last executing test programs: 13m36.499068253s ago: executing program 3 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x80000, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x1000000, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) 13m35.506542022s ago: executing program 3 (id=107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x24, 0x5a, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 13m35.397361264s ago: executing program 3 (id=108): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000140)=0x394c00) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x0, 0x4010, r0, 0x82000000) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="892c7e42394bc5384bb85a330e10868e5dd3a5979ac4cf396b0259b29c9ab091a95353c3cc7e8ec21448b100000000000062050001d15a88a611ae2d1d466b917a38b28ca744e2070b63ce5521cbd50bd66a1b3f46291ace4617423b079708c77733941eb232a338e7494aaa09914a6b1fe6294a888c119fbeee148f0f723a8d0009727bdf05f56e4688608c518706a77c1aca4ea890f45a597dee9dd15287f9c3a86a394985f01dea5b901dd1364d0dd6e0979da4523cae6aafd5f5215426060d423a1a85fcfe11345e33d3b53dc449b8f68a6aca2edcc6cadf56cae4d9b4d2423514d55544d768bf36a5dd5e3a54909dcfb5f593b7aaf590a31f69f3558d07ff08b71af97a57655408ff1e2e9e05710d9c2b3d9e29ea06fd217e62b6b72b5a0dc6fc5b7c4c76c734302bcbf7bd12adf078d87ae958dbb4e362cd9e4a204ec6ed4eea52d43edd3a1aa82f08e3bd44c90c5e56526199969178a92838d6ff766695603c20dcce67717362594806ef197262ac2a82d9357b77059aab8e6019", @ANYRES16=r2, @ANYBLOB="08002abd7000fddbdf250100000008000300010000000c0006800600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0xc1}, 0x40) shmget$private(0x0, 0x1000, 0x671c724efb7b8b2c, &(0x7f0000fff000/0x1000)=nil) 13m35.309947873s ago: executing program 3 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) acct(&(0x7f0000000380)='./file0\x00') r0 = socket$kcm(0x11, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000002aec000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @multicast2, 0x0}, &(0x7f0000000140)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x20, &(0x7f0000000600)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4f453bc1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f00000000c0)=@xdp={0x2c, 0x8, r5, 0x4}, 0x80, 0x0}, 0x91) r6 = syz_open_dev$vcsu(&(0x7f0000000740), 0x2, 0x40001) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f0000000780)={0x0, 0x8, 0x6, 0x5, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0x10) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r7 = syz_io_uring_setup(0x2334, &(0x7f0000000600)={0x0, 0x83bb, 0x10100, 0x7, 0x10000000}, &(0x7f0000000300), &(0x7f0000000200)=0x0) r9 = syz_io_uring_setup(0x34f1, &(0x7f0000000400)={0x0, 0x0, 0x40}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r10, r8, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r9, 0x0, 0x0}) io_uring_enter(r7, 0x2003, 0x0, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r6, 0x330b) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x8, 0x3a, 0x0, @private2, @mcast2, {[], @echo_request}}}}}, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) setpriority(0x2, 0x0, 0x5) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 13m35.178972825s ago: executing program 3 (id=110): r0 = socket(0x15, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000000)=0x10205, 0x4) r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000180)={0x60, 0x17, 0x7, 0x8, 0x37, 