last executing test programs: 23m40.01917052s ago: executing program 4 (id=451): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100003040000", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 23m39.138948512s ago: executing program 4 (id=458): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@loopback, @in6=@empty}}, {{@in6=@private1}, 0x0, @in6=@loopback}}, 0xfffffffffffffffc) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 23m37.876584329s ago: executing program 4 (id=464): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 23m28.048478207s ago: executing program 4 (id=495): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x27125ae6fbb99f61, '\x00', 0x0, @sk_msg}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0/file0'}, 0x3a}, {@redirect_dir_off}, {@xino_off}, {@uuid_null}], [], 0x2f}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 23m27.328175125s ago: executing program 4 (id=498): r0 = socket(0x23, 0x3, 0x1) socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x3, 0x3, 0x0) sendto$rose(r0, &(0x7f0000000140)="31e28563ed7750496a3bca436ccfc18588b104d985f01c22f5022b4ccf984ccd9c134482f5556288ed29a52cecfab92fa4e499d1e1149cc5a13958bef1372c1a1d6ce7ca620eec28a88a5d269d684ec07e63101e90f5e008ae307bab821778f4510c68702ecc8b", 0x67, 0x4000000, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d000000000000", 0x1b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x9, 0x100) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff0, 0x0, 0x4) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r9, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) syz_io_uring_submit(0x0, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r8, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r4, 0x68be, 0x5002, 0x4, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) 23m24.830149387s ago: executing program 4 (id=504): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0xa17, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x180000000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x0, 0x22, 0x1}]}, 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x4000000) sendmsg$nl_generic(r2, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000000680)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2d, 0x25dfdbfd, {0x3}}, 0x14}}, 0x4000) socket$inet6_sctp(0xa, 0x5, 0x84) 23m9.556769794s ago: executing program 32 (id=504): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0xa17, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x180000000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x0, 0x22, 0x1}]}, 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x4000000) sendmsg$nl_generic(r2, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000000680)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2d, 0x25dfdbfd, {0x3}}, 0x14}}, 0x4000) socket$inet6_sctp(0xa, 0x5, 0x84) 16m46.957662571s ago: executing program 0 (id=1823): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x14}) 16m46.78276668s ago: executing program 0 (id=1828): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x38, r1, 0x1, 0x4, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 16m46.693703336s ago: executing program 0 (id=1829): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 16m46.596151915s ago: executing program 0 (id=1830): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'ovf\x00', 0x28, 0x5, 0x72}, 0x2c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04080b9cc9003800000000010400"], 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003440)=ANY=[], 0x15d0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 16m46.460733565s ago: executing program 0 (id=1831): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) recvfrom$ax25(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 16m44.272818049s ago: executing program 0 (id=1835): capset(0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x80000, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0022070000008348b603de3cc17b95117ae7ffec9979be956654c30e45fbc6420e4044999c9d547d9b1645509d9ba9c0463439f13920ca110461b649ea93fe138e124dfdf5c62476c83970c5b59839a276cf785d66f8ef977922781170eafd5c161853"], 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000080), 0x4) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x20000000000002, 0x2) 16m26.31674614s ago: executing program 33 (id=1835): capset(0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x80000, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0022070000008348b603de3cc17b95117ae7ffec9979be956654c30e45fbc6420e4044999c9d547d9b1645509d9ba9c0463439f13920ca110461b649ea93fe138e124dfdf5c62476c83970c5b59839a276cf785d66f8ef977922781170eafd5c161853"], 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000080), 0x4) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x20000000000002, 0x2) 14m53.840571647s ago: executing program 3 (id=2038): epoll_create1(0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14m53.573464159s ago: executing program 3 (id=2040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x40001e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 14m50.85572133s ago: executing program 3 (id=2048): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 14m50.552627969s ago: executing program 3 (id=2050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 14m48.470148253s ago: executing program 3 (id=2056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r1, 0xd, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="725eb862ce"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sched_setscheduler(0x0, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknod$loop(0x0, 0xfff, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 14m47.440638374s ago: executing program 3 (id=2060): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x7}, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 14m32.028300884s ago: executing program 34 (id=2060): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x7}, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 3m55.735586259s ago: executing program 5 (id=3634): socket$nl_audit(0x10, 0x3, 0x9) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x62081, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m55.572922903s ago: executing program 5 (id=3636): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000040), 0x0}, 0x20) 3m55.412621604s ago: executing program 5 (id=3637): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000400)={0x0, &(0x7f00000002c0)=[0x0]}) geteuid() r4 = socket(0x22, 0x2, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x80, 0x680, @vifc_lcl_addr=@empty, @multicast2}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r1, 0x0, r2}, 0x60) 3m54.425783605s ago: executing program 5 (id=3641): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(r3, &(0x7f00000192c0)=[{&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb", 0x22}, {&(0x7f000001a500)="5359b30adba55aba146e23d2d24b922d83acd5b893234064d638038f27ec41c3f6190b219ded5a2b500e79693dcde53c159faeed9dfe060c830a673d50991502867f04987972375a10", 0x49}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000190c0)={0x0}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r5, 0x0, 0x0, 0x4000000) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f00000d00000002000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32, @ANYBLOB="0000000001000000000000000000"], 0x50) socket$igmp6(0xa, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) 3m53.52159059s ago: executing program 5 (id=3642): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r0) 3m50.18514719s ago: executing program 5 (id=3652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 3m1.393729139s ago: executing program 2 (id=3761): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, 0x0, 0x4044) 2m59.839333379s ago: executing program 2 (id=3763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d0000008500000050000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) sysinfo(&(0x7f0000000080)=""/98) 2m59.225378905s ago: executing program 2 (id=3766): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000305000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001"], 0x5c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2m59.164447793s ago: executing program 2 (id=3767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) 2m59.10475317s ago: executing program 2 (id=3768): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) userfaultfd(0x801) syz_open_dev$swradio(0x0, 0x0, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 2m58.037418488s ago: executing program 2 (id=3772): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m42.827627125s ago: executing program 35 (id=3772): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m24.38364619s ago: executing program 1 (id=3844): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 2m24.133695281s ago: executing program 1 (id=3845): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x40, 0x15, 0x2, "9400"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000e80)=ANY=[@ANYBLOB="400b02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2m20.987628771s ago: executing program 1 (id=3851): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, &(0x7f0000000400)={0x0, &(0x7f00000002c0)=[0x0]}) geteuid() r5 = socket(0x22, 0x2, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x80, 0x680, @vifc_lcl_addr=@empty, @multicast2}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r1, 0x0, r2}, 0x60) 2m19.439878687s ago: executing program 1 (id=3855): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, 0x0) eventfd2(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2151090, 0x0) 2m19.344915019s ago: executing program 1 (id=3857): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000005c80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x9, @loopback, @local, {[@cipso={0x86, 0x34, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x2}, {0x6, 0x2}, {0x0, 0xd, "73bc95a70000ffa30900a3"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x22}]}}}}}}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) pipe2(&(0x7f0000000300), 0x4080) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="03", 0x1}], 0x1}}], 0x1, 0xc010) 2m17.599652187s ago: executing program 1 (id=3860): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 2m17.204768573s ago: executing program 36 (id=3860): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 7.030390521s ago: executing program 6 (id=4057): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, r3, 0x20, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4050800}, 0x40004) 6.726006631s ago: executing program 6 (id=4058): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x0, '\x00', @string=0x0}}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@initdev}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@empty}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000), 0x0, 0x0, 0x0) syz_clone(0x8c229300, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f0000000280)) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fchdir(r4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/230, 0xe6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r5, 0x0, 0x0, 0x3c) 5.617044645s ago: executing program 7 (id=4059): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = userfaultfd(0x1) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x4000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17000000"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="1f0000001300090468fe0700200000000000ff3f080000004801001000000000", 0x20}], 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 5.465396169s ago: executing program 7 (id=4060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x3, @remote, 0x9}}, 0x0, 0x0, 0x4d, 0x0, "3023e519504254c1b5a34f91c57d8c79f12c8b32c21823a6be3126e5370ca14e54017a80a3d3e78f7a7b8c5895e68d01b9c347e864933b4b2dc1e00fd53b6ad9583f5dc3db99776f8d76917a816cc335"}, 0xd8) syz_emit_ethernet(0x9a, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x19, 0xc2, 0xa388, 0x0, 0x0, {[@md5sig={0x13, 0x12, "bb233372a509850c645129e213fe7442"}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x2f}, @sack={0x5, 0x1e, [0x2d66, 0x0, 0x5, 0x80000000, 0x5b, 0x6, 0xffffffff]}, @timestamp={0x8, 0xa, 0x7, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4}]}}}}}}}}, 0x0) 5.335243296s ago: executing program 7 (id=4061): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000e80)=ANY=[@ANYBLOB="400b02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 4.486491719s ago: executing program 6 (id=4062): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$isdn(0x22, 0x2, 0x10) r2 = socket$isdn(0x22, 0x2, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) dup3(r2, r1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) 3.718707674s ago: executing program 6 (id=4063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2a}, 0x94) bind$inet6(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, 0x0) getrlimit(0x7, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000002c0)={r4, 0x2}, 0x8) 2.768079525s ago: executing program 6 (id=4064): close(0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000000)={@hyper, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = userfaultfd(0x801) mkdirat(0xffffffffffffffff, &(0x7f00000194c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xd1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000019400)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x1800, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.125736145s ago: executing program 7 (id=4065): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf) 1.927336773s ago: executing program 7 (id=4066): r0 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) accept(r5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) connect$packet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) readahead(r7, 0x2a91, 0x7ff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x800) 50.697845ms ago: executing program 6 (id=4067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000110000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x9de}}, './file0\x00'}) socket(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)={0x298, 0x12, 0x4, 0x70bd26, 0x25dfdbff, {0x28, 0x1, 0x7f, 0x1, {0x4e24, 0x4e23, [0x8, 0x2, 0x9, 0x5], [0x3, 0x1, 0x101, 0xb], 0x0, [0x3ff, 0x9000]}, 0x80000000, 0xfffffffd}, [@INET_DIAG_REQ_BYTECODE={0x27, 0x1, "1ba609bff098029eea758ad498b74b35af01eb6591aea8fa1e3a8be9951f4cb0b12cc8"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "7f49ea448a7002cc5fa4d6a3b31f430984a9dc69ee2557c3114a52d669993a35855c17eef621aafe5bb8cfa8c9456c1cd054a199136aa24febb0ecc11356eeb360e527dcf77ed4fdb068fb287d6f71dba1c4280cdb11139ae00d27a0340915901e721398204a695a56414b1b6f7b02a3efcf77668ddadd3259e75c7302e7324eae6ee028bb470252fa1b11f510dbe126d5adbcd20bb1e7c84b7635cf6f551144dc65fbeb8f4bc39488aed918afecf6e6da984205bd1363"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "253a76c8fe"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "67607938be666f3e22e2da3bc2cc2cec2ed820eea144f0e8d114f2cba17934c6e89abbee9d06c31c28c2cea15757e754f75c98ab64a3f50cb0f9aa0fb8c886b833ca6bcd4db28ff7834e755f83e2475f17c2ad933f8bcc34e40d009dc0b9b785c595a8f03eccc5efd55f90d3a61c05711bf812bfd0a09d36926051c3f598e7676fb89012cf06eee7cc8f8072e725f3cfc135baa78ba2af8e9e89b90eb91a9911355456c5414a3ace8e961ce46e91bcdfd0c79f6043f0947b0d669ab774ac3ee6f81681f6dd9db1cd9daec8ad40e0"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "6ede4ac7e6276721c2bc66233d8dc611cd791725224e53b88fcd4d9b99eaefd8fd029e4d10304d4b48eb021d0ee2"}, @INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "5225d1cd6164fe5b373da4b211e68611b153f9c4332c6179b8c2bb7de6832680b0e934d9b860caaada8193d2c5be3bb6308972897e4916a145a3c1dbae3c61593786a10a6e77e343"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x298}, 0x1, 0x0, 0x0, 0x40080}, 0x20040041) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x3}}, 0x0, 0x0, 0x318, 0x21, 0x24, 0x4}, 0x9c) 0s ago: executing program 7 (id=4068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x3, @remote, 0x9}}, 0x0, 0x0, 0x4d, 0x0, "3023e519504254c1b5a34f91c57d8c79f12c8b32c21823a6be3126e5370ca14e54017a80a3d3e78f7a7b8c5895e68d01b9c347e864933b4b2dc1e00fd53b6ad9583f5dc3db99776f8d76917a816cc335"}, 0xd8) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x48, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x12, 0xc2, 0xa388, 0x0, 0x0, {[@md5sig={0x13, 0x12, "bb233372a509850c645129e213fe7442"}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x2f}, @nop, @timestamp={0x8, 0xa, 0x7, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): _adv: batadv0: Removing interface: batadv_slave_0 [ 1454.543094][ T6260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.847340][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.002983][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.092264][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.129129][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.250013][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.285304][ T37] audit: type=1326 audit(1764008566.010:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18730 comm="syz.7.3594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c6279f749 code=0x0 [ 1455.353359][ C1] vkms_vblank_simulate: vblank timer overrun [ 1455.975042][ T62] Bluetooth: hci4: command 0x0406 tx timeout [ 1456.121605][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.291621][ T9] usb 7-1: USB disconnect, device number 11 [ 1456.797967][T18742] netlink: 'syz.6.3596': attribute type 2 has an invalid length. [ 1457.458066][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.459900][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.551882][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.402423][T18759] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1459.564880][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.755868][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.904423][T18149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.120014][T18770] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3606'. [ 1461.521599][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1461.671659][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1461.674121][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.674154][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1461.674196][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1461.674219][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.679781][ T9] usb 7-1: config 0 descriptor?? [ 1461.762837][ T9] hub 7-1:0.0: USB hub found [ 1461.850802][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.857191][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.985811][ T9] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1462.206089][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 1462.206223][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1462.272590][ T9] usb 7-1: USB disconnect, device number 12 [ 1462.362675][ T6260] team0 (unregistering): Port device team_slave_1 removed [ 1462.414192][ T37] audit: type=1326 audit(1764008573.170:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18777 comm="syz.7.3609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c6279f749 code=0x0 [ 1462.666115][ T6260] team0 (unregistering): Port device team_slave_0 removed [ 1462.932142][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.131593][T17010] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1463.355295][T17010] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1463.355322][T17010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.355333][T17010] usb 7-1: Product: syz [ 1463.355341][T17010] usb 7-1: Manufacturer: syz [ 1463.355349][T17010] usb 7-1: SerialNumber: syz [ 1463.359260][T17010] usb 7-1: config 0 descriptor?? [ 1463.410273][T17010] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1463.577816][T17010] gspca_sq930x: reg_r 001f failed -32 [ 1463.577912][T17010] sq930x 7-1:0.0: probe with driver sq930x failed with error -32 [ 1463.963081][T18149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.965392][T17010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.028894][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.843510][T17010] IPVS: starting estimator thread 0... [ 1465.892117][ T9] usb 7-1: USB disconnect, device number 13 [ 1466.046183][T17010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.387254][T18800] IPVS: using max 8 ests per chain, 19200 per kthread [ 1467.001838][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.021523][T18149] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1467.151813][T18149] usb 8-1: device descriptor read/64, error -71 [ 1467.318866][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.401649][T18149] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1467.531595][T18149] usb 8-1: device descriptor read/64, error -71 [ 1467.642172][T18149] usb usb8-port1: attempt power cycle [ 1467.706804][T18727] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1467.892971][T18816] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3622'. [ 1467.991505][T10038] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1468.011541][T18149] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1468.032386][T18149] usb 8-1: device descriptor read/8, error -71 [ 1468.201469][T10038] usb 6-1: Using ep0 maxpacket: 32 [ 1468.208055][T10038] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.208128][T10038] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1468.208155][T10038] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1468.208181][T10038] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1468.208210][T10038] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1468.211248][T10038] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1468.211287][T10038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.211308][T10038] usb 6-1: Product: syz [ 1468.211323][T10038] usb 6-1: Manufacturer: syz [ 1468.211419][T10038] usb 6-1: SerialNumber: syz [ 1468.322708][T18149] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1468.324780][T10038] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1468.324884][T10038] imon 6-1:155.0: unable to initialize intf0, err -90 [ 1468.324899][T10038] imon:imon_probe: failed to initialize context! [ 1468.324912][T10038] imon 6-1:155.0: unable to register, err -19 [ 1468.342975][T18149] usb 8-1: device descriptor read/8, error -71 [ 1468.372598][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.460858][T18149] usb usb8-port1: unable to enumerate USB device [ 1468.908212][ T44] usb 6-1: USB disconnect, device number 79 [ 1468.972211][T18149] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1469.041926][T17010] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1469.114717][T18835] bond1 (unregistering): Released all slaves [ 1469.132866][T18149] usb 3-1: Using ep0 maxpacket: 32 [ 1469.134862][T18149] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1469.134887][T18149] usb 3-1: config 0 has no interface number 0 [ 1469.134930][T18149] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1469.137147][T18149] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1469.137183][T18149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.137202][T18149] usb 3-1: Product: syz [ 1469.137211][T18149] usb 3-1: Manufacturer: syz [ 1469.137218][T18149] usb 3-1: SerialNumber: syz [ 1469.140908][T18149] usb 3-1: config 0 descriptor?? [ 1469.162540][T18830] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1469.211562][T17010] usb 7-1: Using ep0 maxpacket: 8 [ 1469.213997][T17010] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1469.214041][T17010] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1469.214092][T17010] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1469.214121][T17010] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1469.214145][T17010] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1469.214159][T17010] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1469.214173][T17010] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1469.214189][T17010] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1469.215767][T17010] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1469.215812][T17010] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1469.215858][T17010] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1469.215886][T17010] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1469.215912][T17010] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1469.215937][T17010] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1469.215964][T17010] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1469.215992][T17010] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1469.217385][T17010] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1469.217424][T17010] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1469.217466][T17010] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1469.217495][T17010] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1469.217521][T17010] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1469.217544][T17010] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1469.217568][T17010] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1469.217595][T17010] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1469.221720][T17010] usb 7-1: string descriptor 0 read error: -22 [ 1469.221875][T17010] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1469.221898][T17010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.382875][T18830] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1469.401688][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.549642][T17010] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1469.575851][T17010] usb 7-1: USB disconnect, device number 14 [ 1469.577294][T18505] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1469.590448][T18149] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1469.590721][T18149] asix 3-1:0.188: probe with driver asix failed with error -61 [ 1469.674280][T18505] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1469.716500][T18505] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1469.808267][T18505] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1470.041952][T18149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.079872][ T6260] IPVS: stop unused estimator thread 0... [ 1470.241195][T18505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.302068][T18505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.314512][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.315389][ T6171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.345422][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.345634][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.442092][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.477716][T18505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1471.163100][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.363055][T17010] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1471.406031][T18874] bond1 (unregistering): Released all slaves [ 1471.482818][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.523648][T17010] usb 7-1: Using ep0 maxpacket: 32 [ 1471.601972][T17010] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.602094][T17010] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1471.602122][T17010] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1471.602184][T17010] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1471.602240][T17010] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1471.722515][T17010] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1471.722573][T17010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.722642][T17010] usb 7-1: Product: syz [ 1471.722657][T17010] usb 7-1: Manufacturer: syz [ 1471.722671][T17010] usb 7-1: SerialNumber: syz [ 1472.109893][T17010] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1472.109999][T17010] imon 7-1:155.0: unable to initialize intf0, err -90 [ 1472.110054][T17010] imon:imon_probe: failed to initialize context! [ 1472.110067][T17010] imon 7-1:155.0: unable to register, err -19 [ 1472.276247][ T992] usb 3-1: USB disconnect, device number 63 [ 1472.379144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.422747][T18505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1472.521795][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.541559][T18149] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1472.596439][T18505] veth0_vlan: entered promiscuous mode [ 1472.648679][T18505] veth1_vlan: entered promiscuous mode [ 1472.671529][T18149] usb 6-1: device descriptor read/64, error -71 [ 1472.674552][T18891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.675108][T18891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.748983][T18505] veth0_macvtap: entered promiscuous mode [ 1472.764090][T18505] veth1_macvtap: entered promiscuous mode [ 1472.791288][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.815337][T18505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1472.826453][T18505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1472.842055][T12858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.842303][T12858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.842355][T12858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.842389][T12858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.928460][T18149] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1473.252118][T18149] usb 6-1: device descriptor read/64, error -71 [ 1473.357453][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.384252][T18149] usb usb6-port1: attempt power cycle [ 1473.522974][ C1] vkms_vblank_simulate: vblank timer overrun [ 1473.562120][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.801602][T18149] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1473.826949][T18149] usb 6-1: device descriptor read/8, error -71 [ 1473.987903][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.987925][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.061595][T18149] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1474.082060][T18149] usb 6-1: device descriptor read/8, error -71 [ 1474.112589][ T31] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1474.307237][T18149] usb usb6-port1: unable to enumerate USB device [ 1474.373126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.555656][ T1442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.555677][ T1442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.603084][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.691940][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 1474.880998][ T31] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1474.881323][ T31] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1474.883686][ T31] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1474.883791][ T31] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1474.883891][ T31] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1474.883953][ T31] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1474.884045][ T31] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1474.884135][ T31] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1474.946848][ T31] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1474.947391][ T31] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1474.948082][ T31] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1474.948263][ T31] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1474.948433][ T31] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1474.948630][ T31] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1474.948749][ T31] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1474.948850][ T31] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1475.231701][T18149] usb 7-1: USB disconnect, device number 15 [ 1475.328434][ T31] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1475.328477][ T31] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1475.328529][ T31] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1475.328557][ T31] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1475.328583][ T31] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1475.328610][ T31] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1475.328634][ T31] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1475.328660][ T31] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1475.351903][ T31] usb 8-1: string descriptor 0 read error: -22 [ 1475.352114][ T31] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1475.352137][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.449150][ T31] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1475.628679][ T31] usb 8-1: USB disconnect, device number 14 [ 1475.643711][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.798784][T18923] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.3653'. [ 1476.362542][T18149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.682503][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.129171][T18938] CUSE: unknown device info "" [ 1477.129215][T18938] CUSE: zero length info key specified [ 1477.922928][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.976452][T18940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3661'. [ 1478.100541][ T62] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1478.372049][ T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1478.665890][ T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1478.698304][ T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1478.698775][ T62] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1479.021801][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.301958][T10038] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1479.452159][T18149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.743441][T18952] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.3664'. [ 1479.761444][T10038] usb 2-1: Using ep0 maxpacket: 32 [ 1479.769920][T10038] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1479.769948][T10038] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1479.769968][T10038] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.769988][T10038] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1479.770026][T10038] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1479.770048][T10038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.851613][T10038] usb 2-1: config 0 descriptor?? [ 1480.042168][T17010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.321617][ T44] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1480.421512][T10038] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1480.497885][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 1480.500113][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.500134][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.500159][ T44] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1480.500172][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.520317][ T155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.526952][ T44] usb 3-1: config 0 descriptor?? [ 1480.572459][T10038] usb 8-1: Using ep0 maxpacket: 8 [ 1480.575946][T10038] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1480.575988][T10038] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1480.576023][T10038] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1480.576047][T10038] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1480.576061][T10038] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1480.576074][T10038] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1480.576087][T10038] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1480.576102][T10038] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1480.577121][T10038] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1480.577259][T10038] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1480.577288][T10038] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1480.577303][T10038] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1480.577316][T10038] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1480.577330][T10038] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1480.577344][T10038] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1480.577358][T10038] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1480.580995][T10038] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1480.581043][T10038] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1480.581088][T10038] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1480.581115][T10038] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1480.581139][T10038] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1480.581164][T10038] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1480.581190][T10038] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1480.581216][T10038] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1480.585445][T10038] usb 8-1: string descriptor 0 read error: -22 [ 1480.585593][T10038] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1480.585616][T10038] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.664332][T10038] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1480.924788][T16568] Bluetooth: hci3: command tx timeout [ 1481.166966][ T992] usb 8-1: USB disconnect, device number 15 [ 1481.747636][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 1481.747973][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1481.973588][ T992] usb 2-1: USB disconnect, device number 80 [ 1482.066467][T18972] CUSE: unknown device info "" [ 1482.066512][T18972] CUSE: zero length info key specified [ 1482.732629][ T44] usb 3-1: USB disconnect, device number 64 [ 1482.741207][ T155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.021650][ T62] Bluetooth: hci3: command tx timeout [ 1483.369064][ T155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.371558][ T992] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1483.531712][ T992] usb 7-1: Using ep0 maxpacket: 32 [ 1483.533833][ T992] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1483.533859][ T992] usb 7-1: config 0 has no interface number 0 [ 1483.533905][ T992] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1483.537012][ T992] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1483.537041][ T992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.537061][ T992] usb 7-1: Product: syz [ 1483.537075][ T992] usb 7-1: Manufacturer: syz [ 1483.537083][ T992] usb 7-1: SerialNumber: syz [ 1483.540884][ T992] usb 7-1: config 0 descriptor?? [ 1483.610700][T18982] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1483.722923][T18975] orangefs_mount: mount request failed with -4 [ 1483.908181][T18982] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1484.419950][ T992] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1484.420231][ T992] asix 7-1:0.188: probe with driver asix failed with error -61 [ 1484.458057][ T155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.609095][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.609168][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.704329][T18943] chnl_net:caif_netlink_parms(): no params data found [ 1484.771475][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1484.931529][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1484.934211][ T9] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1484.934251][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1484.934305][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1484.934331][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1484.934357][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1484.935902][ T9] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1484.935942][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1484.935984][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1484.936013][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1484.936041][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1485.040791][ T9] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1485.040850][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1485.040893][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1485.040919][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1485.040943][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1485.083242][ T62] Bluetooth: hci3: command tx timeout [ 1485.135037][ T9] usb 8-1: string descriptor 0 read error: -22 [ 1485.135188][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1485.135209][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.179580][ T9] adutux 8-1:168.0: interrupt endpoints not found [ 1485.532535][ T44] usb 8-1: USB disconnect, device number 16 [ 1485.639380][T19014] CUSE: unknown device info "" [ 1485.639423][T19014] CUSE: zero length info key specified [ 1486.379085][ T31] usb 7-1: USB disconnect, device number 16 [ 1486.447474][T18943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.447551][T18943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.447751][T18943] bridge_slave_0: entered allmulticast mode [ 1486.477976][T18943] bridge_slave_0: entered promiscuous mode [ 1486.511565][T18943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.511713][T18943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.511971][T18943] bridge_slave_1: entered allmulticast mode [ 1486.514700][T18943] bridge_slave_1: entered promiscuous mode [ 1487.074880][ T31] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1487.170996][ T62] Bluetooth: hci3: command tx timeout [ 1487.301521][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 1487.305191][ T31] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1487.305233][ T31] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1487.305276][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1487.305305][ T31] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1487.305331][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1487.305366][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1487.305392][ T31] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1487.305421][ T31] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1487.306976][ T31] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1487.307015][ T31] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1487.307063][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1487.307089][ T31] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1487.307114][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1487.307141][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1487.307165][ T31] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1487.307192][ T31] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1487.308644][ T31] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1487.308680][ T31] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1487.308716][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1487.308742][ T31] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1487.308768][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1487.308793][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1487.308818][ T31] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1487.308843][ T31] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1487.645898][ T31] usb 7-1: string descriptor 0 read error: -22 [ 1487.646002][ T31] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1487.646016][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.687017][T18943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.922291][T18943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.970667][ T155] bridge_slave_1: left allmulticast mode [ 1487.970695][ T155] bridge_slave_1: left promiscuous mode [ 1487.970970][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.283932][T17010] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1488.331777][ T31] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1488.346371][ T31] usb 7-1: USB disconnect, device number 17 [ 1488.483083][T17010] usb 8-1: Using ep0 maxpacket: 32 [ 1488.812740][T17010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.812773][T17010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.812812][T17010] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1488.812834][T17010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.894098][ T155] bridge_slave_0: left allmulticast mode [ 1488.894127][ T155] bridge_slave_0: left promiscuous mode [ 1488.894398][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.898225][T17010] usb 8-1: config 0 descriptor?? [ 1490.256761][T17010] usbhid 8-1:0.0: can't add hid device: -71 [ 1490.256888][T17010] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1490.266564][T17010] usb 8-1: USB disconnect, device number 17 [ 1491.105137][T19053] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.3692'. [ 1491.611267][T19058] CUSE: unknown device info "" [ 1491.611403][T19058] CUSE: zero length info key specified [ 1493.868038][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3697'. [ 1493.881581][T17010] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1494.117518][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.310053][T17010] usb 3-1: Using ep0 maxpacket: 8 [ 1494.688519][T17010] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1494.689214][T17010] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1494.690052][T17010] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1494.690263][T17010] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1494.690566][T17010] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1494.933651][T17010] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1494.933696][T17010] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1494.933740][T17010] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1494.933768][T17010] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1494.933796][T17010] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1494.937626][T17010] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1494.937667][T17010] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1494.937712][T17010] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1494.937741][T17010] usb 3-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1494.937768][T17010] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1495.045547][T17010] usb 3-1: string descriptor 0 read error: -22 [ 1495.045747][T17010] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1495.045770][T17010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.104780][T17010] adutux 3-1:168.0: interrupt endpoints not found [ 1495.135551][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.185255][ T155] bond0 (unregistering): Released all slaves [ 1495.334210][T17010] usb 3-1: USB disconnect, device number 65 [ 1496.743235][T19083] tmpfs: Unsupported parameter 'huge' [ 1497.956517][T19099] CUSE: unknown device info "" [ 1497.956568][T19099] CUSE: zero length info key specified [ 1498.945749][T18943] team0: Port device team_slave_0 added [ 1498.967491][T18943] team0: Port device team_slave_1 added [ 1502.313196][T19132] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3714'. [ 1502.313238][T19132] openvswitch: netlink: Flow key attr not present in new flow. [ 1502.766150][T19143] CUSE: unknown device info "" [ 1502.766195][T19143] CUSE: zero length info key specified [ 1503.767679][T19144] tmpfs: Unsupported parameter 'huge' [ 1504.336814][T18943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.337040][T18943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.337195][T18943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.766071][T18943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.766088][T18943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.766115][T18943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.883120][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3721'. [ 1507.883144][T19162] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3721'. [ 1508.175185][T18943] hsr_slave_0: entered promiscuous mode [ 1508.387222][T18943] hsr_slave_1: entered promiscuous mode [ 1508.389134][T18943] debugfs: 'hsr0' already exists in 'hsr' [ 1508.389161][T18943] Cannot create hsr debugfs directory [ 1508.636804][T19180] CUSE: unknown device info "" [ 1508.636823][T19180] CUSE: zero length info key specified [ 1509.687108][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1511.638904][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1511.792151][ T9] usb 8-1: device descriptor read/all, error -71 [ 1511.872189][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'. [ 1512.965316][T15897] Bluetooth: hci1: command 0x0406 tx timeout [ 1513.418751][T19216] erofs (device nbd7): cannot find valid erofs superblock [ 1516.306796][T19228] CUSE: unknown device info "" [ 1516.306840][T19228] CUSE: zero length info key specified [ 1516.915841][T19225] infiniband syz2: set down [ 1516.915857][T19225] infiniband syz2: added ipvlan0 [ 1516.918937][T19225] syz2: rxe_create_cq: returned err = -12 [ 1516.919073][T19225] infiniband syz2: Couldn't create ib_mad CQ [ 1516.919200][T19225] infiniband syz2: Couldn't open port 1 [ 1516.999973][T19225] RDS/IB: syz2: added [ 1517.001065][T19225] smc: adding ib device syz2 with port count 1 [ 1517.001524][T19225] smc: ib device syz2 port 1 has no pnetid [ 1518.088546][T19237] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3740'. [ 1518.231564][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1518.496292][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1518.498957][ T9] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1518.498986][ T9] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1518.499008][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.499027][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1518.499082][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1518.499105][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1518.499148][ T9] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1518.499171][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.387466][ T9] usb 8-1: config 0 