [ 1336.756897][T12727] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1336.769675][ T9] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1336.777496][T12727] usb 5-1: device descriptor read/8, error -71 [ 1336.806990][ T9] usb 7-1: USB disconnect, device number 47 [ 1336.896483][T12727] usb usb5-port1: unable to enumerate USB device [ 1336.949171][T18230] udevd[18230]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1337.591241][T18601] binder_alloc: 18599: pid 18599 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1337.594601][T18601] binder: 18599:18601 ioctl c0306201 0 returned -14 [ 1339.607267][T18639] binder_alloc: 18638: pid 18638 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1339.607748][T18639] binder: 18638:18639 ioctl c0306201 0 returned -14 [ 1340.336857][ T193] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1340.500002][ T193] usb 6-1: device descriptor read/64, error -71 [ 1340.519995][T18662] binder: 18650:18662 ioctl 4018620d 0 returned -22 [ 1340.899853][T18666] fuse: Unknown parameter 'user_i00000000000000000000' [ 1340.932772][ T193] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1341.025458][T18670] binder_alloc: 18668: pid 18668 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1341.025744][T18670] binder: 18668:18670 ioctl c0306201 0 returned -14 [ 1341.056834][ T193] usb 6-1: device descriptor read/64, error -71 [ 1341.212792][ T193] usb usb6-port1: attempt power cycle [ 1341.378108][T18677] syz_tun: entered allmulticast mode [ 1341.378531][T18677] syz_tun: left allmulticast mode [ 1341.626878][ T193] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1341.657280][ T193] usb 6-1: device descriptor read/8, error -71 [ 1341.896984][ T193] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1341.945259][ T193] usb 6-1: device descriptor read/8, error -71 [ 1342.297092][ T193] usb usb6-port1: unable to enumerate USB device [ 1342.855936][T18662] syz.3.3772 (18662): drop_caches: 2 [ 1343.907296][T18703] binder_alloc: 18701: pid 18701 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1344.100064][T18711] syz_tun: entered allmulticast mode [ 1344.101252][T18711] syz_tun: left allmulticast mode [ 1344.135355][T18715] fuse: Unknown parameter 'user_i00000000000000000000' [ 1345.527880][ T37] audit: type=1326 audit(1764808232.827:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18709 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1345.527934][ T37] audit: type=1326 audit(1764808232.827:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18709 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1345.527975][ T37] audit: type=1326 audit(1764808232.827:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18709 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1345.528014][ T37] audit: type=1326 audit(1764808232.827:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18709 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1345.528055][ T37] audit: type=1326 audit(1764808232.827:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18709 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1345.528378][ T37] audit: type=1326 audit(1764808232.827:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18709 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1345.528421][ T37] audit: type=1326 audit(1764808232.827:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18709 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1345.575248][ T37] audit: type=1326 audit(1764808232.887:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18709 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1345.576135][ T37] audit: type=1326 audit(1764808232.897:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18709 comm="syz.6.3790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1346.114410][T18743] binder_alloc: 18741: pid 18741 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1346.245509][T18749] binder: 18740:18749 ioctl 4018620d 0 returned -22 [ 1347.054395][T18749] syz.2.3801 (18749): drop_caches: 2 [ 1348.523365][T18766] kAFS: unable to lookup cell '' [ 1348.532336][T18766] kAFS: unable to lookup cell '(,c' [ 1348.725545][T18772] fuse: Unknown parameter 'user_i00000000000000000000' [ 1348.855295][T18770] tipc: Enabled bearer , priority 0 [ 1348.856870][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3810'. [ 1348.899988][T18770] tipc: Resetting bearer [ 1349.099292][T18769] tipc: Disabling bearer [ 1349.666998][T18783] binder_alloc: 18781: pid 18781 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1350.939833][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3818'. [ 1351.122987][T18796] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3815'. [ 1351.210940][T18802] openvswitch: netlink: Message has 16 unknown bytes. [ 1351.327077][ T193] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1351.353776][T18807] fuse: Unknown parameter 'user_id00000000000000000000' [ 1351.492050][ T193] usb 5-1: no configurations [ 1351.492063][ T193] usb 5-1: can't read configurations, error -22 [ 1351.730584][ T193] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1351.893996][ T193] usb 5-1: no configurations [ 1351.894015][ T193] usb 5-1: can't read configurations, error -22 [ 1351.894380][ T193] usb usb5-port1: attempt power cycle [ 1352.228184][ T193] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1352.250212][ T193] usb 5-1: no configurations [ 1352.250231][ T193] usb 5-1: can't read configurations, error -22 [ 1352.310081][T18812] syzkaller0: entered promiscuous mode [ 1352.310106][T18812] syzkaller0: entered allmulticast mode [ 1352.389811][ T193] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1352.408228][ T193] usb 5-1: no configurations [ 1352.408248][ T193] usb 5-1: can't read configurations, error -22 [ 1352.408595][ T193] usb usb5-port1: unable to enumerate USB device [ 1352.619944][T18816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3825'. [ 1353.527444][T18826] binder_alloc: 18823: pid 18823 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1354.821454][T18837] vivid-007: disconnect [ 1355.540065][T18850] fuse: Unknown parameter 'user_id00000000000000000000' [ 1355.563080][T18837] vivid-007: reconnect [ 1355.646960][T18852] kAFS: unable to lookup cell '' [ 1355.647217][T18852] kAFS: unable to lookup cell '(,c' [ 1356.320398][T18862] binder_alloc: 18861: pid 18861 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1358.301883][T11082] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 1358.450307][T11082] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1358.450359][T11082] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1358.450373][T11082] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1358.450392][T11082] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1358.450405][T11082] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1358.451459][T11082] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1358.451508][T11082] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1358.451522][T11082] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1358.451534][T11082] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1358.451546][T11082] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1358.452572][T11082] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1358.452620][T11082] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1358.452642][T11082] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1358.452654][T11082] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1358.452666][T11082] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1358.456209][T11082] usb 4-1: string descriptor 0 read error: -22 [ 1358.456334][T11082] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1358.456347][T11082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.599584][T11082] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1358.760362][T18879] loop7: detected capacity change from 0 to 7 [ 1358.760686][T18891] fuse: Unknown parameter 'user_id00000000000000000000' [ 1358.783868][ C1] blk_print_req_error: 5 callbacks suppressed [ 1358.783887][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.783918][ C1] buffer_io_error: 5 callbacks suppressed [ 1358.783930][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1358.793429][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.793465][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1358.807522][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.807559][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1358.813790][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.813824][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1358.860839][T11082] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1358.867905][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.867939][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1358.880891][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.880925][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1358.959081][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.959117][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1358.963991][T18879] ldm_validate_partition_table(): Disk read failed. [ 1358.964189][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.964215][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1359.028345][T18893] loop7: detected capacity change from 7 to 0 [ 1359.030420][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1359.030459][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1359.030576][T18879] Dev loop7: unable to read RDB block 0 [ 1359.030607][T18879] loop7: unable to read partition table [ 1359.059077][T18879] loop7: partition table beyond EOD, truncated [ 1359.069825][T11082] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1359.073220][T18879] loop_reread_partitions: partition scan of loop7 (SJ_+]֋ S'(J^Z (633)eeDϫ?Ƣ4+) failed (rc=-5) [ 1359.080629][ T3062] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1359.256847][T11082] usb 4-1: USB disconnect, device number 26 [ 1359.638335][T18904] binder_alloc: 18903: pid 18903 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1360.097575][T11082] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1360.276852][T11082] usb 7-1: Using ep0 maxpacket: 8 [ 1360.279409][T11082] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1360.279439][T11082] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1360.279462][T11082] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1360.279483][T11082] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1360.279529][T11082] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1360.279549][T11082] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.495938][T11082] usb 7-1: GET_CAPABILITIES returned 0 [ 1360.495985][T11082] usbtmc 7-1:16.0: can't read capabilities [ 1360.768604][T12727] usb 7-1: USB disconnect, device number 48 [ 1360.819685][T18930] kAFS: unable to lookup cell '' [ 1360.820164][T18930] kAFS: unable to lookup cell '(,c' [ 1360.951943][ T193] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 1361.139016][ T193] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1361.140163][ T193] usb 3-1: config 0 has no interface number 0 [ 1361.142343][ T193] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1361.142359][ T193] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1361.142372][ T193] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1361.142384][ T193] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1361.142397][ T193] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1361.142412][ T193] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1361.142449][ T193] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1361.142470][ T193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.146236][ T193] usb 3-1: config 0 descriptor?? [ 1361.147642][T18923] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1361.147885][T18923] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1361.260464][ T193] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1361.375697][ T193] usb 3-1: USB disconnect, device number 28 [ 1361.388402][ T193] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1361.448082][T18933] fuse: Bad value for 'fd' [ 1362.390252][T18943] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3865'. [ 1363.442260][ T37] audit: type=1326 audit(1764808250.697:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1363.442324][ T37] audit: type=1326 audit(1764808250.697:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1363.442361][ T37] audit: type=1326 audit(1764808250.697:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1363.442397][ T37] audit: type=1326 audit(1764808250.697:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1363.442435][ T37] audit: type=1326 audit(1764808250.697:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1363.442475][ T37] audit: type=1326 audit(1764808250.697:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1363.582327][ T37] audit: type=1326 audit(1764808250.897:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1363.586791][ T37] audit: type=1326 audit(1764808250.907:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f664f749 code=0x7ffc0000 [ 1365.496803][ T43] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 1365.508629][T18969] fuse: Bad value for 'fd' [ 1365.546849][T11083] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1365.659071][ T43] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1365.659098][ T43] usb 4-1: config 0 has no interface number 0 [ 1365.659149][ T43] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1365.659170][ T43] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1365.659193][ T43] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1365.659215][ T43] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1365.659239][ T43] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1365.659261][ T43] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1365.659301][ T43] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1365.659321][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.699816][T11083] usb 5-1: Using ep0 maxpacket: 8 [ 1365.761217][T11083] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1365.761249][T11083] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1365.761272][T11083] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1365.761294][T11083] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1365.761334][T11083] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1365.761355][T11083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.875581][ T43] usb 4-1: config 0 descriptor?? [ 1365.887387][T18965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1365.887516][T18965] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1365.948677][ T43] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1366.080025][T11083] usb 5-1: GET_CAPABILITIES returned 0 [ 1366.080072][T11083] usbtmc 5-1:16.0: can't read capabilities [ 1366.134310][T18973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3876'. [ 1366.147384][ T10] usb 4-1: USB disconnect, device number 27 [ 1366.185192][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1366.378399][ T43] usb 5-1: USB disconnect, device number 50 [ 1366.765478][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.765550][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.578314][T19006] syzkaller0: entered promiscuous mode [ 1368.578340][T19006] syzkaller0: entered allmulticast mode [ 1368.937574][T19013] fuse: Bad value for 'fd' [ 1369.117050][T19008] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3888'. [ 1369.606806][ T193] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1369.756789][ T193] usb 5-1: Using ep0 maxpacket: 8 [ 1369.759114][ T193] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1369.759144][ T193] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1369.759167][ T193] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1369.759188][ T193] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1369.759228][ T193] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1369.759248][ T193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.976910][ T193] usb 5-1: GET_CAPABILITIES returned 0 [ 1369.977072][ T193] usbtmc 5-1:16.0: can't read capabilities [ 1370.881470][ T193] usb 5-1: USB disconnect, device number 51 [ 1370.895120][T19027] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3894'. [ 1372.052123][T19053] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3904'. [ 1372.590386][ T5811] usb 7-1: new low-speed USB device number 49 using dummy_hcd [ 1373.491427][ T5811] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1373.491487][ T5811] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1373.491513][ T5811] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1373.491536][ T5811] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1373.491559][ T5811] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1373.494045][ T5811] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1373.494119][ T5811] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1373.494145][ T5811] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1373.494168][ T5811] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1373.494191][ T5811] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1373.495605][ T5811] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1373.495656][ T5811] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1373.495680][ T5811] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1373.495702][ T5811] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1373.495726][ T5811] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1373.500438][ T5811] usb 7-1: string descriptor 0 read error: -22 [ 1373.500610][ T5811] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1373.500632][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.622924][T19055] bond1: entered promiscuous mode [ 1373.622955][T19055] bond1: entered allmulticast mode [ 1373.623525][T19055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1373.624496][T19056] syzkaller0: entered promiscuous mode [ 1373.624518][T19056] syzkaller0: entered allmulticast mode [ 1373.700864][ T5811] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1374.731432][T19063] loop7: detected capacity change from 0 to 7 [ 1374.877243][T19077] loop7: detected capacity change from 7 to 0 [ 1374.881026][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1374.881049][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1374.881155][T19063] ldm_validate_partition_table(): Disk read failed. [ 1374.881174][T19063] Dev loop7: unable to read RDB block 0 [ 1374.881203][T19063] loop7: unable to read partition table [ 1374.881335][T19063] loop7: partition table beyond EOD, truncated [ 1374.882106][T19063] loop_reread_partitions: partition scan of loop7 (SJ_+]֋ S'(J^Z (633)eeDϫ?Ƣ4+) failed (rc=-5) [ 1376.947288][T12727] usb 7-1: USB disconnect, device number 49 [ 1377.467927][T19102] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1377.467943][T19102] openvswitch: netlink: Message has 16 unknown bytes. [ 1379.286805][T12727] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1379.351778][T19117] syzkaller0: entered promiscuous mode [ 1379.351803][T19117] syzkaller0: entered allmulticast mode [ 1379.436903][T12727] usb 7-1: Using ep0 maxpacket: 8 [ 1379.439593][T12727] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1379.439626][T12727] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1379.439652][T12727] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1379.439674][T12727] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1379.439715][T12727] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1379.439737][T12727] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.607328][T19121] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3919'. [ 1379.747963][T12727] usb 7-1: GET_CAPABILITIES returned 0 [ 1379.748007][T12727] usbtmc 7-1:16.0: can't read capabilities [ 1379.890997][T19130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1380.024815][ T10] usb 7-1: USB disconnect, device number 50 [ 1380.166871][T12727] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1380.323103][T12727] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.323129][T12727] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1380.326093][T12727] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1380.326119][T12727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1380.326138][T12727] usb 3-1: SerialNumber: syz [ 1381.089604][T19149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1381.293564][T12727] usb 3-1: 0:2 : does not exist [ 1381.293657][T12727] usb 3-1: unit 255 not found! [ 1381.347083][T12727] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1381.434894][T12727] usb 3-1: USB disconnect, device number 29 [ 1382.295891][ C0] vkms_vblank_simulate: vblank timer overrun [ 1382.752631][ C0] vkms_vblank_simulate: vblank timer overrun [ 1384.004881][T19201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3950'. [ 1384.276856][T10880] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1384.479179][T10880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.479205][T10880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1384.480434][T10880] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1384.480458][T10880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1384.480475][T10880] usb 5-1: SerialNumber: syz [ 1384.953399][ C0] vkms_vblank_simulate: vblank timer overrun [ 1384.974365][T10880] usb 5-1: 0:2 : does not exist [ 1384.974456][T10880] usb 5-1: unit 255 not found! [ 1385.054320][ C0] vkms_vblank_simulate: vblank timer overrun [ 1385.098315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1385.811970][T10880] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1385.901710][T10880] usb 5-1: USB disconnect, device number 52 [ 1385.984840][T18697] udevd[18697]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1386.324760][T19228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1386.689938][T19235] syzkaller0: entered promiscuous mode [ 1386.689954][T19235] syzkaller0: entered allmulticast mode [ 1386.908754][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.077226][T19242] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3963'. [ 1387.601607][ C1] vkms_vblank_simulate: vblank timer overrun [ 1387.874366][T19247] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3959'. [ 1388.085410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.663568][ C1] vkms_vblank_simulate: vblank timer overrun [ 1389.815133][T19270] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3975'. [ 1390.466521][ C1] vkms_vblank_simulate: vblank timer overrun [ 1391.076814][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1394.440120][T19315] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3990'. [ 1394.440138][T19315] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1396.102382][T19338] kAFS: unable to lookup cell '' [ 1396.103214][T19338] kAFS: unable to lookup cell '(,c' [ 1397.469440][T19350] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4003'. [ 1397.469458][T19350] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1402.293347][T19397] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1402.301039][T19397] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1402.313653][T19397] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1402.322770][T19397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1402.325399][T19397] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1403.042340][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.090683][T10880] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 1403.309619][T10880] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1403.309646][T10880] usb 7-1: config 0 has no interface number 0 [ 1403.309692][T10880] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1403.309704][T10880] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1403.309717][T10880] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1403.309729][T10880] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1403.309742][T10880] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1403.309754][T10880] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1403.309778][T10880] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1403.309788][T10880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.315882][T10880] usb 7-1: config 0 descriptor?? [ 1403.347765][T19405] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1403.347939][T19405] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1403.355049][T10880] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1403.450006][T19397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1403.465359][T19397] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1403.474690][T19397] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1403.487656][T19397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1403.489366][T19397] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1403.560562][ T10] usb 7-1: USB disconnect, device number 51 [ 1403.576930][ T10] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1403.930115][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.977416][ T5902] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 1404.219322][ T5902] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1404.219379][ T5902] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1404.219404][ T5902] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1404.219428][ T5902] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1404.219451][ T5902] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1404.235040][ T5902] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1404.235090][ T5902] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1404.235119][ T5902] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1404.235140][ T5902] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1404.235159][ T5902] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1404.236454][ T5902] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1404.236508][ T5902] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1404.236531][ T5902] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1404.236553][ T5902] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1404.236575][ T5902] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1404.404084][ T5902] usb 4-1: string descriptor 0 read error: -22 [ 1404.404185][ T5902] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1404.404197][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.436824][ T5822] Bluetooth: hci1: command tx timeout [ 1404.514936][ T5902] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1404.619907][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.550401][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.656857][ T5822] Bluetooth: hci0: command tx timeout [ 1406.526915][ T5822] Bluetooth: hci1: command tx timeout [ 1407.001756][T11083] usb 4-1: USB disconnect, device number 28 [ 1407.719226][ T5822] Bluetooth: hci0: command tx timeout [ 1408.260182][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.606769][ T5822] Bluetooth: hci1: command tx timeout [ 1408.656003][T19395] chnl_net:caif_netlink_parms(): no params data found [ 1409.251090][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.419401][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.565735][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.567060][ T6070] usb 7-1: new low-speed USB device number 52 using dummy_hcd [ 1409.667087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.735528][T19456] kAFS: unable to lookup cell '' [ 1409.735913][T19456] kAFS: unable to lookup cell '(,c' [ 1409.787817][ T6070] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1409.787843][ T6070] usb 7-1: config 0 has no interface number 0 [ 1409.787883][ T6070] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1409.787903][ T6070] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1409.787924][ T6070] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1409.787946][ T6070] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1409.787967][ T6070] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1409.787989][ T6070] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1409.788025][ T6070] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1409.788042][ T6070] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.795215][ T6070] usb 7-1: config 0 descriptor?? [ 1409.796193][T19450] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1409.796305][T19450] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1409.797338][ T5822] Bluetooth: hci0: command tx timeout [ 1409.867075][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.963139][ T6070] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1410.018819][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.026302][ T6070] usb 7-1: USB disconnect, device number 52 [ 1410.045615][ T6070] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1410.152773][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.231653][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.231918][T11082] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1410.331130][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.381483][T11082] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.381500][T11082] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1410.382453][T11082] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1410.382467][T11082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1410.382477][T11082] usb 5-1: SerialNumber: syz [ 1410.395638][T11082] usb 5-1: 0:2 : does not exist [ 1410.481011][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.610394][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.630222][T11082] usb 5-1: USB disconnect, device number 53 [ 1410.676791][ T5822] Bluetooth: hci1: command tx timeout [ 1410.868489][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.942373][ T12] dvmrp8 (unregistering): left allmulticast mode [ 1410.980301][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.078432][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.185010][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.504740][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.836162][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.920883][ C0] vkms_vblank_simulate: vblank timer overrun [ 1412.559579][ T5822] Bluetooth: hci0: command tx timeout [ 1412.751138][ C0] vkms_vblank_simulate: vblank timer overrun [ 1412.881733][ C0] vkms_vblank_simulate: vblank timer overrun [ 1413.116787][ T5902] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1413.320485][ T5902] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.320514][ T5902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1413.322043][ T5902] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1413.322073][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1413.322091][ T5902] usb 4-1: SerialNumber: syz [ 1413.464079][ T5902] usb 4-1: 0:2 : does not exist [ 1413.713997][T11082] usb 4-1: USB disconnect, device number 29 [ 1414.473647][ T12] bond0 (unregistering): Released all slaves [ 1414.833425][T19511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1414.926583][ T12] tipc: Left network mode [ 1415.091160][T19406] chnl_net:caif_netlink_parms(): no params data found [ 1415.126874][T10880] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1415.306851][T10880] usb 5-1: Using ep0 maxpacket: 8 [ 1415.327892][T10880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.327952][T10880] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1415.327973][T10880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.333714][T10880] usb 5-1: config 0 descriptor?? [ 1416.078202][T19395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.083597][T19395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.083840][T19395] bridge_slave_0: entered allmulticast mode [ 1416.117569][ C1] vkms_vblank_simulate: vblank timer overrun [ 1416.241144][T19395] bridge_slave_0: entered promiscuous mode [ 1416.271232][T19395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.271310][T19395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.271451][T19395] bridge_slave_1: entered allmulticast mode [ 1416.273373][T19395] bridge_slave_1: entered promiscuous mode [ 1416.993028][ C1] vkms_vblank_simulate: vblank timer overrun [ 1417.030240][T19395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1417.579456][ C1] vkms_vblank_simulate: vblank timer overrun [ 1417.953870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1418.093284][ C1] vkms_vblank_simulate: vblank timer overrun [ 1418.183994][T19395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.250319][T19406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.251016][T19406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.251204][T19406] bridge_slave_0: entered allmulticast mode [ 1418.252699][T19406] bridge_slave_0: entered promiscuous mode [ 1418.417937][T19406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.418142][T19406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.418298][T19406] bridge_slave_1: entered allmulticast mode [ 1418.419837][T19406] bridge_slave_1: entered promiscuous mode [ 1418.715884][T15221] usb 5-1: USB disconnect, device number 54 [ 1418.806945][ T12] hsr_slave_0: left promiscuous mode [ 1418.858208][ T12] hsr_slave_1: left promiscuous mode [ 1418.948905][T10880] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1419.057623][ T12] veth1_macvtap: left promiscuous mode [ 1419.057693][ T12] veth0_macvtap: left promiscuous mode [ 1419.057838][ T12] veth1_vlan: left promiscuous mode [ 1419.057938][ T12] veth0_vlan: left promiscuous mode [ 1419.111389][T10880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.111415][T10880] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1419.119257][T10880] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1419.119276][T10880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.119287][T10880] usb 4-1: Product: syz [ 1419.119294][T10880] usb 4-1: Manufacturer: syz [ 1419.119301][T10880] usb 4-1: SerialNumber: syz [ 1419.175711][T10880] usb 4-1: config 0 descriptor?? [ 1421.681539][T15221] usb 4-1: USB disconnect, device number 30 [ 1421.919870][T19545] kAFS: unable to lookup cell '' [ 1421.920100][T19545] kAFS: unable to lookup cell '(,c' [ 1424.180247][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4064'. [ 1427.141076][T19395] team0: Port device team_slave_0 added [ 1427.617085][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1427.655475][T19567] binder: 19565:19567 ioctl 4018620d 0 returned -22 [ 1427.684759][T19395] team0: Port device team_slave_1 added [ 1427.715300][T19406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1427.804012][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1427.804035][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.804044][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1427.804078][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.807087][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1427.807114][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1427.807131][ T9] usb 7-1: Product: syz [ 1427.807147][ T9] usb 7-1: Manufacturer: syz [ 1427.810490][T19567] syz.3.4067 (19567): drop_caches: 2 [ 1427.836006][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 1427.836025][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 1427.837423][ T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1427.936956][T19406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1428.235459][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.235504][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.380045][ T9] usb 7-1: USB disconnect, device number 53 [ 1428.792830][T19395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.792843][T19395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.792857][T19395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.931886][T19395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.931903][T19395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.931928][T19395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.932420][T19576] syz_tun: entered allmulticast mode [ 1429.015769][T19576] syz_tun: left allmulticast mode [ 1429.019853][T19406] team0: Port device team_slave_0 added [ 1429.032615][T19406] team0: Port device team_slave_1 added [ 1430.574127][T19589] kAFS: unable to lookup cell '' [ 1430.574502][T19589] kAFS: unable to lookup cell '(,c' [ 1430.629139][T19406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.629150][T19406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.629163][T19406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.793055][T19406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.793067][T19406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.793087][T19406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.802721][T19395] hsr_slave_0: entered promiscuous mode [ 1430.873345][T19395] hsr_slave_1: entered promiscuous mode [ 1430.875318][T19395] debugfs: 'hsr0' already exists in 'hsr' [ 1430.875336][T19395] Cannot create hsr debugfs directory [ 1431.486866][ T9] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1431.642039][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.642056][ T9] usb 5-1: config 0 has no interfaces? [ 1431.686859][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1431.686878][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.686889][ T9] usb 5-1: Product: syz [ 1431.686895][ T9] usb 5-1: Manufacturer: syz [ 1431.686902][ T9] usb 5-1: SerialNumber: syz [ 1431.688684][T19406] hsr_slave_0: entered promiscuous mode [ 1431.694826][ T9] usb 5-1: config 0 descriptor?? [ 1431.757698][T19406] hsr_slave_1: entered promiscuous mode [ 1431.758276][T19406] debugfs: 'hsr0' already exists in 'hsr' [ 1431.758290][T19406] Cannot create hsr debugfs directory [ 1431.900624][ T9] usb 5-1: USB disconnect, device number 55 [ 1432.513512][T19617] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4075'. [ 1432.735807][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.833491][T19622] syz_tun: entered allmulticast