0x1, &(0x7f0000000240)="20a1d1edba0dfe35f267e657ff649698522b307e39dde58578341619936741640ac67db3b29c7103af3a4a98597f2f81fba20bb09440c5"}) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) msgsnd(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="01000000000000003f55ae8edf06cf6c9037b70ad8be7de4bf126949bc37443100eda734e5c5cba83de2e071f02a67726d7b50f2fbfa685f9f4962236767081f8b6eda80478aebb358d36e2495fc2042ed836bcdb7def3fd3df3bee1462675a66e18114b3c969422107b5563d688276614b07b0f1b1835d7070269963cd455f04719357e36c523b57b2689c9fab0c249ce3536992491e90a3109975ca8bd364e2de47c5b56bc0e8a0464337d642862a4c9f33799c1ff657e98a1b3afc3cc4a107ebcab57ee3fb3a586771820f267a1162e0a533c6a03a9a45a4db326fd3a38fee6a5b864be6e42da49b5e78ef27223afa61c84dfbc720ecf1c5656021b18be4bc6b998914d2d82e5fee2e7c49e043975b2a6980b59fc112d8bbc20bc12f9143d028d33a3cbaea066c656e260c2b686857052a848f019701c0a7a60fb49b0c4959374e2d2ec89cf49253d6adc3a7d780bfca8bc3f4d738732b74464f150f37a9d4d008fdbceb87908245b9affb3fd5330d41c8d0cfb6755c9c18c5cea318f3114f9d892bb24e1b8455a53c5f74f9feb610e7d9038db5b0dc6f5cd9b90290a6488e18fd42aa5fb81cb5b6e59164beeced5ecebed4ed405b6cf1e359c8b957dc92189e46c2731cf0ab28a6b746d7e6822f43a57d256f46b0e083667e7ff4eb54aef2d9f34bd7531a21e1245b736456f3102957c8dc3e32442d7572898b6a766b202a9b784b93715ab8ba639cb7ccf569982643987453526188c946f6ecef11286d5f55a87c5d94e7a50a576b4c405012925730ad7577def6ffc9d925f06d3f041f20003da0e73be66661bf627b165c505a826867a5ca1941304a06292d04702528387073180347c16c68865d243f820600ad4040b689a4b9d391a8da55736f82e541e7c5072d1c70f92aca1fe4c1598029e8f4acb8eb58c40588fbd772c5f57be76d0e9fdd8c3c70e659a64f1318c494d510c4c5c8b0898f8bebe1a4fa03dc0953cedfe372ae56828c64b73987313bde4ddd204f3883f66a612b5f302b041d3586a0d70d5081c1820892ebf31e1af11ff18246338584e5e3cd428a9a260f47cbe5ee712d8e380f2ae473c8ba6fcde090a7bf5e15046b99c94442d5ae88f491a67183f0f907684e9cc9f04ad8f60369329b5df4896f1c883f2d59d589cb2ff3eff10ca2c6e96c5bfc9b9b284205279f79fe80e84e39781828d82bc71f943c92411cc61be18c78a247911e7872631d58078042a20138a7c46aaa182a821e43c0d5d639807a7d7173ab2638ffcee670dbd7d9fa6c6c4408b42e31a0d0c9d47fcda2e9613711db71785d66596f999b1a9d863bb1f8d284a4b4af9c5a9fe55422506e79b529c282a4482a11c1a5919029d90f169597a0a33913a32e953a75eca0344d1ddb664bf1769f8ac01657aeb52502c3567e89ea8b06429de1557ca4f5bec1399e0a8f98edd54d02a974282c0ed4ec251ab4ad560ace937c1cc7cd9163c7aa82b936062088115c34f1eb0a1c766f76b0ea26f116684e193f10206ebacde168083575413060b236ba2051a548fe2213140958c58ef52ba089721e24a0000b82bf9489f923e1aad2d0d34bc88eec99a63a77605e9044eeea3b00e81555618435c556d5fb1e5edd9f6964f18376d27e56632d16d705e25c687374ff5ee03c2574eaf7da281d538fef2a8ff1135be030d0282541d8dcebe4b2b8976c828cae0b4fc5beac3500d5dc76210812b7b414e628511bb9f5d04c376e1bbbbaabfb04ffacce50fe5a9ecdcfaa1cdde8b51f3736305e2612881f275a4aa513bbedda74aa90fa30550e5766c77738f797a48fbdba53a64a52d048496764c8fe9b29222fdaee3ff3fa981ff451411fd0d40154c2af95e85fd9853ea48e8bcd60512b352093a50d61b12451a839c011c20c237cd5bef1599a8bb8c6c556a5f40cbaebcb4835fe08f28a7643b7044694fd3ad88471ad1c2a7ef29efd8f8b741713a8ea41737e3017be786955f8937ba42b5bb11b58cac6d1134b6f5a3ae70cccb33a8b5e96d65e576fcfddc0624e49040ead315407db9f737bd02851856ba8b7565710a7888271fcee313355559e2c53d70feee599f602c01860ad6db8aa37104932a4c607e5bc0e8aac347351cfd28444ab89826be0d776b8bd6aae9781eddbcdaeb2999f04d919cf6d345390afa7a0fe734588e51220ccbc2937830c2b771383977d08b21e28cd5b741552fc9181769a942cb95bf8ea04c58b9b4b4918046fa51b49edf4f6ecb3c3c62586b544194bd3c80fd05a23670b7beb9bbf57ead7b1774eb1292ba6e89f641a1496ac02694f7834d6faa0346b18bdafd071125a70635ccacc4c5c1c2fc5608523271eebc076022db560b0fa3f2a3ebf8ec1a411c29bd48a067efcb0d2fc46548bc01c61a13d1e68838970b9ea67a0354ed2ec12c7cb222340fddf8a9b33fd65040a0c583c7c031ed5fd412ebcf95d4cd188443fd93d3bfc555079dfbb69a6038f0c3b48039c11ccb977345e58d92551a226dfca335783939bc5b7e0dbcf50d0cabe2e86ac7ddcd10a92ca6f2cfe5b983a204853684f1d810ff38434d7ef78e12a0d5f825c8f363b4b91eeea6f44875144618a6aad4d31368f31b908c73b03201a690af324e2586a3a8114254512d64be55cd10fe92cf7c192748aeb1d97607a430276df13cf491bce7ed37f4d32e244626dfe00db57da915706c59e645f0355bfc4d2636a41375e1f8eebf1f48faee5c3d7b59aa920c72d52d5f4560790db6301370b643394a807f6dc3dfe1a7d77ff2b5126b265ade80a33dbbf7eb2ecf2168