descriptor?? [ 1522.136969][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3751'. [ 1522.972012][ T5789] usb 8-1: USB disconnect, device number 20 [ 1522.981269][T19278] erofs (device nbd2): cannot find valid erofs superblock [ 1523.750286][T19281] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.3753'. [ 1526.357741][T19308] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1526.524676][T19314] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3766'. [ 1526.840522][T19323] erofs (device nbd1): cannot find valid erofs superblock [ 1529.223550][T19343] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1529.601496][ T155] hsr_slave_0: left promiscuous mode [ 1529.630215][T19347] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.3776'. [ 1529.644803][ T155] hsr_slave_1: left promiscuous mode [ 1529.645749][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1529.645774][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.695010][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.695039][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.906767][ T155] veth1_macvtap: left promiscuous mode [ 1529.906956][ T155] veth0_macvtap: left promiscuous mode [ 1529.907229][ T155] veth1_vlan: left promiscuous mode [ 1529.907409][ T155] veth0_vlan: left promiscuous mode [ 1532.026777][T19368] erofs (device nbd6): cannot find valid erofs superblock [ 1533.474552][T19380] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1534.391618][T19392] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.3789'. [ 1537.468229][T19416] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 1537.749592][T15897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1537.755430][T15897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1537.759094][T15897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1537.760180][T15897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1537.760923][T15897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1539.133443][T19444] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.3801'. [ 1539.464558][T19451] overlayfs: failed to get inode (-116) [ 1539.464985][T19451] overlayfs: failed to get inode (-116) [ 1539.468952][T19451] overlayfs: failed to get inode (-116) [ 1539.469518][T19451] overlayfs: failed to get inode (-116) [ 1539.801599][ T62] Bluetooth: hci5: command tx timeout [ 1539.951485][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1540.101562][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1540.109587][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1540.109666][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1540.109739][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1540.109780][ T9] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1540.109820][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1540.109846][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1540.109871][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1540.109915][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1540.131555][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1540.131601][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1540.131640][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1540.131667][ T9] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1540.131692][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1540.131715][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1540.131738][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1540.131760][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1540.190391][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1540.190439][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1540.190486][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1540.190515][ T9] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1540.190541][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1540.190566][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1540.190592][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1540.190620][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1540.302726][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1540.302759][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.302780][ T9] usb 8-1: Product: syz [ 1540.302795][ T9] usb 8-1: Manufacturer: syz [ 1540.302809][ T9] usb 8-1: SerialNumber: syz [ 1540.963951][ T9] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1541.024354][ T9] usb 8-1: USB disconnect, device number 21 [ 1541.039515][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1541.432316][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1543.104808][ T62] Bluetooth: hci5: command tx timeout [ 1543.656508][T15897] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1543.668762][T15897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1543.670772][T15897] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1543.675807][T15897] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1543.676721][T15897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1545.191871][T15897] Bluetooth: hci5: command tx timeout [ 1545.721487][T15897] Bluetooth: hci6: command tx timeout [ 1546.059378][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.059425][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.249818][T15897] Bluetooth: hci5: command tx timeout [ 1547.431523][T18149] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1547.587969][T18149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.588004][T18149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.588042][T18149] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1547.588063][T18149] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.639072][T18149] usb 8-1: config 0 descriptor?? [ 1547.802373][T15897] Bluetooth: hci6: command tx timeout [ 1548.100412][T18149] cm6533_jd 0003:0D8C:0022.0014: reserved main item tag 0xd [ 1548.100445][T18149] cm6533_jd 0003:0D8C:0022.0014: item fetching failed at offset 4/5 [ 1548.126831][T18149] cm6533_jd 0003:0D8C:0022.0014: parse failed [ 1548.126945][T18149] cm6533_jd 0003:0D8C:0022.0014: probe with driver cm6533_jd failed with error -22 [ 1548.304002][ T1229] usb 8-1: USB disconnect, device number 22 [ 1548.801670][ T9515] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1548.961594][ T9515] usb 7-1: Using ep0 maxpacket: 32 [ 1548.964260][ T9515] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.964293][ T9515] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.964331][ T9515] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1548.964353][ T9515] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.066719][ T9515] usb 7-1: config 0 descriptor?? [ 1549.088875][ T9515] hub 7-1:0.0: USB hub found [ 1549.141246][ T155] IPVS: stop unused estimator thread 0... [ 1549.272527][ T9515] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1549.736522][T19498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3818'. [ 1550.345043][T15897] Bluetooth: hci6: command tx timeout [ 1550.354217][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1550.354397][ T9515] usbhid 7-1:0.0: can't add hid device: -32 [ 1550.354546][ T9515] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1550.384537][ T9515] usb 7-1: USB disconnect, device number 18 [ 1552.215159][T19509] overlayfs: failed to get inode (-116) [ 1552.215420][T19509] overlayfs: failed to get inode (-116) [ 1552.215918][T19509] overlayfs: failed to get inode (-116) [ 1552.216194][T19509] overlayfs: failed to get inode (-116) [ 1552.361469][ T62] Bluetooth: hci6: command tx timeout [ 1552.541452][T10038] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1552.596970][T19513] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3822'. [ 1552.596986][T19513] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3822'. [ 1552.701505][T10038] usb 7-1: Using ep0 maxpacket: 8 [ 1552.704100][T10038] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1552.704143][T10038] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1552.704189][T10038] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1552.704218][T10038] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1552.704246][T10038] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1552.704272][T10038] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1552.704300][T10038] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1552.704328][T10038] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1552.705738][T10038] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1552.705803][T10038] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1552.705859][T10038] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1552.705886][T10038] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1552.705912][T10038] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1552.705948][T10038] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1552.705975][T10038] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1552.706002][T10038] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1552.707396][T10038] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1552.707433][T10038] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1552.707475][T10038] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1552.707502][T10038] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1552.707527][T10038] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1552.707551][T10038] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1552.707575][T10038] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1552.707600][T10038] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1552.750687][T10038] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1552.750717][T10038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.750736][T10038] usb 7-1: Product: syz [ 1552.750750][T10038] usb 7-1: Manufacturer: syz [ 1552.750764][T10038] usb 7-1: SerialNumber: syz [ 1553.449379][T10038] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1553.490394][T10038] usb 7-1: USB disconnect, device number 19 [ 1553.951488][ T5955] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1553.962155][ T62] Bluetooth: hci2: command 0x0406 tx timeout [ 1553.996448][T19527] batadv0: entered promiscuous mode [ 1554.274585][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.274617][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.274656][ T5955] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1554.274679][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.283653][ T5955] usb 2-1: config 0 descriptor?? [ 1555.603219][ T5955] cm6533_jd 0003:0D8C:0022.0015: reserved main item tag 0xd [ 1555.603254][ T5955] cm6533_jd 0003:0D8C:0022.0015: item fetching failed at offset 4/5 [ 1555.604122][ T5955] cm6533_jd 0003:0D8C:0022.0015: parse failed [ 1555.604228][ T5955] cm6533_jd 0003:0D8C:0022.0015: probe with driver cm6533_jd failed with error -22 [ 1555.771504][T19470] chnl_net:caif_netlink_parms(): no params data found [ 1555.804460][ T5965] usb 2-1: USB disconnect, device number 81 [ 1555.885171][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3832'. [ 1555.885186][T19543] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3832'. [ 1558.210337][T19569] overlayfs: failed to get inode (-116) [ 1558.210793][T19569] overlayfs: failed to get inode (-116) [ 1558.211683][T19569] overlayfs: failed to get inode (-116) [ 1558.212958][T19569] overlayfs: failed to get inode (-116) [ 1559.358156][T10038] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1559.408361][T19470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.408492][T19470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.409338][T19470] bridge_slave_0: entered allmulticast mode [ 1559.471733][T19470] bridge_slave_0: entered promiscuous mode [ 1559.501710][T10038] usb 7-1: Using ep0 maxpacket: 32 [ 1559.504267][T10038] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1559.504293][T10038] usb 7-1: config 0 has no interface number 0 [ 1559.504343][T10038] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1559.507581][T10038] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1559.507617][T10038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.507637][T10038] usb 7-1: Product: syz [ 1559.507652][T10038] usb 7-1: Manufacturer: syz [ 1559.507666][T10038] usb 7-1: SerialNumber: syz [ 1559.606180][T10038] usb 7-1: config 0 descriptor?? [ 1559.609972][T10038] smsc75xx v1.0.0 [ 1559.732650][T19470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.733297][T19470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.763233][T19470] bridge_slave_1: entered allmulticast mode [ 1559.766367][T19470] bridge_slave_1: entered promiscuous mode [ 1559.905969][ T6259] bridge_slave_1: left allmulticast mode [ 1559.906000][ T6259] bridge_slave_1: left promiscuous mode [ 1559.909446][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.005456][ T6259] bridge_slave_0: left allmulticast mode [ 1560.005487][ T6259] bridge_slave_0: left promiscuous mode [ 1560.005843][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.248540][T10038] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 1560.248566][T10038] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1560.432135][T17010] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1560.433707][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1560.449556][T10038] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1560.449585][T10038] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1560.449605][T10038] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1560.449639][T10038] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1560.449953][T10038] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1560.582308][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1560.585552][T17010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.585585][T17010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.586563][T17010] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1560.586578][T17010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.592114][T17010] usb 8-1: config 0 descriptor?? [ 1560.705088][ T6259] bond0 (unregistering): Released all slaves [ 1561.301056][T19470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.314432][T19424] chnl_net:caif_netlink_parms(): no params data found [ 1561.347779][T17010] cm6533_jd 0003:0D8C:0022.0016: reserved main item tag 0xd [ 1561.347802][T17010] cm6533_jd 0003:0D8C:0022.0016: item fetching failed at offset 4/5 [ 1561.348283][T17010] cm6533_jd 0003:0D8C:0022.0016: parse failed [ 1561.348340][T17010] cm6533_jd 0003:0D8C:0022.0016: probe with driver cm6533_jd failed with error -22 [ 1561.363212][T19470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.520430][T17010] usb 8-1: USB disconnect, device number 23 [ 1561.856586][T19470] team0: Port device team_slave_0 added [ 1561.871524][ T5965] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1561.972115][ T6259] hsr_slave_0: left promiscuous mode [ 1561.993809][ T6259] hsr_slave_1: left promiscuous mode [ 1561.994765][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1562.021566][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 1562.023550][ T5965] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 1562.023577][ T5965] usb 2-1: config 0 has no interface number 0 [ 1562.023628][ T5965] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1562.025855][ T5965] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1562.025879][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.025890][ T5965] usb 2-1: Product: syz [ 1562.025898][ T5965] usb 2-1: Manufacturer: syz [ 1562.025906][ T5965] usb 2-1: SerialNumber: syz [ 1562.030187][ T5965] usb 2-1: config 0 descriptor?? [ 1562.100459][T19587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1562.141198][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1562.282593][ T992] usb 7-1: USB disconnect, device number 20 [ 1562.333512][T19587] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1562.391548][T17010] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1562.542166][T17010] usb 8-1: Using ep0 maxpacket: 32 [ 1562.857452][ T5965] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1562.909721][ T5965] asix 2-1:0.188: probe with driver asix failed with error -61 [ 1563.140106][T17010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.140142][T17010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.140185][T17010] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1563.140208][T17010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.237820][T17010] usb 8-1: config 0 descriptor?? [ 1563.249693][T17010] hub 8-1:0.0: USB hub found [ 1563.448334][T17010] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1563.869476][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 