mode [ 1432.848792][ T6070] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1432.912193][T19621] syz_tun: left allmulticast mode [ 1433.005475][ T6070] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1433.021631][ T6070] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1433.021656][ T6070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1433.021670][ T6070] usb 5-1: Product: syz [ 1433.021680][ T6070] usb 5-1: Manufacturer: syz [ 1433.021689][ T6070] usb 5-1: SerialNumber: syz [ 1433.201931][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.278542][ T6070] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1433.467794][T19633] capability: warning: `syz.3.4081' uses deprecated v2 capabilities in a way that may be insecure [ 1433.817677][T19642] kAFS: unable to lookup cell '' [ 1433.869779][T19643] kAFS: unable to lookup cell '(,c' [ 1434.239120][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.616431][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.602638][T12727] usb 5-1: USB disconnect, device number 56 [ 1435.629013][T12727] usblp0: removed [ 1436.076880][ T6558] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1436.182517][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4087'. [ 1436.196090][ T12] bridge_slave_1: left allmulticast mode [ 1436.196116][ T12] bridge_slave_1: left promiscuous mode [ 1436.196499][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.232443][ T6558] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.232468][ T6558] usb 7-1: config 0 has no interfaces? [ 1436.235473][ T6558] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1436.235500][ T6558] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.235518][ T6558] usb 7-1: Product: syz [ 1436.235530][ T6558] usb 7-1: Manufacturer: syz [ 1436.235543][ T6558] usb 7-1: SerialNumber: syz [ 1436.258725][ T6558] usb 7-1: config 0 descriptor?? [ 1436.328261][ T12] bridge_slave_0: left allmulticast mode [ 1436.328289][ T12] bridge_slave_0: left promiscuous mode [ 1436.328569][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.495168][ T6558] usb 7-1: USB disconnect, device number 54 [ 1436.861990][T19688] kAFS: unable to lookup cell '' [ 1436.862057][T19692] kAFS: unable to lookup cell '(,c' [ 1438.460642][ T12] dvmrp8 (unregistering): left allmulticast mode [ 1438.695893][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1438.883263][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1438.887149][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1438.887175][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1438.887193][ T9] usb 5-1: Product: syz [ 1438.887206][ T9] usb 5-1: Manufacturer: syz [ 1438.887217][ T9] usb 5-1: SerialNumber: syz [ 1439.163553][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1439.868434][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.910310][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.953645][ T12] bond0 (unregistering): Released all slaves [ 1440.023262][T19680] tipc: Enabling of bearer rejected, failed to enable media [ 1440.023970][T19683] syzkaller0: entered promiscuous mode [ 1440.023992][T19683] syzkaller0: entered allmulticast mode [ 1440.034002][T19693] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4089'. [ 1440.168673][ T12] tipc: Left network mode [ 1440.744396][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4097'. [ 1441.416908][ T6558] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 1441.419933][T11083] usb 5-1: USB disconnect, device number 57 [ 1441.424458][T11083] usblp0: removed [ 1441.626604][ T6558] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.626629][ T6558] usb 7-1: config 0 has no interfaces? [ 1441.644509][ T6558] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1441.644568][ T6558] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.644579][ T6558] usb 7-1: Product: syz [ 1441.644586][ T6558] usb 7-1: Manufacturer: syz [ 1441.644593][ T6558] usb 7-1: SerialNumber: syz [ 1441.651389][ T6558] usb 7-1: config 0 descriptor?? [ 1441.907680][ T6558] usb 7-1: USB disconnect, device number 55 [ 1442.109594][ T12] hsr_slave_0: left promiscuous mode [ 1442.148789][ T12] hsr_slave_1: left promiscuous mode [ 1442.149439][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1442.149455][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.177856][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1442.177885][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.273572][ T12] veth1_macvtap: left promiscuous mode [ 1442.273688][ T12] veth0_macvtap: left promiscuous mode [ 1442.273940][ T12] veth1_vlan: left promiscuous mode [ 1442.274254][ T12] veth0_vlan: left promiscuous mode [ 1442.837453][ T12] pimreg (unregistering): left allmulticast mode [ 1444.016878][T12727] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1444.172296][T12727] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.172321][T12727] usb 7-1: config 0 has no interfaces? [ 1444.176351][T12727] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1444.176378][T12727] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.176395][T12727] usb 7-1: Product: syz [ 1444.176407][T12727] usb 7-1: Manufacturer: syz [ 1444.176419][T12727] usb 7-1: SerialNumber: syz [ 1444.229844][T12727] usb 7-1: config 0 descriptor?? [ 1444.436144][ T9] usb 7-1: USB disconnect, device number 56 [ 1445.677321][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1446.008054][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1446.587629][T19799] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4116'. [ 1449.707401][T19752] tipc: Enabling of bearer rejected, failed to enable media [ 1449.707672][T19406] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1449.838173][T19753] syzkaller0: entered promiscuous mode [ 1449.838198][T19753] syzkaller0: entered allmulticast mode [ 1449.966974][T19756] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4105'. [ 1450.251947][T19772] syzkaller0: entered promiscuous mode [ 1450.251963][T19772] syzkaller0: entered allmulticast mode [ 1450.253372][T19776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4110'. [ 1450.257694][T19406] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1450.577321][T19406] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1450.715968][T19406] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1450.984394][T19395] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1451.200110][T19395] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1451.568511][T10880] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1451.643865][T19395] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1451.726809][T10880] usb 7-1: Using ep0 maxpacket: 8 [ 1451.731059][T10880] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1451.731087][T10880] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1451.731106][T10880] usb 7-1: Product: syz [ 1451.731119][T10880] usb 7-1: Manufacturer: syz [ 1451.731131][T10880] usb 7-1: SerialNumber: syz [ 1451.739300][T10880] usb 7-1: config 0 descriptor?? [ 1451.871270][T19395] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1452.500693][T19406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.504288][T10880] usb 7-1: USB disconnect, device number 57 [ 1452.553015][T19395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.602563][T19406] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.617531][T19395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.651340][T19851] udevd[19851]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1452.653957][T11936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.654038][T11936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.695600][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.695722][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.755087][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.788186][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.838593][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.838748][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1453.164401][T19861] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4125'. [ 1454.939267][T19867] tipc: Enabling of bearer rejected, failed to enable media [ 1454.941539][T19867] syzkaller0: entered promiscuous mode [ 1454.941564][T19867] syzkaller0: entered allmulticast mode [ 1455.019216][T19876] tipc: Enabled bearer , priority 0 [ 1455.188934][T19874] syzkaller0: entered promiscuous mode [ 1455.188958][T19874] syzkaller0: entered allmulticast mode [ 1455.191536][T19881] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4128'. [ 1455.338263][T19874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4129'. [ 1455.388728][T19876] tipc: Resetting bearer [ 1455.760812][T19872] tipc: Resetting bearer [ 1455.937872][T19872] tipc: Disabling bearer [ 1456.240506][T19395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1456.254415][T19406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1456.430395][T19926] syz_tun: entered allmulticast mode [ 1456.448201][T19926] syz_tun: left allmulticast mode [ 1457.426429][T19395] veth0_vlan: entered promiscuous mode [ 1457.490697][T19965] syz_tun: entered allmulticast mode [ 1457.514099][T19965] dvmrp8: entered allmulticast mode [ 1457.531545][T19965] syz_tun: left allmulticast mode [ 1457.533904][T19395] veth1_vlan: entered promiscuous mode [ 1457.619782][T19406] veth0_vlan: entered promiscuous mode [ 1457.645134][T19406] veth1_vlan: entered promiscuous mode [ 1457.778437][T19395] veth0_macvtap: entered promiscuous mode [ 1457.805516][T19395] veth1_macvtap: entered promiscuous mode [ 1457.836235][T19406] veth0_macvtap: entered promiscuous mode [ 1457.931227][T19406] veth1_macvtap: entered promiscuous mode [ 1457.950370][T19395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.032171][T19395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.076365][ T1152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.091163][ T1152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.121026][ T1152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.140945][T19406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.146360][ T1152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.184760][T19406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.419173][ T3172] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.421687][ T3172] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.421732][ T3172] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.421763][ T3172] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.774844][T20001] syz_tun: entered allmulticast mode [ 1458.870877][T19997] syz_tun: left allmulticast mode [ 1458.936256][T15221] IPVS: starting estimator thread 0... [ 1458.984064][T20006] program syz.4.4157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1459.058338][T20009] IPVS: using max 8 ests per chain, 19200 per kthread [ 1459.297893][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.298110][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.623199][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.623219][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.086913][T10698] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1460.285294][T10698] usb 4-1: Using ep0 maxpacket: 16 [ 1460.310717][T10698] usb 4-1: config 0 has no interfaces? [ 1460.431022][T10698] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1460.431040][T10698] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1460.431050][T10698] usb 4-1: Manufacturer: syz [ 1460.434897][T10698] usb 4-1: config 0 descriptor?? [ 1460.488285][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.488306][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.523554][T19397] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1461.542398][T19397] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1461.544181][T19397] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1461.548915][T19397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1461.549749][T19397] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1462.053361][T20049] fuse: Unknown parameter 'group_i00000000000000000000' [ 1463.638358][T19397] Bluetooth: hci1: command tx timeout [ 1463.868743][ T3464] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.916890][ T9] usb 4-1: USB disconnect, device number 31 [ 1464.391870][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1464.444704][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1464.473984][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1464.487221][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1464.491593][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1464.576608][T20070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1465.093388][T20087] fuse: Unknown parameter 