905d722a7c4f5fab7c29aebb51a269c529395707f5014ed50596b71467b61b6a2da1bcfe3f498fd07be1b30a0dea5055db9f34814c6d69d1b404d92b5b8a90312146528ce41f4c4e793a1475447af89325019d74df2c4ed8883154c5c1b3f9eed8fbe74a74f5f0c66a9e996f4e050265ee2b796a295b1db015387aaf8e9e0bbd4a6216ceef1f8cac8fb12807f7ff87ddeb1eae8def2810af3c985fd4f04700aaf760c88a0e7904d4a7786bbb7d9b0980d5f3dedf2a756c614808d0c3c98a707976eff8f8775fbf75aa30fbf9339ea9e9108dce6c31f6c714c1485c8b5c855c46c791bdee68ce8c6fdad095b51738c77126911d325bad359212273268d8e879c85c7638ff1ddd2cef4d4002a87708cc2979b604785f49fc24713decab1159f59c3718f55e6717dda4e0153aaab852af08846ebee5bb88e9f6c047efe2cf73330d56a2b9475333f6a169c0a380a55edf7e60e273ce3f06545b2c71e4c7b51acb3833eb856434111aaeac9b1d245b968111731cf87b1e33ba45ce079a5009ae3df228a3acb22b4526b4235a1d0841e4b92e2a46064b47285849070ebfe5fd050b32c0d389756abc38badce38b2fbaaacba2af7c964c7ce68a030deac6e9b30baeaa56cd18a7d28e2a258036aec40b3e9fb6921c9acccc8ac8b3903abc6eaa66a05079bfc01c92b79a7025049dadb8c043b214d88f50bde4e7b3b789826f2b1fdcf89994835a26ec6a1c7f491c0597fc2f9fa83d83ed7cc7f39c5ca6274798ac64c9779feca98bd52bf512305c34a500b5321890c2876bd9ec0a042675b3b86e82c2783bb1f72f3b0857baa02996ba4e66e81fc1c81426d3d6335d60acd14fc7c670dbd20cf01e9fb2d084da2c356a1ee0f4718bf27a6682e61f4564af85da7600aeb32f1a38c4ad0336278112a83b5a0419915c24f8209517dbb9fd857992d216da757cd2eb6a9377d1841c830360f59831345d4768a2b995c1ec31a94de2b399a49e96c70a416cacf4a2a65a14efb5709cd5cf374202ef3e3f5efbe63c6317fbe919a9eb8aec59375765b942b36d31438c6e284daf45a367d60985d88df4b96b3b12dc629dcac2b88f2c2245ff0a34a0b1ec7873add0924eb224500ce5900776a58fa036fa4d3c3c9dcc58a05ae642967456450c1ea053e9ec3d6ebcb8b902477dc4d57e2b55f748c7db9adb8dec7fe0a953966d0ca565cd1a7fec08017f3316c25e57c1e6f252c323745f0823d91bf14026e04b6c3a1ac3230d71863e8e60bb170c66ea59924327c7357f0e68d8897f851c7115d6c1ada4c37d1664e11b6e675bbc4ba4772b1637809b5c7d2bd7725076bce94b12f1beeea44368e4381e2b2ecc1cb9c17b79bc67425d0a5504e464c50cc09711e53dfcb27bfc3cf764c32da8993f8182638729a4629a7b0327211c45252f20f432b244a23f66249e40b97964035ff79eb76c7e5e44ba95b49237bf5b1ab8a929df8354c6c57af20cf80bb8dff67f051f453cfab7cfe9d215182330be08c12a6d028515f0ccd889c74bc08692103417629ed53ac30ff1da1c7479fdb45b5553253c0f3dab00505d0907adc8787a3dd7f093f90f814d639bf1a0feaed3be00e2453eaee5ef20ca9ba7a1d03de468df138ad742650fd5546aa52c3e4492d3a8cfee55327e4e2bedab33c6d65b4bf8c0ce694411c9055e64a7ad1f308157861d845fca4b014a95e0472dccf29ee32c49c9da69b1a48f737e709d4e57fe20a0570e3428fe60dcaca70d8f2f7be512783bdad0d6934133d9fc0ee532bec7473af6637aa2f99e045d5f20f496fa37f7baa1020b5fc52a15265be928ff3551ab9860a7604071023f4a7563e39746d163fab180b36b4c3048686cd407fcae7c55b4c5b74722357b3a16cacf0f782f1e19d8b2adb4595bbc6d55861b3d357c0412013981c6a7423d11cd94ca68112de539c738b8f1f0ffc8ccd823955c143c4d7a64f2b084c02548c2a69e708082a77453635f36dd927bea83bc786bf58de467b23baeec312a2a2c524d4410235f2e85c156a926fa434d7b4629c5c8381f46b7049f8e2ddb0eaadfe4844a6ca82c524644b6ddde6b511d0e25bef4e96b07e8e3de090c9435148474c79ce405ae2cae13162d074168c66c2527112cb57568b9fa6a2fea51b191833805b1f061f000a0252303859bdba5b9301fa0badd4ccc094aadb4a3ed15fd1eb4ce588e3f22462b641dc7522223dafdd9449d55ca68c7fb0cdd2491c366f168feab44a56339cb2957159435471bcf4bd9ddd491cef73095754449f8a6df679dfefcd37a245bf6aee00772f8d7393325a082cb62495da0d18900f17061977544c58e46ca2f8e67cd1b44fa6a12f6c1bbdd18ac78b389a4b2667d158dcd3962a86bb75b453fb6b6147777e752108b0764ee3b432761849c5ce3e017aacf630a80f87b9686ced0e6e8bf3141767fc1d51e2b2d481f3c0da7da26054598231d19370c2ff0599c8b3c45cc4cbe1d966b7879934a1b068a31ec7041e7befdf5979b45ba5015bc5f7c4cc305f32afd5395c25a899669589d802082f7ac4088e56526a703c6ffe8e7a93e6aec76f77d7d56c6a1ad274dc82c8e7a454b0475d6864b213bd985ebaae5fae3ac0d8419ff6199f9339bd8a8538a95f79370910cf8afea146d50373df58664f1688c2fe64c0406a592b32557bda22491475a79681a5918aa3565ebf72f45e0a3713583b17124cde4a58d2efa1bd22c3ce322cf09b1b1342b3cf5f3e27b882cb9c2cc3e2fc24127951f15c13d77827432ba2778b06918b7cd4475bbd00d8f72b28295aa19cf9bbf62d34dd09f2ce3e20c33632423f1fb3fe71ee0d1cbb8a0beb51b2d89657b76b69804bac8a85b4f2a6fa3f708faab4ec096a4cbe08e2b29e95f72329890e5f839e4168be416def57ec303c7a581c9ee0decc198909a301fdd42dc3c6eca9aa351e094d9a9f823eb4f7c4d18d3ffa3184ba935133659fe54971b7d8631caf94673748493b8fcb5e540763d0ed991955dbc"], 