1563.870508][T17010] usbhid 8-1:0.0: can't add hid device: -32 [ 1563.870638][T17010] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1564.005049][T17010] usb 8-1: USB disconnect, device number 24 [ 1564.392089][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 1564.562413][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 1564.581427][ T5955] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1564.680954][T17010] usb 2-1: USB disconnect, device number 82 [ 1564.731541][ T5955] usb 7-1: Using ep0 maxpacket: 16 [ 1564.733914][ T5955] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.733946][ T5955] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.733970][ T5955] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1564.734005][ T5955] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1564.734028][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.803919][ T5955] usb 7-1: config 0 descriptor?? [ 1565.488166][ T5955] hid (null): unknown global tag 0xd [ 1565.488261][ T5955] hid (null): unknown global tag 0xd [ 1565.488299][ T5955] hid (null): nested delimiters [ 1565.763138][T17010] usb 7-1: USB disconnect, device number 21 [ 1566.167501][T19470] team0: Port device team_slave_1 added [ 1566.432044][T17010] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1566.912358][T17010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.912528][T17010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1566.913464][T17010] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1566.913703][T17010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.993151][T17010] usb 8-1: config 0 descriptor?? [ 1567.270612][T19626] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.3858'. [ 1567.406228][T19470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.406246][T19470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.406272][T19470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.415076][T17010] cm6533_jd 0003:0D8C:0022.0018: reserved main item tag 0xd [ 1567.415111][T17010] cm6533_jd 0003:0D8C:0022.0018: item fetching failed at offset 4/5 [ 1567.415870][T17010] cm6533_jd 0003:0D8C:0022.0018: parse failed [ 1567.415966][T17010] cm6533_jd 0003:0D8C:0022.0018: probe with driver cm6533_jd failed with error -22 [ 1567.616399][ T992] usb 8-1: USB disconnect, device number 25 [ 1567.629258][T19470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.629281][T19470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.629307][T19470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.631527][ T5955] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1567.821580][ T5955] usb 7-1: Using ep0 maxpacket: 32 [ 1567.823771][ T5955] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1567.823797][ T5955] usb 7-1: config 0 has no interface number 0 [ 1567.823842][ T5955] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1567.826071][ T5955] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1567.826098][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.826113][ T5955] usb 7-1: Product: syz [ 1567.826121][ T5955] usb 7-1: Manufacturer: syz [ 1567.826129][ T5955] usb 7-1: SerialNumber: syz [ 1567.830145][ T5955] usb 7-1: config 0 descriptor?? [ 1567.833307][T19628] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1568.002193][T19424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.002383][T19424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.002649][T19424] bridge_slave_0: entered allmulticast mode [ 1568.005296][T19424] bridge_slave_0: entered promiscuous mode [ 1568.018389][T19424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.018554][T19424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.018742][T19424] bridge_slave_1: entered allmulticast mode [ 1568.021815][T19424] bridge_slave_1: entered promiscuous mode [ 1568.062941][T19628] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1568.465039][ T5955] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1568.465327][ T5955] asix 7-1:0.188: probe with driver asix failed with error -61 [ 1568.577925][T19424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1568.780960][T19424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.789804][T19470] hsr_slave_0: entered promiscuous mode [ 1568.791155][T19470] hsr_slave_1: entered promiscuous mode [ 1568.794576][T19470] debugfs: 'hsr0' already exists in 'hsr' [ 1568.794601][T19470] Cannot create hsr debugfs directory [ 1568.917949][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1568.921074][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1568.937363][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1568.943096][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1568.947409][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1569.214888][T19424] team0: Port device team_slave_0 added [ 1569.233676][T19424] team0: Port device team_slave_1 added [ 1569.331467][ T5955] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1569.483551][ T5955] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.483610][ T5955] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1569.483634][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.486868][ T5955] usb 8-1: config 0 descriptor?? [ 1569.525415][ T5955] pwc: Askey VC010 type 2 USB webcam detected. [ 1569.840534][T19424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.840551][T19424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.840573][T19424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.895295][ T5955] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1569.896278][ T5955] pwc: recv_control_msg error -32 req 02 val 2700 [ 1569.897811][ T5955] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1569.899194][ T5955] pwc: recv_control_msg error -32 req 04 val 1000 [ 1569.899969][ T5955] pwc: recv_control_msg error -32 req 04 val 1300 [ 1569.900535][ T5955] pwc: recv_control_msg error -32 req 04 val 1400 [ 1569.901103][ T5955] pwc: recv_control_msg error -32 req 02 val 2000 [ 1570.104731][ T5955] pwc: recv_control_msg error -71 req 04 val 1500 [ 1570.107571][ T5955] pwc: recv_control_msg error -71 req 02 val 2500 [ 1570.108072][ T5955] pwc: recv_control_msg error -71 req 02 val 2400 [ 1570.108542][ T5955] pwc: recv_control_msg error -71 req 02 val 2600 [ 1570.109002][ T5955] pwc: recv_control_msg error -71 req 02 val 2900 [ 1570.109479][ T5955] pwc: recv_control_msg error -71 req 02 val 2800 [ 1570.114730][ T6259] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.143143][ T5955] pwc: recv_control_msg error -71 req 04 val 1100 [ 1570.172411][ T5955] pwc: recv_control_msg error -71 req 04 val 1200 [ 1570.174706][ T5955] pwc: Registered as video103. [ 1570.178383][ T5955] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input38 [ 1570.216149][ T5955] usb 8-1: USB disconnect, device number 26 [ 1570.258543][T19424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.258560][T19424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.258584][T19424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.438988][T17010] usb 7-1: USB disconnect, device number 22 [ 1571.001642][ T62] Bluetooth: hci2: command tx timeout [ 1573.045993][ T6259] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.081505][ T62] Bluetooth: hci2: command tx timeout [ 1573.788926][T19652] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.3867'. [ 1574.078338][ T6259] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.230762][T19424] hsr_slave_0: entered promiscuous mode [ 1574.238062][T19424] hsr_slave_1: entered promiscuous mode [ 1574.238742][T19424] debugfs: 'hsr0' already exists in 'hsr' [ 1574.238812][T19424] Cannot create hsr debugfs directory [ 1574.407708][ T6259] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.971747][T18149] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1575.132423][T18149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.132458][T18149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.132513][T18149] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1575.132541][T18149] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.139106][T18149] usb 8-1: config 0 descriptor?? [ 1575.161567][ T62] Bluetooth: hci2: command tx timeout [ 1575.597259][T18149] cm6533_jd 0003:0D8C:0022.0019: reserved main item tag 0xd [ 1575.597296][T18149] cm6533_jd 0003:0D8C:0022.0019: item fetching failed at offset 4/5 [ 1575.598265][T18149] cm6533_jd 0003:0D8C:0022.0019: parse failed [ 1575.598368][T18149] cm6533_jd 0003:0D8C:0022.0019: probe with driver cm6533_jd failed with error -22 [ 1575.789778][T18149] usb 8-1: USB disconnect, device number 27 [ 1575.962527][T19470] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1576.004109][T19470] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1576.166640][T19470] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1576.246018][T19470] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1576.289123][ T6259] bridge_slave_1: left allmulticast mode [ 1576.289153][ T6259] bridge_slave_1: left promiscuous mode [ 1576.289426][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.554553][ T6259] bridge_slave_0: left allmulticast mode [ 1576.554616][ T6259] bridge_slave_0: left promiscuous mode [ 1576.587105][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.253030][ T62] Bluetooth: hci2: command tx timeout [ 1579.016116][T19678] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.3876'. [ 1579.153778][ C0] vkms_vblank_simulate: vblank timer overrun [ 1579.515535][ C0] vkms_vblank_simulate: vblank timer overrun [ 1579.583916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1579.712166][ C0] vkms_vblank_simulate: vblank timer overrun [ 1579.783213][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.011251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.111359][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.330392][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.400362][T17010] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1580.557835][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.616846][T17010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.616880][T17010] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1580.616917][T17010] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1580.616930][T17010] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.620082][T17010] usb 8-1: config 0 descriptor?? [ 1580.718283][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.786861][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.852764][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.933780][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.015842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.079208][T17010] cm6533_jd 0003:0D8C:0022.001A: reserved main item tag 0xd [ 1581.079244][T17010] cm6533_jd 0003:0D8C:0022.001A: item fetching failed at offset 4/5 [ 1581.080071][T17010] cm6533_jd 0003:0D8C:0022.001A: parse failed [ 1581.080176][T17010] cm6533_jd 0003:0D8C:0022.001A: probe with driver cm6533_jd failed with error -22 [ 1581.151911][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.226162][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.286925][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.295143][T18149] usb 8-1: USB disconnect, device number 28 [ 1581.355776][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.432434][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1581.502213][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.523970][ T6259] bond0 (unregistering): Released all slaves [ 1581.640768][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.737475][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.828705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.938365][ C0] vkms_vblank_simulate: vblank timer overrun [ 1583.872740][T19705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.875809][T19705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.199925][T19718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1584.367754][T19635] chnl_net:caif_netlink_parms(): no params data found [ 1585.971516][T19582] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1586.199243][T19582] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1586.199284][T19582] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1586.199321][T19582] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1586.199343][T19582] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.370820][T19582] usb 7-1: config 0 descriptor?? [ 1586.405863][T19635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.420348][T19635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.486931][T19635] bridge_slave_0: entered allmulticast mode [ 1586.538575][T19635] bridge_slave_0: entered promiscuous mode [ 1586.787740][ T6259] hsr_slave_0: left promiscuous mode [ 1586.821659][ T6259] hsr_slave_1: left promiscuous mode [ 1586.826114][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1586.826166][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.869439][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1586.869924][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.000667][T19582] cm6533_jd 0003:0D8C:0022.001B: reserved main item tag 0xd [ 1587.000705][T19582] cm6533_jd 0003:0D8C:0022.001B: item fetching failed at offset 4/5 [ 1587.024785][T19582] cm6533_jd 0003:0D8C:0022.001B: parse failed [ 1587.024892][T19582] cm6533_jd 0003:0D8C:0022.001B: probe with driver cm6533_jd failed with error -22 [ 1587.040244][ T6259] veth1_macvtap: left promiscuous mode [ 1587.040353][ T6259] veth0_macvtap: left promiscuous mode [ 1587.044530][ T6259] veth1_vlan: left promiscuous mode [ 1587.044720][ T6259] veth0_vlan: left promiscuous mode [ 1587.192517][ T9515] usb 7-1: USB disconnect, device number 23 [ 1587.514079][ T5955] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1587.671706][ T5955] usb 8-1: Using ep0 maxpacket: 32 [ 1587.675744][ T5955] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1587.675772][ T5955] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1587.675794][ T5955] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1587.675835][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1587.675848][ T5955] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1587.675860][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1587.675871][ T5955] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1587.675883][ T5955] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1587.675908][ T5955] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1587.675919][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.684617][ T5955] usb 8-1: config 0 descriptor?? [ 1587.934928][ T5955] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1588.159917][ T5955] usb 8-1: USB disconnect, device number 29 [ 1588.187983][ T5955] usblp0: removed [ 1589.361512][ T5955] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1589.511583][ T5955] usb 8-1: Using ep0 maxpacket: 16 [ 1589.514692][ T5955] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.514725][ T5955] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.514748][ T5955] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1589.514776][ T5955] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1589.514789][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.517918][ T5955] usb 8-1: config 0 descriptor?? [ 1590.362700][ T5955] usbhid 8-1:0.0: can't add hid device: -71 [ 1590.362819][ T5955] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1590.367074][ T5955] usb 8-1: USB disconnect, device number 30 [ 1591.239823][T19750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1591.302930][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 1591.632154][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 1592.926377][T19754] netlink: 208 bytes leftover after parsing attributes in process `syz.7.3896'. [ 1595.849751][T19635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.849883][T19635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.850137][T19635] bridge_slave_1: entered allmulticast mode [ 1595.875103][T19635] bridge_slave_1: entered promiscuous mode [ 1596.161621][T19582] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1596.186182][T19635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1596.190759][T19635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1596.311469][T19582] usb 8-1: Using ep0 maxpacket: 32 [ 1596.313830][T19582] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1596.313857][T19582] usb 8-1: config 0 has no interface number 0 [ 1596.313907][T19582] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1596.317055][T19582] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1596.317084][T19582] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.317105][T19582] usb 