'group_i00000000000000000000' [ 1465.451602][ T3464] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.716914][T19397] Bluetooth: hci1: command tx timeout [ 1465.911780][ T3464] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.348216][ T3464] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.676781][T19397] Bluetooth: hci0: command tx timeout [ 1466.752684][T20110] fuse: Unknown parameter 'group_id00000000000000000000' [ 1467.131438][T20120] netlink: 'syz.3.4179': attribute type 10 has an invalid length. [ 1467.234592][T20119] binder: 20114:20119 ioctl 4018620d 0 returned -22 [ 1467.347564][T20119] syz.6.4187 (20119): drop_caches: 2 [ 1467.705466][T20120] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1467.797146][T19397] Bluetooth: hci1: command tx timeout [ 1468.484596][T20136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1468.650585][T20038] chnl_net:caif_netlink_parms(): no params data found [ 1468.766925][T19397] Bluetooth: hci0: command tx timeout [ 1469.511424][T20156] fuse: Unknown parameter 'group_id00000000000000000000' [ 1469.617929][ T3464] bridge_slave_1: left allmulticast mode [ 1469.617957][ T3464] bridge_slave_1: left promiscuous mode [ 1469.618235][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.769207][ T3464] bridge_slave_0: left allmulticast mode [ 1469.769226][ T3464] bridge_slave_0: left promiscuous mode [ 1469.769375][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.877066][T19397] Bluetooth: hci1: command tx timeout [ 1470.736862][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1470.838645][T19397] Bluetooth: hci0: command tx timeout [ 1470.907323][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.907349][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1470.917232][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1470.917259][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1470.917277][ T9] usb 7-1: SerialNumber: syz [ 1471.096862][ T1620] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 1471.259288][ T1620] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1471.259344][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1471.259369][ T1620] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1471.259392][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1471.259416][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1471.260829][ T1620] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1471.260879][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1471.260904][ T1620] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1471.260927][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1471.260950][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1471.262411][ T1620] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1471.262464][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1471.262488][ T1620] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1471.262511][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1471.262534][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1471.266591][ T1620] usb 5-1: string descriptor 0 read error: -22 [ 1471.266927][ T1620] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1471.266951][ T1620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.470313][ T1620] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1471.702067][T20185] loop7: detected capacity change from 0 to 7 [ 1471.705340][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1471.705441][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1471.706517][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1471.706615][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1471.707692][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1471.707780][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1471.708172][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1471.708200][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1471.708683][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1471.708711][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1471.709156][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1471.709183][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1471.709616][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1471.709643][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1471.709796][T20185] ldm_validate_partition_table(): Disk read failed. [ 1471.710054][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1471.710083][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1471.710422][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1471.710513][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1471.712948][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1471.713059][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1471.713626][T20185] Dev loop7: unable to read RDB block 0 [ 1471.715244][T20185] loop7: unable to read partition table [ 1471.715618][T20185] loop7: partition table beyond EOD, truncated [ 1471.731472][T20185] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1471.911661][T20185] loop7: detected capacity change from 7 to 0 [ 1472.916899][T19397] Bluetooth: hci0: command tx timeout [ 1475.160101][ T9] usb 7-1: 0:2 : does not exist [ 1475.160163][ T9] usb 7-1: unit 5 not found! [ 1475.251370][ T9] usb 7-1: USB disconnect, device number 58 [ 1475.354162][T20023] udevd[20023]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1476.480907][T20226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1477.069684][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1477.128881][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1477.149200][ T3464] bond0 (unregistering): Released all slaves [ 1477.396422][ T6558] usb 5-1: USB disconnect, device number 58 [ 1478.157344][T20038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.158499][T20038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.158749][T20038] bridge_slave_0: entered allmulticast mode [ 1478.162598][T20038] bridge_slave_0: entered promiscuous mode [ 1478.184404][T20038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.185131][T20038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.185397][T20038] bridge_slave_1: entered allmulticast mode [ 1478.231639][T20038] bridge_slave_1: entered promiscuous mode [ 1479.103213][T20038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.104811][T20073] chnl_net:caif_netlink_parms(): no params data found [ 1479.137536][T20038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.831015][T20283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1481.451055][T20038] team0: Port device team_slave_0 added [ 1481.524385][T20038] team0: Port device team_slave_1 added [ 1481.727076][ T3464] hsr_slave_0: left promiscuous mode [ 1481.776849][ T3464] hsr_slave_1: left promiscuous mode [ 1481.777619][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1481.777648][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1481.837688][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1481.837716][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.000438][ T3464] veth1_macvtap: left promiscuous mode [ 1482.000510][ T3464] veth0_macvtap: left promiscuous mode [ 1482.000661][ T3464] veth1_vlan: left promiscuous mode [ 1482.000768][ T3464] veth0_vlan: left promiscuous mode [ 1482.694056][ C1] vkms_vblank_simulate: vblank timer overrun [ 1482.816655][ C1] vkms_vblank_simulate: vblank timer overrun [ 1483.109460][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.135194][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.526989][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.594228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1485.712583][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 1486.007515][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 1486.343123][ C1] vkms_vblank_simulate: vblank timer overrun [ 1486.467042][ C1] vkms_vblank_simulate: vblank timer overrun [ 1486.743585][ C1] vkms_vblank_simulate: vblank timer overrun [ 1486.788429][ C1] vkms_vblank_simulate: vblank timer overrun [ 1486.841540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1489.515193][T20320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4227'. [ 1490.357993][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.358067][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.548007][T20038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.548024][T20038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.548050][T20038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.700313][T20038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.700331][T20038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.700357][T20038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1490.777373][T20073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.777586][T20073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.777802][T20073] bridge_slave_0: entered allmulticast mode [ 1490.791675][T20073] bridge_slave_0: entered promiscuous mode [ 1490.803787][T20073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.804410][T20073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.804603][T20073] bridge_slave_1: entered allmulticast mode [ 1490.817277][T20073] bridge_slave_1: entered promiscuous mode [ 1491.421592][T20038] hsr_slave_0: entered promiscuous mode [ 1491.422823][T20038] hsr_slave_1: entered promiscuous mode [ 1491.423697][T20038] debugfs: 'hsr0' already exists in 'hsr' [ 1491.423717][T20038] Cannot create hsr debugfs directory [ 1491.514046][T20073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1491.624695][T20073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1492.130637][T20073] team0: Port device team_slave_0 added [ 1492.512074][T20073] team0: Port device team_slave_1 added [ 1492.900518][ C0] vkms_vblank_simulate: vblank timer overrun [ 1493.048593][ C0] vkms_vblank_simulate: vblank timer overrun [ 1493.649144][ C0] vkms_vblank_simulate: vblank timer overrun [ 1494.113858][ T37] audit: type=1326 audit(1764808381.437:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20374 comm="syz.4.4238" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25ae00f749 code=0x0 [ 1494.278053][T20073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1494.278070][T20073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.278096][T20073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1494.392231][T20073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1494.392243][T20073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.392259][T20073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1494.589225][T20380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4239'. [ 1496.621471][ C0] vkms_vblank_simulate: vblank timer overrun [ 1496.761569][ T3464] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.310292][T20073] hsr_slave_0: entered promiscuous mode [ 1497.311565][T20073] hsr_slave_1: entered promiscuous mode [ 1497.312403][T20073] debugfs: 'hsr0' already exists in 'hsr' [ 1497.312419][T20073] Cannot create hsr debugfs directory [ 1497.536008][ T3464] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.766808][T15410] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1498.058998][T15410] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1498.059047][T15410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1498.059069][T15410] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1498.059105][T15410] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 1498.059125][T15410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.168342][T15410] usb 5-1: config 0 descriptor?? [ 1498.365120][T20401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1498.780205][ T3464] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.639923][ T3464] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.385067][T15410] usbhid 5-1:0.0: can't add hid device: -71 [ 1502.385196][T15410] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1502.410519][T15410] usb 5-1: USB disconnect, device number 59 [ 1504.077065][T11082] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1504.183378][ T3464] bridge_slave_1: left allmulticast mode [ 1504.183397][ T3464] bridge_slave_1: left promiscuous mode [ 1504.183562][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.234190][T11082] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 1504.234224][T11082] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.234246][T11082] usb 5-1: config 5 has no interface number 0 [ 1504.234279][T11082] usb 5-1: config 5 interface 123 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1504.234293][T11082] usb 5-1: config 5 interface 123 has no altsetting 0 [ 1504.236575][T11082] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1504.236601][T11082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.238350][T11082] usb 