0xfd1, 0x800) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x43500, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40), 0x0, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r9 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 13m34.928616872s ago: executing program 3 (id=113): r0 = io_uring_setup(0x2e34, &(0x7f0000000900)={0x0, 0x100, 0x80, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a300000000014000380080002400000000008000140000000001400000011"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m34.563822218s ago: executing program 32 (id=113): r0 = io_uring_setup(0x2e34, &(0x7f0000000900)={0x0, 0x100, 0x80, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a300000000014000380080002400000000008000140000000001400000011"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m31.636633706s ago: executing program 2 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x80000, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000280), &(0x7f0000000380)}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) 8m30.580365486s ago: executing program 2 (id=1201): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="780000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 8m30.376456516s ago: executing program 2 (id=1202): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffff}, @call={0x85, 0x0, 0x0, 0xbe}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70f) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x15, 0x0, 0x0) execve(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xfffffffffffffd92) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={0x0, 0xfffffffffffffd8c}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r2 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010128bd7000fddbdf252000000008000300", @ANYRES32=r6, @ANYBLOB="a5002d80080003000900000008000300020000000500010009000000000004000000000005000100090000000800020002000000080003000600000008000300064000000800030002000000000003000100000008000300", @ANYRES32=r6, @ANYBLOB="13e4250c510a9c0dbffe4eaf9adaff08e53ebea080f74bb1c7"], 0x70}, 0x1, 0x0, 0x0, 0x8801}, 0x4040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000040000000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000000000658af8ff00000000b7080000000000007b8af0ff00000000bfa10000000020000701040000f0ffffffb7020000080000001846ac3638b1addde6960746052c4e5534c61fe76baf76080ec62ee88f4451527dcad0dc7a247ad8f8afd7dd78989aa73957b2cb6c92ae6c43a79543ba0303623e682e7ad8fd57e63a3e4777145fe3f09ea448409caa9b29524c1b286d189795300a8ef2f114524c80953cdf05c0e521f08280", @ANYRES32=r7, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r11, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x0, 0x2000]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000640)=r8, 0x4) sendmsg$unix(r13, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') fchdir(r14) 8m30.021397433s ago: executing program 2 (id=1205): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000002580)='./file0/../file0\x00', 0x9) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) 8m29.535217384s ago: executing program 2 (id=1207): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0xffffff7f, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x44080) 8m29.128924398s ago: executing program 2 (id=1210): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@dfltuid}]}}) 