8-1: Product: syz [ 1596.317119][T19582] usb 8-1: Manufacturer: syz [ 1596.317133][T19582] usb 8-1: SerialNumber: syz [ 1596.324576][T19582] usb 8-1: config 0 descriptor?? [ 1596.373379][T19758] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1596.615607][T19758] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1596.827903][T19635] team0: Port device team_slave_0 added [ 1596.847972][T19635] team0: Port device team_slave_1 added [ 1597.102726][T15897] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1597.135534][T15897] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1597.137937][T15897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1597.157478][T15897] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1597.158343][T15897] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1597.265563][T19582] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1597.265762][T19582] asix 8-1:0.188: probe with driver asix failed with error -32 [ 1597.498222][T19635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1597.498240][T19635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.498265][T19635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.523771][T19635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1597.523789][T19635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.523815][T19635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.742231][T18149] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1597.874992][T19635] hsr_slave_0: entered promiscuous mode [ 1597.878209][T19635] hsr_slave_1: entered promiscuous mode [ 1597.878834][T19635] debugfs: 'hsr0' already exists in 'hsr' [ 1597.878850][T19635] Cannot create hsr debugfs directory [ 1597.926450][T18149] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.926483][T18149] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.926509][T18149] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1597.926529][T18149] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.930287][T18149] usb 7-1: config 0 descriptor?? [ 1598.557208][T18149] cm6533_jd 0003:0D8C:0022.001C: reserved main item tag 0xd [ 1598.557244][T18149] cm6533_jd 0003:0D8C:0022.001C: item fetching failed at offset 4/5 [ 1598.559097][T18149] cm6533_jd 0003:0D8C:0022.001C: parse failed [ 1598.559204][T18149] cm6533_jd 0003:0D8C:0022.001C: probe with driver cm6533_jd failed with error -22 [ 1598.700029][T19470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.753343][T18149] usb 7-1: USB disconnect, device number 24 [ 1598.938523][T17010] usb 8-1: USB disconnect, device number 31 [ 1599.006587][T19777] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.3900'. [ 1599.242195][ T62] Bluetooth: hci3: command tx timeout [ 1599.907774][T19788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3903'. [ 1600.217215][T19791] netlink: 208 bytes leftover after parsing attributes in process `syz.7.3904'. [ 1600.784847][T19470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1600.978708][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.978924][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1601.321657][ T62] Bluetooth: hci3: command tx timeout [ 1602.155230][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.155403][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1602.261497][T18149] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1602.334274][T19635] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1602.365997][T19767] chnl_net:caif_netlink_parms(): no params data found [ 1602.378237][T19635] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1602.423626][T18149] usb 7-1: Using ep0 maxpacket: 32 [ 1602.431218][T18149] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1602.431247][T18149] usb 7-1: config 0 has no interface number 0 [ 1602.432376][T18149] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1602.441556][ T5955] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1602.499746][T18149] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1602.499777][T18149] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.499797][T18149] usb 7-1: Product: syz [ 1602.499813][T18149] usb 7-1: Manufacturer: syz [ 1602.499827][T18149] usb 7-1: SerialNumber: syz [ 1602.520685][T18149] usb 7-1: config 0 descriptor?? [ 1602.526485][T19801] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1602.573045][T19635] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1602.604407][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.604436][ T5955] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1602.604502][ T5955] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1602.604515][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.615939][ T5955] usb 8-1: config 0 descriptor?? [ 1602.694916][T19635] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1602.737792][T19801] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1603.253005][T19767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.253254][T19767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.253629][T19767] bridge_slave_0: entered allmulticast mode [ 1603.274306][T19767] bridge_slave_0: entered promiscuous mode [ 1603.288859][ T5955] cm6533_jd 0003:0D8C:0022.001D: reserved main item tag 0xd [ 1603.288897][ T5955] cm6533_jd 0003:0D8C:0022.001D: item fetching failed at offset 4/5 [ 1603.293634][ T5955] cm6533_jd 0003:0D8C:0022.001D: parse failed [ 1603.294117][ T5955] cm6533_jd 0003:0D8C:0022.001D: probe with driver cm6533_jd failed with error -22 [ 1603.318422][T19767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.319600][T19767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.326672][T19767] bridge_slave_1: entered allmulticast mode [ 1603.350202][T18149] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1603.350500][T18149] asix 7-1:0.188: probe with driver asix failed with error -32 [ 1603.366204][T19767] bridge_slave_1: entered promiscuous mode [ 1603.383496][ T6259] bridge_slave_1: left allmulticast mode [ 1603.383527][ T6259] bridge_slave_1: left promiscuous mode [ 1603.383803][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.401396][ T62] Bluetooth: hci3: command tx timeout [ 1603.477152][T18149] usb 8-1: USB disconnect, device number 32 [ 1603.516943][ T6259] bridge_slave_0: left allmulticast mode [ 1603.516973][ T6259] bridge_slave_0: left promiscuous mode [ 1603.517230][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.731092][ C1] vkms_vblank_simulate: vblank timer overrun [ 1603.776548][T15897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1603.815071][T15897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1603.820249][T15897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1603.836207][T15897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1603.840083][T15897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1603.940840][ C1] vkms_vblank_simulate: vblank timer overrun [ 1604.002005][ C1] vkms_vblank_simulate: vblank timer overrun [ 1604.050309][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1604.173033][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.233970][ T6259] bond0 (unregistering): Released all slaves [ 1604.301529][ T5955] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1604.345337][ C1] vkms_vblank_simulate: vblank timer overrun [ 1604.465683][ C1] vkms_vblank_simulate: vblank timer overrun [ 1604.468217][ T5955] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.468273][ T5955] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1604.468287][ T5955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.472753][ T5955] usb 8-1: config 0 descriptor?? [ 1604.547299][ T5955] pwc: Askey VC010 type 2 USB webcam detected. [ 1604.831529][T19767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1604.862639][T19767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.917708][ T5955] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1604.918802][ T5955] pwc: recv_control_msg error -32 req 02 val 2700 [ 1604.919806][ T5955] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1604.920553][ T5955] pwc: recv_control_msg error -32 req 04 val 1000 [ 1604.925678][ T5955] pwc: recv_control_msg error -32 req 04 val 1300 [ 1604.926341][ T5955] pwc: recv_control_msg error -32 req 04 val 1400 [ 1604.928010][ T5955] pwc: recv_control_msg error -32 req 02 val 2000 [ 1604.928728][ T5955] pwc: recv_control_msg error -32 req 02 val 2100 [ 1605.114051][T17010] usb 7-1: USB disconnect, device number 25 [ 1605.143961][ T5955] pwc: recv_control_msg error -71 req 02 val 2500 [ 1605.144535][ T5955] pwc: recv_control_msg error -71 req 02 val 2400 [ 1605.145010][ T5955] pwc: recv_control_msg error -71 req 02 val 2600 [ 1605.145468][ T5955] pwc: recv_control_msg error -71 req 02 val 2900 [ 1605.147039][ T5955] pwc: recv_control_msg error -71 req 02 val 2800 [ 1605.147757][ T5955] pwc: recv_control_msg error -71 req 04 val 1100 [ 1605.148259][ T5955] pwc: recv_control_msg error -71 req 04 val 1200 [ 1605.423748][ T5955] pwc: Registered as video103. [ 1605.428689][ T5955] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input39 [ 1605.444949][ T5955] usb 8-1: USB disconnect, device number 33 [ 1605.491686][ T62] Bluetooth: hci3: command tx timeout [ 1605.566663][T19831] netlink: 208 bytes leftover after parsing attributes in process `syz.6.3912'. [ 1605.567342][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.897449][ T62] Bluetooth: hci5: command tx timeout [ 1606.084872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1606.348275][T19767] team0: Port device team_slave_0 added [ 1606.531718][ T6259] hsr_slave_0: left promiscuous mode [ 1606.560591][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3914'. [ 1606.581708][ T6259] hsr_slave_1: left promiscuous mode [ 1606.582625][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1606.633291][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.011239][ C1] vkms_vblank_simulate: vblank timer overrun [ 1607.075448][ C1] vkms_vblank_simulate: vblank timer overrun [ 1607.516943][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.517116][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.961485][ T62] Bluetooth: hci5: command tx timeout [ 1608.302445][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 1608.358669][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.525186][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 1608.570028][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.626417][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.683326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.697773][T19582] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1608.755060][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.891807][T19582] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1608.891841][T19582] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1608.891879][T19582] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1608.891902][T19582] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.900740][T19582] usb 7-1: config 0 descriptor?? [ 1609.286934][T19767] team0: Port device team_slave_1 added [ 1609.362661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.522063][T19582] cm6533_jd 0003:0D8C:0022.001E: reserved main item tag 0xd [ 1609.522101][T19582] cm6533_jd 0003:0D8C:0022.001E: item fetching failed at offset 4/5 [ 1609.522966][T19582] cm6533_jd 0003:0D8C:0022.001E: parse failed [ 1609.523070][T19582] cm6533_jd 0003:0D8C:0022.001E: probe with driver cm6533_jd failed with error -22 [ 1609.746334][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.756673][ T5955] usb 7-1: USB disconnect, device number 26 [ 1609.789198][T19767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.789215][T19767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.789233][T19767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.814168][ T992] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1609.825293][T19767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.825309][T19767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.825334][T19767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.921823][ C0] vkms_vblank_simulate: vblank timer overrun [ 1609.985906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.001615][ T992] usb 8-1: Using ep0 maxpacket: 32 [ 1610.004942][ T992] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1610.004958][ T992] usb 8-1: config 0 has no interface number 0 [ 1610.004986][ T992] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1610.007083][ T992] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1610.007099][ T992] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.007110][ T992] usb 8-1: Product: syz [ 1610.007117][ T992] usb 8-1: Manufacturer: syz [ 1610.007125][ T992] usb 8-1: SerialNumber: syz [ 1610.011154][ T992] usb 8-1: config 0 descriptor?? [ 1610.015027][T19851] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1610.075513][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.091461][ T62] Bluetooth: hci5: command tx timeout [ 1610.160977][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.229699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.242676][T19851] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1610.282593][T19767] hsr_slave_0: entered promiscuous mode [ 1610.283879][T19767] hsr_slave_1: entered promiscuous mode [ 1610.284709][T19767] debugfs: 'hsr0' already exists in 'hsr' [ 1610.284734][T19767] Cannot create hsr debugfs directory [ 1610.402114][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.476916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.734014][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.832438][T19856] netlink: 208 bytes leftover after parsing attributes in process `syz.6.3920'. [ 1610.929111][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.296816][ T992] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1611.297116][ T992] asix 8-1:0.188: probe with driver asix failed with error -32 [ 1611.562645][ C0] vkms_vblank_simulate: vblank timer overrun [ 1612.001679][T19862] binder: 19858:19862 ioctl 4018620d 0 returned -22 [ 1612.166179][ T62] Bluetooth: hci5: command tx timeout [ 1612.439991][ C0] vkms_vblank_simulate: vblank timer overrun [ 1612.447218][T19861] binder: 19858:19861 ioctl c0306201 0 returned -14 [ 1612.596556][ T5955] usb 8-1: USB disconnect, device number 34 [ 1613.281479][T19582] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1613.631448][T19582] usb 7-1: Using ep0 maxpacket: 32 [ 1613.635394][T19582] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.635428][T19582] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.635471][T19582] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1613.635493][T19582] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.878070][T19582] usb 7-1: config 0 descriptor?? [ 1613.893340][T19582] hub 7-1:0.0: USB hub found [ 1614.033071][T19820] chnl_net:caif_netlink_parms(): no params data found [ 1614.091491][T19582] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1614.506190][T19582] usbhid 7-1:0.0: can't add hid device: -71 [ 1614.506331][T19582] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1614.527771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1614.587009][T19582] usb 7-1: USB disconnect, device number 27 [ 1614.784920][ C0] vkms_vblank_simulate: vblank timer overrun [ 1615.301019][ C0] vkms_vblank_simulate: vblank timer overrun [ 1615.541233][ C0] vkms_vblank_simulate: vblank timer overrun [ 1615.863581][T19893] netlink: 208 bytes leftover after parsing attributes in process `syz.6.3928'. [ 1615.864742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1616.744661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1617.611382][ T5965] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1622.448861][ C0] vkms_vblank_simulate: vblank timer overrun [ 1622.632038][T19924] netlink: 208 bytes leftover after parsing attributes in process `syz.6.3937'. [ 1623.291298][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.674399][ C0] vkms_vblank_simulate: vblank timer overrun [ 1624.537360][ C0] vkms_vblank_simulate: vblank timer overrun [ 1624.601464][ T5955] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1624.751782][ T5955] usb 7-1: Using ep0 maxpacket: 16 [ 1624.754281][ T5955] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.754313][ T5955] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.754337][ T5955] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1624.754374][ T5955] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1624.754397][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.838017][ T5955] usb 7-1: config 0 descriptor?? [ 