5-1: Product: syz [ 1504.238366][T11082] usb 5-1: Manufacturer: syz [ 1504.238379][T11082] usb 5-1: SerialNumber: syz [ 1504.319560][ T3464] bridge_slave_0: left allmulticast mode [ 1504.319657][ T3464] bridge_slave_0: left promiscuous mode [ 1504.320040][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.515117][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4257'. [ 1505.566241][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.687365][ C1] vkms_vblank_simulate: vblank timer overrun [ 1506.276944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.107481][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.207178][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.375321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.455669][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.553141][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.638883][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.715887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.804332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.885580][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.979284][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.053141][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.134117][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.205781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.293045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.375648][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.442186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.687682][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.747818][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.775965][ T3464] bond0 (unregistering): Released all slaves [ 1508.948032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.034197][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.097784][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.112500][T20038] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1509.225902][T20038] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1509.432418][T11082] comedi comedi5: Wrong number of endpoints [ 1509.432439][T11082] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1509.457284][T11082] usb 5-1: USB disconnect, device number 60 [ 1509.496936][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.784328][ C1] vkms_vblank_simulate: vblank timer overrun [ 1509.835212][ C1] vkms_vblank_simulate: vblank timer overrun [ 1510.674104][ T1620] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1510.688526][ T1620] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1511.887656][T20038] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1512.077828][T20038] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1512.967046][T11082] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 1512.976833][T20277] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 1513.107175][ T3464] hsr_slave_0: left promiscuous mode [ 1513.124783][T11082] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1513.124903][T11082] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1513.124930][T11082] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1513.124951][T11082] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1513.124964][T11082] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1513.126033][T11082] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1513.126082][T11082] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1513.126103][T11082] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1513.126116][T11082] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1513.126128][T11082] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1513.138785][T20277] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 1513.138809][T20277] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.138826][T20277] usb 7-1: config 5 has no interface number 0 [ 1513.138927][T20277] usb 7-1: config 5 interface 123 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1513.138953][T20277] usb 7-1: config 5 interface 123 has no altsetting 0 [ 1513.140853][T11082] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1513.140902][T11082] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1513.141498][T11082] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1513.141814][T11082] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1513.141839][T11082] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1513.146590][T11082] usb 5-1: string descriptor 0 read error: -22 [ 1513.148753][T11082] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1513.148776][T11082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.172935][T20277] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1513.172964][T20277] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.172983][T20277] usb 7-1: Product: syz [ 1513.172995][T20277] usb 7-1: Manufacturer: syz [ 1513.173007][T20277] usb 7-1: SerialNumber: syz [ 1513.255117][T11082] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1513.328737][ T3464] hsr_slave_1: left promiscuous mode [ 1513.330628][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1513.330655][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1513.406010][T20512] loop7: detected capacity change from 0 to 7 [ 1513.417568][ C0] blk_print_req_error: 5 callbacks suppressed [ 1513.417587][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.417618][ C0] buffer_io_error: 5 callbacks suppressed [ 1513.417630][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1513.418988][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.419017][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1513.419153][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1513.419169][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1513.419871][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.419900][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1513.420466][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.420495][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1513.425600][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.425634][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1513.425940][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.425968][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1513.426203][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.426231][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1513.476445][T20524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4283'. [ 1513.589645][T20512] ldm_validate_partition_table(): Disk read failed. [ 1513.626870][T20523] loop7: detected capacity change from 7 to 0 [ 1513.629262][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1513.629300][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1513.629444][T20512] Dev loop7: unable to read RDB block 0 [ 1513.629475][T20512] loop7: unable to read partition table [ 1513.629924][T20512] loop7: partition table beyond EOD, truncated [ 1513.630063][T20512] loop_reread_partitions: partition scan of loop7 (SJ_+]֋ S'(J^Z (633)eeDϫ?Ƣ4+) failed (rc=-5) [ 1514.102822][ T3464] veth1_macvtap: left promiscuous mode [ 1514.103131][ T3464] veth0_macvtap: left promiscuous mode [ 1514.105616][ T3464] veth1_vlan: left promiscuous mode [ 1514.105839][ T3464] veth0_vlan: left promiscuous mode [ 1515.790875][ T5902] usb 5-1: USB disconnect, device number 61 [ 1517.802167][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1517.824451][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1517.827096][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1517.834119][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1517.855461][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1518.264028][T20277] comedi comedi5: Wrong number of endpoints [ 1518.264042][T20277] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1519.661776][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 1519.997584][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 1520.064416][T19397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1520.072760][T19397] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1520.081778][T19397] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1520.083604][T19397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1520.084873][T19397] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1520.136278][T19397] Bluetooth: hci3: command tx timeout [ 1522.199323][T19397] Bluetooth: hci6: command tx timeout [ 1522.206966][T19397] Bluetooth: hci3: command tx timeout [ 1523.022383][ T5822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1523.026243][ T5822] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1523.039809][ T5822] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1523.055482][ T5822] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1523.056209][ T5822] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1523.366415][ T6070] usb 7-1: USB disconnect, device number 59 [ 1523.891064][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.103213][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.277068][ T5822] Bluetooth: hci3: command tx timeout [ 1524.277102][ T5822] Bluetooth: hci6: command tx timeout [ 1524.344161][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.375408][T20564] binder: 20558:20564 ioctl 4018620d 0 returned -22 [ 1524.560750][T20564] syz.4.4291 (20564): drop_caches: 2 [ 1524.623737][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.869305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.068900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.089883][T19397] Bluetooth: hci7: command tx timeout [ 1525.209331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.475627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.599972][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.104876][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.143010][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.356848][T19397] Bluetooth: hci6: command tx timeout [ 1526.356884][T19397] Bluetooth: hci3: command tx timeout [ 1526.406777][T10880] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 1526.559086][T10880] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1526.559147][T10880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1526.559172][T10880] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1526.559195][T10880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1526.559219][T10880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1526.562752][T10880] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1526.562805][T10880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1526.562830][T10880] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1526.562854][T10880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1526.562876][T10880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1526.563995][T10880] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1526.564044][T10880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1526.564069][T10880] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1526.564092][T10880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1526.564116][T10880] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1526.632230][T10880] usb 5-1: string descriptor 0 read error: -22 [ 1526.632385][T10880] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1526.632406][T10880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.686383][T10880] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1526.929726][T20570] loop7: detected capacity change from 0 to 7 [ 1526.930670][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.930702][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1526.930961][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.930983][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1526.931208][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.931230][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1526.931476][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.931500][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1526.935095][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1526.935127][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1527.028698][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1527.028742][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1527.107509][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1527.107544][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1527.107617][T20575] loop7: detected capacity change from 7 to 0 [ 1527.107884][T20570] ldm_validate_partition_table(): Disk read failed. [ 1527.107916][T20570] Dev loop7: unable to read RDB block 0 [ 1527.107946][T20570] loop7: unable to read partition table [ 1527.108678][T20570] loop7: partition table beyond EOD, truncated [ 1527.108712][T20570] loop_reread_partitions: partition scan of loop7 (SJ_+]֋ S'(J^Z (633)eeDϫ?