8m28.699893841s ago: executing program 33 (id=1210): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@dfltuid}]}}) 13.086051597s ago: executing program 5 (id=4124): socketpair(0x29, 0x2, 0x9, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4004, r3, 0x2}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f0000002080)='/dev/dma_heap/system\x00') mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r5, 0x0) 10.109294748s ago: executing program 5 (id=4128): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="0012ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0xa, 0x110000) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x1a37c1, 0x1e4) 6.231657367s ago: executing program 4 (id=4148): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x14}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) 5.669521225s ago: executing program 5 (id=4150): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x7, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.461863009s ago: executing program 0 (id=4152): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x97, 0x89, 0x59, 0x20, 0x1110, 0x9000, 0xf411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x6, 0xb0, 0x5, [{{0x9, 0x4, 0x19, 0x9, 0x0, 0xb4, 0xa7, 0xd5}}]}}]}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf25120000000800150001000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x80) 5.461292404s ago: executing program 4 (id=4153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0x3}, {0x5, 0xffff}, {0x4, 0xb}}}, 0x24}}, 0x20044004) 5.454878203s ago: executing program 1 (id=4154): io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb, 0x3d3}) r0 = io_uring_setup(0x4dc2, &(0x7f0000000200)={0x0, 0x40, 0x100, 0x0, 0x20}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 5.390348094s ago: executing program 1 (id=4155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0) shutdown(r0, 0x1) 5.389721401s ago: executing program 6 (id=4156): r0 = syz_io_uring_setup(0x18a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) mkdir(&(0x7f0000001600)='./bus\x00', 0x1a9) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x3, 0x13, 0x6}], 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x10, 0x803, 0x0) openat$drirender128(0xffffff9c, 0x0, 0x2001, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c0001000000000000000000040000"], 0x24}], 0x1}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4096, 0x1000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 5.389127828s ago: executing program 5 (id=4157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) 5.276355065s ago: executing program 4 (id=4158): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x68}}, 0x0) 5.147922903s ago: executing program 4 (id=4159): syz_open_procfs(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000000)={0x0, 0x0, 0x0}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xcb}, 0x0) r2 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x8000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x200000400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x7, 0x8}, {0x3, 0x1, 0x1000}], 0x2, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000240)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x240000c4) 4.297410038s ago: executing program 6 (id=4160): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) 3.693258069s ago: executing program 5 (id=4161): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="0012ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0xa, 0x110000) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x1a37c1, 0x1e4) 3.64577521s ago: executing program 0 (id=4162): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x8}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@loopback}, {@in, 