1625.080333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1625.554543][ T5955] usbhid 7-1:0.0: can't add hid device: -71 [ 1625.554618][ T5955] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1625.585192][ T5955] usb 7-1: USB disconnect, device number 29 [ 1625.778500][T19820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.778699][T19820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.778978][T19820] bridge_slave_0: entered allmulticast mode [ 1625.803952][T19820] bridge_slave_0: entered promiscuous mode [ 1625.817906][T19635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1625.830964][T19820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.831139][T19820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.857597][T19820] bridge_slave_1: entered allmulticast mode [ 1626.219743][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.248363][T19820] bridge_slave_1: entered promiscuous mode [ 1626.411918][ C0] vkms_vblank_simulate: vblank timer overrun [ 1629.248757][T19820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1629.326590][T19820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.875233][T15897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1629.890371][T15897] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1629.895420][T15897] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1629.897549][T15897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1629.898962][T15897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1630.283404][T19820] team0: Port device team_slave_0 added [ 1630.383804][T19820] team0: Port device team_slave_1 added [ 1631.961548][T19969] Bluetooth: hci2: command tx timeout [ 1632.060664][T19820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1632.060683][T19820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.060709][T19820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.136269][T19820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.136288][T19820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.136314][T19820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1632.802938][T19767] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1633.031471][T19767] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1633.239210][ T6259] bridge_slave_1: left allmulticast mode [ 1633.239241][ T6259] bridge_slave_1: left promiscuous mode [ 1633.239513][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.145635][T19969] Bluetooth: hci2: command tx timeout [ 1634.256268][ T6259] bridge_slave_0: left allmulticast mode [ 1634.256301][ T6259] bridge_slave_0: left promiscuous mode [ 1634.256558][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.557104][T19969] Bluetooth: hci2: command tx timeout [ 1638.645888][T19969] Bluetooth: hci2: command tx timeout [ 1639.154722][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.232934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.441215][ C1] vkms_vblank_simulate: vblank timer overrun [ 1643.308779][ C1] vkms_vblank_simulate: vblank timer overrun [ 1643.512601][ C1] vkms_vblank_simulate: vblank timer overrun [ 1643.517735][ T37] audit: type=1326 audit(1764008754.270:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20030 comm="syz.7.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7ffc0000 [ 1643.518082][ T37] audit: type=1326 audit(1764008754.270:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20030 comm="syz.7.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c6279f749 code=0x7ffc0000 [ 1643.518672][ T37] audit: type=1326 audit(1764008754.270:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20030 comm="syz.7.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7ffc0000 [ 1643.519323][ T37] audit: type=1326 audit(1764008754.270:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20030 comm="syz.7.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c6279f749 code=0x7ffc0000 [ 1643.520003][ T37] audit: type=1326 audit(1764008754.270:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20030 comm="syz.7.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7ffc0000 [ 1643.520634][ T37] audit: type=1326 audit(1764008754.270:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20030 comm="syz.7.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f6c6279f749 code=0x7ffc0000 [ 1643.615399][ T37] audit: type=1326 audit(1764008754.370:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20030 comm="syz.7.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7ffc0000 [ 1643.615448][ T37] audit: type=1326 audit(1764008754.370:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20030 comm="syz.7.3968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7ffc0000 [ 1643.775206][ C1] vkms_vblank_simulate: vblank timer overrun [ 1646.018390][T20047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3973'. [ 1646.073712][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1646.182120][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1646.206011][ T6259] bond0 (unregistering): Released all slaves [ 1646.409096][T19767] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1646.575302][T19820] hsr_slave_0: entered promiscuous mode [ 1646.576762][T19820] hsr_slave_1: entered promiscuous mode [ 1646.595007][T19820] debugfs: 'hsr0' already exists in 'hsr' [ 1646.595037][T19820] Cannot create hsr debugfs directory [ 1646.596214][T19767] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1647.311627][ T6259] hsr_slave_0: left promiscuous mode [ 1647.351701][ T6259] hsr_slave_1: left promiscuous mode [ 1647.352735][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.449597][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1655.972948][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 1657.332358][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 1657.812792][ T5805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1657.873207][ T5805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1657.923882][ T5805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1657.927660][ T5805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1657.930787][ T5805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1660.043914][ T5805] Bluetooth: hci6: command tx timeout [ 1660.854432][T20124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1662.141576][ T5805] Bluetooth: hci6: command tx timeout [ 1662.821437][T18149] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1663.041456][T18149] usb 8-1: Using ep0 maxpacket: 32 [ 1663.043666][T18149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.043686][T18149] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.043710][T18149] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1663.043723][T18149] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.046929][T18149] usb 8-1: config 0 descriptor?? [ 1663.090679][T18149] hub 8-1:0.0: USB hub found [ 1663.300330][T18149] hub 8-1:0.0: 1 port detected [ 1664.025326][T18149] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 1664.028544][ T5965] usb 8-1: USB disconnect, device number 35 [ 1664.028953][T18149] usb 8-1: Failed to suspend device, error -19 [ 1664.213789][ T5805] Bluetooth: hci6: command tx timeout [ 1665.412049][T19969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1665.428165][T19969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1665.429626][T19969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1665.432893][T19969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1665.433835][T19969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1665.918842][T20149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3998'. [ 1666.180022][T19967] chnl_net:caif_netlink_parms(): no params data found [ 1666.284852][T19969] Bluetooth: hci6: command tx timeout [ 1667.653185][T19969] Bluetooth: hci3: command tx timeout [ 1668.931468][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.931548][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.721580][T19969] Bluetooth: hci3: command tx timeout [ 1671.811473][T19969] Bluetooth: hci3: command tx timeout [ 1672.904263][ T37] audit: type=1326 audit(1764008783.660:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.7.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7fc00000 [ 1672.924849][T19967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.925301][T19967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.925539][T19967] bridge_slave_0: entered allmulticast mode [ 1672.928222][T19967] bridge_slave_0: entered promiscuous mode [ 1672.959784][ T37] audit: type=1326 audit(1764008783.660:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.7.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f6c6279f749 code=0x7fc00000 [ 1672.959996][ T37] audit: type=1326 audit(1764008783.710:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.7.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7fc00000 [ 1672.960118][ T37] audit: type=1326 audit(1764008783.710:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.7.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7fc00000 [ 1672.960254][ T37] audit: type=1326 audit(1764008783.710:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.7.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7fc00000 [ 1672.960392][ T37] audit: type=1326 audit(1764008783.710:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.7.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7fc00000 [ 1672.960538][ T37] audit: type=1326 audit(1764008783.710:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.7.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7fc00000 [ 1672.960675][ T37] audit: type=1326 audit(1764008783.710:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.7.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7fc00000 [ 1672.960843][ T37] audit: type=1326 audit(1764008783.710:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.7.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7fc00000 [ 1672.960981][ T37] audit: type=1326 audit(1764008783.710:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20176 comm="syz.7.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6279f749 code=0x7fc00000 [ 1673.868349][T20191] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4009'. [ 1673.881922][T19969] Bluetooth: hci3: command tx timeout [ 1674.279608][T19967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.279717][T19967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.279884][T19967] bridge_slave_1: entered allmulticast mode [ 1674.292083][T19967] bridge_slave_1: entered promiscuous mode [ 1674.559448][T20199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1676.795974][T19967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.858030][T19967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.873446][T20107] chnl_net:caif_netlink_parms(): no params data found [ 1677.256362][T19967] team0: Port device team_slave_0 added [ 1678.264503][T19967] team0: Port device team_slave_1 added [ 1678.286976][T20233] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4019'. [ 1679.018175][T20241] team0: entered allmulticast mode [ 1679.018253][T20241] team_slave_0: entered allmulticast mode [ 1679.018398][T20241] team_slave_1: entered allmulticast mode [ 1679.871957][T19967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.871974][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.872000][T19967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.964975][T19967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.964993][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.965020][T19967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1682.365777][T20107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.365917][T20107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.366165][T20107] bridge_slave_0: entered allmulticast mode [ 1682.370216][T20107] bridge_slave_0: entered promiscuous mode [ 1682.421663][T20107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.421869][T20107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.422108][T20107] bridge_slave_1: entered allmulticast mode [ 1682.427585][T20107] bridge_slave_1: entered promiscuous mode [ 1684.109983][T19967] hsr_slave_0: entered promiscuous mode [ 1684.110869][T19967] hsr_slave_1: entered promiscuous mode [ 1684.112102][T19967] debugfs: 'hsr0' already exists in 'hsr' [ 1684.112138][T19967] Cannot create hsr debugfs directory [ 1684.119473][T20107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1684.269443][T20272] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4029'. [ 1684.503141][T20107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1689.311581][T20296] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4036'. [ 1689.458071][T20107] team0: Port device team_slave_0 added [ 1689.497566][T20141] chnl_net:caif_netlink_parms(): no params data found [ 1689.550924][T20107] team0: Port device team_slave_1 added [ 1689.584276][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1689.603516][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1689.604932][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1689.606074][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1689.607406][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1689.671183][T20305] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4039'. [ 1691.782259][T19969] Bluetooth: hci5: command tx timeout [ 1691.811001][T20318] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1692.891482][T19484] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1692.905444][T20107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1692.905462][T20107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1692.905487][T20107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1693.182720][T19484] usb 8-1: Using ep0 maxpacket: 32 [ 1693.719931][T20107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1693.719950][T20107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1693.719976][T20107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1693.762664][T19484] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1693.762692][T19484] usb 8-1: config 0 has no interface number 0 [ 1693.762741][T19484] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1693.765837][T19484] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1693.765865][T19484] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.765884][T19484] usb 8-1: Product: syz [ 1693.765898][T19484] usb 8-1: Manufacturer: syz [ 1693.765911][T19484] usb 8-1: SerialNumber: syz [ 1693.784618][T19484] usb 8-1: config 0 descriptor?? [ 1693.785780][T20330] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1693.801411][T19969] Bluetooth: hci5: command tx timeout [ 1694.014411][T20330] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1694.679025][T20141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.679440][T20141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.679773][T20141] bridge_slave_0: entered allmulticast mode [ 1694.686038][T20141] bridge_slave_0: entered promiscuous mode [ 1694.829280][T19484] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1694.829301][T19484] asix 8-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1694.829467][T19484] asix 8-1:0.188: probe with driver asix failed with error -32 [ 1695.040139][T20141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.040280][T20141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.040519][T20141] bridge_slave_1: entered allmulticast mode [ 1695.063987][T20141] bridge_slave_1: entered promiscuous mode [ 1695.101040][T20107] hsr_slave_0: entered promiscuous mode [ 1695.108342][T20107] hsr_slave_1: entered promiscuous mode [ 1695.109519][T20107] debugfs: 'hsr0' already exists in 'hsr' [ 1695.109544][T20107] Cannot create hsr debugfs directory [ 1695.410882][T20141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.523723][T20141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.880172][ T992] usb 8-1: USB disconnect, device number 36 [ 1695.891011][T19969] Bluetooth: hci5: command tx timeout [ 1695.945063][T20141] team0: Port device team_slave_0 added [ 1697.376015][T20141] team0: Port device team_slave_1 added [ 1697.961499][T19969] Bluetooth: hci5: command tx timeout [ 1698.614194][ T6259] bridge_slave_1: left allmulticast mode [ 1698.614224][ T6259] bridge_slave_1: left promiscuous mode [ 1698.614455][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.665884][ T6259] bridge_slave_0: left allmulticast mode [ 1698.665914][ T6259] bridge_slave_0: left promiscuous mode [ 1698.666183][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.757697][ T6259] bridge_slave_1: left allmulticast mode [ 1698.757726][ T6259] bridge_slave_1: left promiscuous mode [ 1698.757970][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.853142][ T6259] bridge_slave_0: left allmulticast mode [ 1698.853173][ T6259] bridge_slave_0: left promiscuous mode [ 1698.853431][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.058482][ T6259] bridge_slave_1: left allmulticast mode [ 1699.058514][ T6259] bridge_slave_1: left promiscuous mode [ 1699.058791][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.157144][ T6259] bridge_slave_0: left allmulticast mode [ 1699.157173][ T6259] bridge_slave_0: left promiscuous mode [ 1699.157430][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.874828][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1699.965074][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.044139][ T6259] bond0 (unregistering): Released all slaves [ 1700.442988][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1700.556233][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.625624][ T6259] bond0 (unregistering): Released all slaves [ 1700.751030][T19582] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1700.931538][T19582] usb 8-1: Using ep0 maxpacket: 32 [ 1700.933333][T19582] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1700.933358][T19582] usb 8-1: config 0 has no interface number 0 [ 1700.933401][T19582] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1700.935594][T19582] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1700.935620][T19582] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.935640][T19582] usb 8-1: Product: syz [ 1700.935655][T19582] usb 8-1: Manufacturer: syz [ 1700.935669][T19582] usb 8-1: SerialNumber: syz [ 1700.939642][T19582] usb 8-1: config 0 descriptor?? [ 1700.951939][T20378] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1701.217749][T20378] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1701.524960][T20381] delete_channel: no stack [ 1702.203864][T19582] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1702.203928][T19582] asix 8-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1702.204816][T19582] asix 8-1:0.188: probe with driver asix failed with error -61 [ 1703.466985][T19484] usb 8-1: USB disconnect, device number 37 [ 1703.661122][T19969] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 1703.670819][T19969] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 1704.473787][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1704.615728][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1704.703921][ T6259] bond0 (unregistering): Released all slaves [ 1705.093668][T20141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.093686][T20141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.093714][T20141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.209118][T20141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1705.209130][T20141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.209145][T20141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.064299][ T38] INFO: task syz.2.3772:19336 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1706.064344][ T38] Not tainted syzkaller #0 [ 1706.064401][ T38] Blocked by coredump. [ 1706.064408][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1706.064456][ T38] task:syz.2.3772 state:D stack:25160 pid:19336 tgid:19336 ppid:10622 task_flags:0x40044c flags:0x00080003 [ 1706.064635][ T38] Call Trace: [ 1706.064648][ T38] [ 1706.064697][ T38] __schedule+0x16f3/0x4c20 [ 1706.065254][ T38] ? __lock_acquire+0xab9/0xd20 [ 1706.065383][ T38] ? __pfx___schedule+0x10/0x10 [ 1706.065462][ T38] ? schedule+0x91/0x360 [ 1706.065526][ T38] schedule+0x165/0x360 [ 1706.065596][ T38] schedule_timeout+0x9a/0x270 [ 1706.065707][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1706.065830][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1706.065898][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1706.066920][ T38] ? wait_for_completion+0x267/0x5d0 [ 1706.067007][ T38] wait_for_completion+0x2bf/0x5d0 [ 1706.067131][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1706.067263][ T38] ? __flush_work+0xce/0xd20 [ 1706.067314][ T38] ? __flush_work+0xce/0xd20 [ 1706.067385][ T38] __flush_work+0x9c1/0xd20 [ 1706.067449][ T38] ? __flush_work+0xce/0xd20 [ 1706.067511][ T38] ? __pfx___flush_work+0x10/0x10 [ 1706.067784][ T38] ? __pfx_wq_barrier_func+0x10/0x10 [ 1706.067899][ T38] ? __pfx___cancel_work+0x10/0x10 [ 1706.067972][ T38] ? __pfx___might_resched+0x10/0x10 [ 1706.068013][ T38] ? __cancel_work+0x254/0x2e0 [ 1706.068081][ T38] ? __pfx___cancel_work+0x10/0x10 [ 1706.068155][ T38] __cancel_work_sync+0xbe/0x110 [ 1706.068213][ T38] hci_cmd_sync_clear+0x30/0x230 [ 1706.068394][ T38] hci_unregister_dev+0x194/0x510 [ 1706.068520][ T38] vhci_release+0x155/0x1b0 [ 1706.068673][ T38] ? __pfx_vhci_release+0x10/0x10 [ 1706.068738][ T38] __fput+0x45b/0xa80 [ 1706.069067][ T38] task_work_run+0x1d4/0x260 [ 1706.069125][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1706.069179][ T38] ? do_exit+0x6b0/0x2300 [ 1706.069252][ T38] ? do_exit+0x6b0/0x2300 [ 1706.069324][ T38] do_exit+0x6b5/0x2300 [ 1706.069382][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1706.069515][ T38] ? __pfx_do_exit+0x10/0x10 [ 1706.069572][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1706.070488][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 1706.070569][ T38] do_group_exit+0x21c/0x2d0 [ 1706.070628][ T38] ? rt_spin_unlock+0x161/0x200 [ 1706.070689][ T38] get_signal+0x125d/0x1310 [ 1706.070819][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 1706.070872][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1706.070943][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 1706.071044][ T38] exit_to_user_mode_loop+0x72/0x130 [ 1706.071105][ T38] do_syscall_64+0x2bd/0xfa0 [ 1706.071179][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1706.071476][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.071518][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1706.071593][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.071646][ T38] RIP: 0033:0x7fbc44bff749 [ 1706.071665][ T38] RSP: 002b:00007ffe2ccacc28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1706.071775][ T38] RAX: 0000000000000000 RBX: 0000000000175313 RCX: 00007fbc44bff749 [ 1706.071789][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1706.071835][ T38] RBP: 00007fbc44e57da0 R08: 0000000000000001 R09: 000000182ccacf1f [ 1706.071849][ T38] R10: 0000001b31b20000 R11: 0000000000000246 R12: 00007fbc44e55fac [ 1706.071910][ T38] R13: 00007fbc44e55fa0 R14: ffffffffffffffff R15: 00007ffe2ccacd40 [ 1706.072031][ T38] [ 1706.072208][ T38] [ 1706.072208][ T38] Showing all locks held in the system: [ 1706.072322][ T38] 1 lock held by khungtaskd/38: [ 1706.072335][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1706.072501][ T38] 3 locks held by kworker/u8:5/155: [ 1706.072549][ T38] #0: ffff888030448138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1706.072681][ T38] #1: ffffc900039dfba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1706.073101][ T38] #2: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 1706.087329][ T38] 2 locks held by getty/5559: [ 1706.087396][ T38] #0: ffff88823bf360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1706.087730][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1706.087909][ T38] 3 locks held by kworker/u8:14/6171: [ 1706.087960][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1706.088408][ T38] #1: ffffc900056c7ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1706.088546][ T38] #2: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1706.088712][ T38] 4 locks held by kworker/u8:16/6259: [ 1706.088723][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1706.088898][ T38] #1: ffffc90003bdfba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1706.089038][ T38] #2: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1706.089236][ T38] #3: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x140 [ 1706.089547][ T38] 3 locks held by kworker/u9:2/16568: [ 1706.089615][ T38] #0: ffff88804a1d1138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1706.089791][ T38] #1: ffffc90005137ba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1706.116173][ T38] #2: ffff88803d6e4e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1706.116308][ T38] 3 locks held by syz-executor/18063: [ 1706.116360][ T38] 7 locks held by kworker/0:1H/18573: [ 1706.116412][ T38] 8 locks held by kworker/u8:3/19064: [ 1706.116428][ T38] 5 locks held by kworker/u8:9/19905: [ 1706.116487][ T38] 3 locks held by syz-executor/20107: [ 1706.116539][ T38] 2 locks held by udevd/20125: [ 1706.116550][ T38] 2 locks held by syz-executor/20141: [ 1706.116595][ T38] #0: ffffffff8ed83080 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1706.116726][ T38] #1: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1706.116858][ T38] 2 locks held by syz-executor/20302: [ 1706.116909][ T38] #0: ffffffff8ed7e7d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1706.117210][ T38] #1: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1706.117388][ T38] 1 lock held by syz.6.4067/20400: [ 1706.117401][ T38] #0: ffff88802fd16a90 (&substream->lock){+.+.}-{3:3}, at: remove_wait_queue+0x23/0x110 [ 1706.117570][ T38] 8 locks held by syz.6.4067/20401: [ 1706.117582][ T38] #0: ffff88803983df58 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_inet_connect+0xa0/0x1e0 [ 1706.117891][ T38] #1: ffff8880b883add8 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1706.118045][ T38] #2: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 1706.118312][ T38] #3: ffff8880b8924148 (psi_seq){-...}-{0:0}, at: rt_mutex_slowunlock+0xb0/0x8a0 [ 1706.118499][ T38] #4: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 1706.118672][ T38] #5: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 1706.118815][ T38] #6: ffff8880b883add8 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1706.118940][ T38] #7: ffff8880390f68b8 (&mm->cpus_allowed_lock#2){....}-{2:2}, at: __do_set_cpus_allowed+0x367/0x7a0 [ 1706.119130][ T38] 1 lock held by syz.6.4067/20402: [ 1706.119188][ T38] #0: ffff88803983df58 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_setsockopt+0x1f7/0x1200 [ 1706.119552][ T38] [ 1706.119558][ T38] ============================================= [ 1706.119558][ T38] [ 1706.119617][ T38] NMI backtrace for cpu 1 [ 1706.119648][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1706.119669][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1706.119680][ T38] Call Trace: [ 1706.119688][ T38] [ 1706.119697][ T38] dump_stack_lvl+0x189/0x250 [ 1706.119728][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1706.119753][ T38] ? __pfx__printk+0x10/0x10 [ 1706.119787][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1706.119862][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1706.119886][ T38] ? __pfx__printk+0x10/0x10 [ 1706.119912][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1706.119947][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1706.119979][ T38] watchdog+0xf60/0xfa0 [ 1706.120016][ T38] ? watchdog+0x1e2/0xfa0 [ 1706.120045][ T38] kthread+0x711/0x8a0 [ 1706.120074][ T38] ? __pfx_watchdog+0x10/0x10 [ 1706.120097][ T38] ? __pfx_kthread+0x10/0x10 [ 1706.120119][ T38] ? rt_spin_unlock+0x150/0x200 [ 1706.120144][ T38] ? rt_spin_unlock+0x161/0x200 [ 1706.120162][ T38] ? __pfx_kthread+0x10/0x10 [ 1706.120188][ T38] ret_from_fork+0x4bc/0x870 [ 1706.120212][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1706.120240][ T38] ? __switch_to_asm+0x39/0x70 [ 1706.120257][ T38] ? __switch_to_asm+0x33/0x70 [ 1706.120273][ T38] ? __pfx_kthread+0x10/0x10 [ 1706.120299][ T38] ret_from_fork_asm+0x1a/0x30 [ 1706.120335][ T38] [ 1706.120344][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1706.120368][ C0] NMI backtrace for cpu 0 [ 1706.120383][ C0] CPU: 0 UID: 0 PID: 18573 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1706.120402][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1706.120414][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 1706.120526][ C0] RIP: 0010:probe_sched_switch+0x25/0x90 [ 1706.120548][ C0] Code: 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 cb 49 89 d6 e8 49 52 f8 ff 8b 35 83 6c ec 16 31 ed 85 f6 40 0f 95 c5 <31> ff e8 e4 56 f8 ff 01 ed 44 8b 3d 4b 6c ec 16 31 ff 44 89 fe e8 [ 1706.120562][ C0] RSP: 0018:ffffc90005627488 EFLAGS: 00000046 [ 1706.120576][ C0] RAX: ffffffff81c65af7 RBX: ffff88802541da00 RCX: ffff88802cb78000 [ 1706.120588][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1706.120598][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 1ffffffff1dac84e [ 1706.120606][ C0] R10: dffffc0000000000 R11: ffffffff81c65ae0 R12: ffff88802365df90 [ 1706.120616][ C0] R13: ffffffff81c65ae0 R14: ffff88802cb78000 R15: ffff88802cb78000 [ 1706.120627][ C0] FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 1706.120637][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1706.120647][ C0] CR2: 0000200000001000 CR3: 000000005dc6a000 CR4: 00000000003526f0 [ 1706.120660][ C0] Call Trace: [ 1706.120666][ C0] [ 1706.120673][ C0] __traceiter_sched_switch+0x9d/0xd0 [ 1706.120694][ C0] __schedule+0x22e9/0x4c20 [ 1706.120721][ C0] ? __pfx___schedule+0x10/0x10 [ 1706.120738][ C0] ? rcu_is_watching+0x15/0xb0 [ 1706.120755][ C0] ? preempt_schedule+0xae/0xc0 [ 1706.120771][ C0] preempt_schedule_common+0x83/0xd0 [ 1706.120788][ C0] preempt_schedule+0xae/0xc0 [ 1706.120803][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1706.120819][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1706.120837][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1706.120854][ C0] preempt_schedule_thunk+0x16/0x30 [ 1706.120872][ C0] try_to_wake_up+0x82b/0x12b0 [ 1706.120892][ C0] __wake_up_common_lock+0x136/0x1e0 [ 1706.120911][ C0] __snd_rawmidi_transmit_ack+0x27b/0x330 [ 1706.120952][ C0] snd_rawmidi_transmit+0x7b/0xf0 [ 1706.120967][ C0] snd_vmidi_output_work+0x1a3/0x410 [ 1706.120988][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1706.121006][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1706.121022][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1706.121036][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1706.121051][ C0] process_scheduled_works+0xae1/0x17b0 [ 1706.121077][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1706.121098][ C0] worker_thread+0x8a0/0xda0 [ 1706.121114][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1706.121135][ C0] ? __kthread_parkme+0x7b/0x200 [ 1706.121154][ C0] kthread+0x711/0x8a0 [ 1706.121172][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1706.121186][ C0] ? __pfx_kthread+0x10/0x10 [ 1706.121201][ C0] ? rt_spin_unlock+0x150/0x200 [ 1706.121227][ C0] ? rt_spin_unlock+0x161/0x200 [ 1706.121239][ C0] ? __pfx_kthread+0x10/0x10 [ 1706.121256][ C0] ret_from_fork+0x4bc/0x870 [ 1706.121272][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1706.121289][ C0] ? __switch_to_asm+0x39/0x70 [ 1706.121300][ C0] ? __switch_to_asm+0x33/0x70 [ 1706.121312][ C0] ? __pfx_kthread+0x10/0x10 [ 1706.121329][ C0] ret_from_fork_asm+0x1a/0x30 [ 1706.121355][ C0] [ 1706.630768][T20141] hsr_slave_0: entered promiscuous mode [ 1706.662383][T20141] hsr_slave_1: entered promiscuous mode [ 1706.663411][T20141] debugfs: 'hsr0' already exists in 'hsr' [ 1706.663435][T20141] Cannot create hsr debugfs directory [ 1707.731431][T19969] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1707.731873][T19969] Bluetooth: hci1: Injecting HCI hardware error event [ 1707.737558][T19969] Bluetooth: hci1: hardware error 0x00 [ 1710.441483][T19969] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1710.516574][ T6259] hsr_slave_0: left promiscuous mode [ 1710.561655][ T6259] hsr_slave_1: left promiscuous mode [ 1710.562425][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1710.602222][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.743106][ T6259] hsr_slave_0: left promiscuous mode [ 1710.761959][ T6259] hsr_slave_1: left promiscuous mode [ 1710.762701][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1710.812423][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.971445][ T6259] hsr_slave_0: left promiscuous mode [ 1710.991505][ T6259] hsr_slave_1: left promiscuous mode [ 1710.992230][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1711.042509][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1711.753833][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 1711.912057][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 1713.147489][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 1713.312078][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 1714.512039][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 1714.682229][ T6259] team0 (unregistering): Port device team_slave_0 removed