Ƣ4+) failed (rc=-5) [ 1527.157280][T19397] Bluetooth: hci7: command tx timeout [ 1528.393169][T20550] chnl_net:caif_netlink_parms(): no params data found [ 1528.436862][T19397] Bluetooth: hci6: command tx timeout [ 1529.069637][ T3464] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.153127][ T6070] usb 5-1: USB disconnect, device number 62 [ 1529.236968][T19397] Bluetooth: hci7: command tx timeout [ 1529.398441][T20534] chnl_net:caif_netlink_parms(): no params data found [ 1529.776676][ T3464] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.272329][ T3464] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.398995][T20544] chnl_net:caif_netlink_parms(): no params data found [ 1530.432108][T20550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.444256][T20550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.444453][T20550] bridge_slave_0: entered allmulticast mode [ 1530.446185][T20550] bridge_slave_0: entered promiscuous mode [ 1530.680241][ T3464] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.733958][T20550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.734109][T20550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.734332][T20550] bridge_slave_1: entered allmulticast mode [ 1530.759441][T20550] bridge_slave_1: entered promiscuous mode [ 1531.316801][T19397] Bluetooth: hci7: command tx timeout [ 1531.425172][T20534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.425595][T20534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.425851][T20534] bridge_slave_0: entered allmulticast mode [ 1531.462948][T20534] bridge_slave_0: entered promiscuous mode [ 1531.468329][T20550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1531.527243][T20534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.527378][T20534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.527632][T20534] bridge_slave_1: entered allmulticast mode [ 1531.530431][T20534] bridge_slave_1: entered promiscuous mode [ 1531.537575][T20277] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1531.564551][T20550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1531.890954][T20277] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.891007][T20277] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1531.891021][T20277] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1531.891045][T20277] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1531.891056][T20277] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.905744][T20277] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1531.906322][T20277] usb 7-1: invalid MIDI out EP 0 [ 1532.330661][T20649] udevd[20649]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1532.381450][T20277] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1532.452113][T20642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.456990][T20642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.591654][ T1620] usb 7-1: USB disconnect, device number 60 [ 1532.855257][T20534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1532.947926][T20550] team0: Port device team_slave_0 added [ 1532.948739][T20544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.948871][T20544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.948996][T20544] bridge_slave_0: entered allmulticast mode [ 1532.950647][T20544] bridge_slave_0: entered promiscuous mode [ 1532.954382][T20534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1533.137295][ T1620] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 1533.152169][T20544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.152558][T20544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.153013][T20544] bridge_slave_1: entered allmulticast mode [ 1533.155668][T20544] bridge_slave_1: entered promiscuous mode [ 1533.163166][T20550] team0: Port device team_slave_1 added [ 1533.289440][ T1620] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1533.289495][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1533.289509][ T1620] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1533.289522][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1533.289535][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1533.290653][ T1620] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1533.290707][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1533.290731][ T1620] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1533.290744][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1533.290756][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1533.292065][ T1620] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1533.292130][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1533.292155][ T1620] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1533.292176][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1533.292295][ T1620] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1533.296038][ T1620] usb 5-1: string descriptor 0 read error: -22 [ 1533.296247][ T1620] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1533.296260][ T1620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.551278][ T1620] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1533.672126][T20534] team0: Port device team_slave_0 added [ 1533.753992][T20653] loop7: detected capacity change from 0 to 7 [ 1533.757370][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1533.757404][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1533.759885][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1533.759915][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1533.760278][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1533.760305][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1533.760547][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1533.760572][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1533.760836][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1533.760861][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1533.761093][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1533.761119][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1533.761291][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1533.761315][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1533.761418][T20653] ldm_validate_partition_table(): Disk read failed. [ 1533.761596][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1533.761621][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1533.909679][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1533.909716][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1533.951116][T20654] loop7: detected capacity change from 7 to 0 [ 1533.952887][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1533.952910][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1533.984384][T20653] Dev loop7: unable to read RDB block 0 [ 1533.984417][T20653] loop7: unable to read partition table [ 1533.984616][T20653] loop7: partition table beyond EOD, truncated [ 1533.985522][T20653] loop_reread_partitions: partition scan of loop7 (SJ_+]֋ S'(J^Z (633)eeDϫ?Ƣ4+) failed (rc=-5) [ 1534.071299][T20534] team0: Port device team_slave_1 added [ 1534.095129][T20544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.188813][T20550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.188825][T20550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.189449][T20550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.316256][T20544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.386461][T20550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.386479][T20550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.386505][T20550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.693041][T20534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.693058][T20534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.693085][T20534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.858119][T20534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.858135][T20534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.858160][T20534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.921269][T20544] team0: Port device team_slave_0 added [ 1534.943614][T20544] team0: Port device team_slave_1 added [ 1535.913554][T11083] usb 5-1: USB disconnect, device number 63 [ 1536.012942][T20550] hsr_slave_0: entered promiscuous mode [ 1536.024262][T20550] hsr_slave_1: entered promiscuous mode [ 1536.027305][T20550] debugfs: 'hsr0' already exists in 'hsr' [ 1536.027331][T20550] Cannot create hsr debugfs directory [ 1536.330405][T20544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.330417][T20544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.330432][T20544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.468758][T20544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.468774][T20544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.468797][T20544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.795584][T20534] hsr_slave_0: entered promiscuous mode [ 1536.796493][T20534] hsr_slave_1: entered promiscuous mode [ 1536.798169][T20534] debugfs: 'hsr0' already exists in 'hsr' [ 1536.798192][T20534] Cannot create hsr debugfs directory [ 1537.525012][T20544] hsr_slave_0: entered promiscuous mode [ 1537.571489][T20544] hsr_slave_1: entered promiscuous mode [ 1537.586519][T20544] debugfs: 'hsr0' already exists in 'hsr' [ 1537.586549][T20544] Cannot create hsr debugfs directory [ 1538.496853][T10698] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1538.837025][T10698] usb 5-1: Using ep0 maxpacket: 8 [ 1538.843793][T10698] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1538.843821][T10698] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1538.843835][T10698] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1538.843846][T10698] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1538.843869][T10698] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1538.843880][T10698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.098024][T10698] usb 5-1: GET_CAPABILITIES returned 0 [ 1539.098053][T10698] usbtmc 5-1:16.0: can't read capabilities [ 1539.888822][ T3464] bridge_slave_1: left allmulticast mode [ 1539.888843][ T3464] bridge_slave_1: left promiscuous mode [ 1539.889010][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.996697][ T3464] bridge_slave_0: left allmulticast mode [ 1540.037092][ T3464] bridge_slave_0: left promiscuous mode [ 1540.037393][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.140944][ T3464] bridge_slave_1: left allmulticast mode [ 1540.140964][ T3464] bridge_slave_1: left promiscuous mode [ 1540.141139][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.227906][ T3464] bridge_slave_0: left allmulticast mode [ 1540.227925][ T3464] bridge_slave_0: left promiscuous mode [ 1540.228088][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.329726][ T3464] bridge_slave_1: left allmulticast mode [ 1540.329747][ T3464] bridge_slave_1: left promiscuous mode [ 1540.329893][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.397763][ T3464] bridge_slave_0: left allmulticast mode [ 1540.397783][ T3464] bridge_slave_0: left promiscuous mode [ 1540.397946][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.876790][T10698] usb 7-1: new low-speed USB device number 61 using dummy_hcd [ 1541.048559][T10698] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1541.048620][T10698] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1541.048634][T10698] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1541.048647][T10698] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1541.048659][T10698] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1541.049853][T10698] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1541.049919][T10698] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1541.049943][T10698] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1541.049956][T10698] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1541.049969][T10698] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1541.051052][T10698] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1541.051104][T10698] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1541.051125][T10698] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1541.051137][T10698] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1541.051158][T10698] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1541.055246][T10698] usb 7-1: string descriptor 0 read error: -22 [ 1541.055354][T10698] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1541.055365][T10698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.122769][T10698] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1541.171882][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.322350][T20689] loop7: detected capacity change from 0 to 7 [ 1541.323291][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.323320][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1541.323779][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.323810][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1541.324004][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.324029][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1541.324193][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.324221][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1541.324436][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.324458][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1541.324715][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.324738][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1541.325032][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.325048][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1541.325093][T20689] ldm_validate_partition_table(): Disk read failed. [ 1541.325255][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.325279][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1541.325446][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.325473][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1541.325652][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1541.325679][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1541.325870][T20689] Dev loop7: unable to read RDB block 0 [ 1541.326537][T20689] loop7: unable to read partition table [ 1541.358378][T20689] loop7: partition table beyond EOD, truncated [ 1541.358427][T20689] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1541.485628][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.497424][T20689] loop7: detected capacity change from 7 to 0 [ 1541.536320][T20689] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1541.592259][T10698] usb 7-1: USB disconnect, device number 61 [ 1541.618053][ T3464] bond0 (unregistering): Released all slaves [ 1541.739759][ T6070] usb 5-1: USB disconnect, device number 64 [ 1542.763251][ T3464] dvmrp8 (unregistering): left allmulticast mode [ 1544.307692][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1544.367529][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1544.448321][ T3464] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1544.556536][ T3464] bond0 (unregistering): Released all slaves [ 1544.937769][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1545.030480][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1545.068961][ T3464] bond0 (unregistering): Released all slaves [ 1545.400994][ T3464] tipc: Left network mode [ 1545.593495][T20718] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4320'. [ 1545.685068][T20550] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1545.795036][T20550] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1546.064705][ T3464] ------------[ cut here ]------------ [ 1546.064715][ T3464] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 1546.064729][ T3464] WARNING: net/mac80211/driver-ops.c:366 at 0x0, CPU#1: kworker/u8:13/3464 [ 1546.064749][ T3464] Modules linked in: [ 1546.064764][ T3464] CPU: 1 UID: 0 PID: 3464 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1546.064776][ T3464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1546.064784][ T3464] Workqueue: netns cleanup_net [ 1546.064875][ T3464] RIP: 0010:drv_unassign_vif_chanctx+0x4d4/0x7b0 [ 1546.064888][ T3464] Code: 00 48 8d b0 20 01 00 00 49 8d 8d c8 0a 00 00 48 85 c0 48 0f 44 f1 42 0f b6 44 3d 00 84 c0 0f 85 95 01 00 00 41 8b 16 48 89 df <67> 48 0f b9 3a e9 15 fd ff ff e8 6d e6 90 f7 90 0f 0b 90 e9 4e fe [ 1546.064897][ T3464] RSP: 0018:ffffc9000da9f200 EFLAGS: 00010246 [ 1546.064905][ T3464] RAX: 0000000000000000 RBX: ffffffff8ee8b8a0 RCX: ffff8880272959c8 [ 1546.064913][ T3464] RDX: 0000000000000000 RSI: ffff888027294120 RDI: ffffffff8ee8b8a0 [ 1546.064920][ T3464] RBP: 1ffff11004e52b37 R08: 0000000000000000 R09: 0000000000000000 [ 1546.064926][ T3464] R10: dffffc0000000000 R11: fffffbfff1db2a2f R12: ffff888027297090 [ 1546.064933][ T3464] R13: ffff888027294f00 R14: ffff8880272959b8 R15: dffffc0000000000 [ 1546.064941][ T3464] FS: 0000000000000000(0000) GS:ffff888126e81000(0000) knlGS:0000000000000000 [ 1546.064955][ T3464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1546.064962][ T3464] CR2: 00005602895df950 CR3: 000000004e77a000 CR4: 00000000003526f0 [ 1546.064972][ T3464] Call Trace: [ 1546.064977][ T3464] [ 1546.064987][ T3464] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 1546.065008][ T3464] __ieee80211_link_release_channel+0x33b/0x4a0 [ 1546.065021][ T3464] ? __pfx_ieee80211_uninit+0x10/0x10 [ 1546.065033][ T3464] unregister_netdevice_many_notify+0x1cbb/0x2300 [ 1546.065095][ T3464] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1546.065114][ T3464] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1546.065127][ T3464] ? lockdep_hardirqs_on+0x98/0x140 [ 1546.065139][ T3464] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1546.065154][ T3464] unregister_netdevice_queue+0x317/0x350 [ 1546.065168][ T3464] ? kernfs_remove_by_name_ns+0xe8/0x130 [ 1546.065180][ T3464] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1546.065202][ T3464] _cfg80211_unregister_wdev+0x155/0x570 [ 1546.065222][ T3464] ieee80211_remove_interfaces+0x48a/0x6c0 [ 1546.065354][ T3464] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1546.065390][ T3464] ? ieee80211_unregister_hw+0x55/0x2c0 [ 1546.065414][ T3464] ? mutex_lock_nested+0x16a/0x1d0 [ 1546.065442][ T3464] ieee80211_unregister_hw+0x5d/0x2c0 [ 1546.065469][ T3464] mac80211_hwsim_del_radio+0x275/0x460 [ 1546.065576][ T3464] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1546.065596][ T3464] ? rt_spin_unlock+0x150/0x200 [ 1546.065619][ T3464] ? rt_spin_unlock+0x161/0x200 [ 1546.065640][ T3464] hwsim_exit_net+0xf18/0xfd0 [ 1546.065686][ T3464] ? hwsim_exit_net+0xcb/0xfd0 [ 1546.065711][ T3464] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1546.065739][ T3464] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1546.065766][ T3464] ops_undo_list+0x49a/0x990 [ 1546.065795][ T3464] ? __pfx_ops_undo_list+0x10/0x10 [ 1546.065813][ T3464] ? rt_spin_unlock+0x150/0x200 [ 1546.065836][ T3464] ? rt_spin_unlock+0x161/0x200 [ 1546.065856][ T3464] cleanup_net+0x4de/0x7b0 [ 1546.065881][ T3464] ? __pfx_cleanup_net+0x10/0x10 [ 1546.065904][ T3464] ? _raw_spin_unlock_irq+0x23/0x50 [ 1546.065972][ T3464] ? process_scheduled_works+0x9ef/0x1770 [ 1546.065991][ T3464] ? process_scheduled_works+0x9ef/0x1770 [ 1546.066011][ T3464] process_scheduled_works+0xad1/0x1770 [ 1546.066065][ T3464] ? __pfx_process_scheduled_works+0x10/0x10 [ 1546.066105][ T3464] worker_thread+0x8a0/0xda0 [ 1546.066129][ T3464] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1546.066160][ T3464] ? __kthread_parkme+0x7b/0x200 [ 1546.066190][ T3464] kthread+0x711/0x8a0 [ 1546.066218][ T3464] ? __pfx_worker_thread+0x10/0x10 [ 1546.066237][ T3464] ? __pfx_kthread+0x10/0x10 [ 1546.066257][ T3464] ? rt_spin_unlock+0x150/0x200 [ 1546.066279][ T3464] ? rt_spin_unlock+0x161/0x200 [ 1546.066295][ T3464] ? __pfx_kthread+0x10/0x10 [ 1546.066319][ T3464] ret_from_fork+0x599/0xb30 [ 1546.066351][ T3464] ? __pfx_ret_from_fork+0x10/0x10 [ 1546.066382][ T3464] ? __switch_to_asm+0x39/0x70 [ 1546.066404][ T3464] ? __switch_to_asm+0x33/0x70 [ 1546.066425][ T3464] ? __pfx_kthread+0x10/0x10 [ 1546.066449][ T3464] ret_from_fork_asm+0x1a/0x30 [ 1546.066490][ T3464] [ 1546.066510][ T3464] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1546.066525][ T3464] CPU: 1 UID: 0 PID: 3464 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1546.066546][ T3464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1546.066558][ T3464] Workqueue: netns cleanup_net [ 1546.066577][ T3464] Call Trace: [ 1546.066585][ T3464] [ 1546.066596][ T3464] dump_stack_lvl+0x99/0x250 [ 1546.066616][ T3464] ? __asan_memcpy+0x40/0x70 [ 1546.066638][ T3464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1546.066659][ T3464] ? __pfx__printk+0x10/0x10 [ 1546.066695][ T3464] vpanic+0x237/0x6d0 [ 1546.066715][ T3464] ? __pfx_vpanic+0x10/0x10 [ 1546.066732][ T3464] ? is_bpf_text_address+0x292/0x2b0 [ 1546.066749][ T3464] ? is_bpf_text_address+0x26/0x2b0 [ 1546.066776][ T3464] panic+0xb9/0xc0 [ 1546.066796][ T3464] ? __pfx_panic+0x10/0x10 [ 1546.066824][ T3464] ? ret_from_fork_asm+0x1a/0x30 [ 1546.066850][ T3464] __warn+0x317/0x4b0 [ 1546.066872][ T3464] __report_bug+0x288/0x500 [ 1546.066891][ T3464] ? __pfx___report_bug+0x10/0x10 [ 1546.066914][ T3464] report_bug_entry+0x16a/0x220 [ 1546.066933][ T3464] ? drv_unassign_vif_chanctx+0x4d4/0x7b0 [ 1546.066942][ T3464] ? drv_unassign_vif_chanctx+0x4d9/0x7b0 [ 1546.066952][ T3464] handle_bug+0xca/0x200 [ 1546.066966][ T3464] exc_invalid_op+0x1a/0x50 [ 1546.066979][ T3464] asm_exc_invalid_op+0x1a/0x20 [ 1546.066989][ T3464] RIP: 0010:drv_unassign_vif_chanctx+0x4d4/0x7b0 [ 1546.067000][ T3464] Code: 00 48 8d b0 20 01 00 00 49 8d 8d c8 0a 00 00 48 85 c0 48 0f 44 f1 42 0f b6 44 3d 00 84 c0 0f 85 95 01 00 00 41 8b 16 48 89 df <67> 48 0f b9 3a e9 15 fd ff ff e8 6d e6 90 f7 90 0f 0b 90 e9 4e fe [ 1546.067008][ T3464] RSP: 0018:ffffc9000da9f200 EFLAGS: 00010246 [ 1546.067019][ T3464] RAX: 0000000000000000 RBX: ffffffff8ee8b8a0 RCX: ffff8880272959c8 [ 1546.067027][ T3464] RDX: 0000000000000000 RSI: ffff888027294120 RDI: ffffffff8ee8b8a0 [ 1546.067034][ T3464] RBP: 1ffff11004e52b37 R08: 0000000000000000 R09: 0000000000000000 [ 1546.067041][ T3464] R10: dffffc0000000000 R11: fffffbfff1db2a2f R12: ffff888027297090 [ 1546.067050][ T3464] R13: ffff888027294f00 R14: ffff8880272959b8 R15: dffffc0000000000 [ 1546.067073][ T3464] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 1546.067107][ T3464] __ieee80211_link_release_channel+0x33b/0x4a0 [ 1546.067130][ T3464] ? __pfx_ieee80211_uninit+0x10/0x10 [ 1546.067151][ T3464] unregister_netdevice_many_notify+0x1cbb/0x2300 [ 1546.067189][ T3464] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1546.067227][ T3464] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1546.067243][ T3464] ? lockdep_hardirqs_on+0x98/0x140 [ 1546.067255][ T3464] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1546.067269][ T3464] unregister_netdevice_queue+0x317/0x350 [ 1546.067283][ T3464] ? kernfs_remove_by_name_ns+0xe8/0x130 [ 1546.067295][ T3464] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1546.067314][ T3464] _cfg80211_unregister_wdev+0x155/0x570 [ 1546.067329][ T3464] ieee80211_remove_interfaces+0x48a/0x6c0 [ 1546.067344][ T3464] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1546.067356][ T3464] ? ieee80211_unregister_hw+0x55/0x2c0 [ 1546.067369][ T3464] ? mutex_lock_nested+0x16a/0x1d0 [ 1546.067386][ T3464] ieee80211_unregister_hw+0x5d/0x2c0 [ 1546.067401][ T3464] mac80211_hwsim_del_radio+0x275/0x460 [ 1546.067416][ T3464] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1546.067426][ T3464] ? rt_spin_unlock+0x150/0x200 [ 1546.067438][ T3464] ? rt_spin_unlock+0x161/0x200 [ 1546.067449][ T3464] hwsim_exit_net+0xf18/0xfd0 [ 1546.067461][ T3464] ? hwsim_exit_net+0xcb/0xfd0 [ 1546.067474][ T3464] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1546.067488][ T3464] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1546.067503][ T3464] ops_undo_list+0x49a/0x990 [ 1546.067518][ T3464] ? __pfx_ops_undo_list+0x10/0x10 [ 1546.067528][ T3464] ? rt_spin_unlock+0x150/0x200 [ 1546.067540][ T3464] ? rt_spin_unlock+0x161/0x200 [ 1546.067550][ T3464] cleanup_net+0x4de/0x7b0 [ 1546.067563][ T3464] ? __pfx_cleanup_net+0x10/0x10 [ 1546.067576][ T3464] ? _raw_spin_unlock_irq+0x23/0x50 [ 1546.067586][ T3464] ? process_scheduled_works+0x9ef/0x1770 [ 1546.067597][ T3464] ? process_scheduled_works+0x9ef/0x1770 [ 1546.067609][ T3464] process_scheduled_works+0xad1/0x1770 [ 1546.067645][ T3464] ? __pfx_process_scheduled_works+0x10/0x10 [ 1546.067684][ T3464] worker_thread+0x8a0/0xda0 [ 1546.067707][ T3464] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1546.067736][ T3464] ? __kthread_parkme+0x7b/0x200 [ 1546.067766][ T3464] kthread+0x711/0x8a0 [ 1546.067784][ T3464] ? __pfx_worker_thread+0x10/0x10 [ 1546.067795][ T3464] ? __pfx_kthread+0x10/0x10 [ 1546.067805][ T3464] ? rt_spin_unlock+0x150/0x200 [ 1546.067817][ T3464] ? rt_spin_unlock+0x161/0x200 [ 1546.067825][ T3464] ? __pfx_kthread+0x10/0x10 [ 1546.067838][ T3464] ret_from_fork+0x599/0xb30 [ 1546.067851][ T3464] ? __pfx_ret_from_fork+0x10/0x10 [ 1546.067867][ T3464] ? __switch_to_asm+0x39/0x70 [ 1546.067878][ T3464] ? __switch_to_asm+0x33/0x70 [ 1546.067890][ T3464] ? __pfx_kthread+0x10/0x10 [ 1546.067903][ T3464] ret_from_fork_asm+0x1a/0x30 [ 1546.067931][ T3464] [ 1546.068445][ T3464] Kernel Offset: disabled