0x2, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x158}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000001100), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x1038, 0x30, 0x1, 0x0, 0x0, {}, [{0x1024, 0x1, [@m_bpf={0x1020, 0x1, 0x0, 0x0, {{0x8}, {0xff8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xff4, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1038}}, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 3.63531551s ago: executing program 4 (id=4163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x1200, &(0x7f0000000340), 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r7, r8, 0x1, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000520000007914b800000000000600e0000000000095000000003e0000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) 2.733465636s ago: executing program 1 (id=4164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a3100000000090001007379"], 0x1ec}}, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 2.732216845s ago: executing program 4 (id=4165): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000000085000000040000", @ANYRES32=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r5}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000007000010000000000000000", @ANYRES32=r8, @ANYBLOB='\f\x00'], 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0x0, 0x0}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.53367081s ago: executing program 0 (id=4166): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socket(0x15, 0x5, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x58, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048848}, 0x4000) bind$ax25(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @default]}, 0x48) sendto$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.228905657s ago: executing program 1 (id=4167): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) 1.719115469s ago: executing program 6 (id=4168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000300)=0xffffffff, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) 1.717502707s ago: executing program 1 (id=4169): sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000080)=0x3ff) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000000c0)={0x200, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100800000000}) 1.583192032s ago: executing program 0 (id=4170): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 1.444428649s ago: executing program 0 (id=4171): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xa8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x1) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hfsplus\x00', 0x2, &(0x7f0000000300)='#\x03\x00') listen(r3, 0x1ff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r5 = syz_open_dev$usbfs(0x0, 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r5, 0xffffd000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084504, &(0x7f0000ffcffc)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sysctl(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 1.045178448s ago: executing program 6 (id=4172): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 981.625171ms ago: executing program 0 (id=4173): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) 981.207224ms ago: executing program 6 (id=4174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 658.512073ms ago: executing program 1 (id=4175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x1200, &(0x7f0000000340), 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r7, r8, 0x1, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000520000007914b800000000000600e0000000000095000000003e0000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) 141.166543ms ago: executing program 5 (id=4176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, 0x52, 0x109, 0x0, 0x0, {0x1c}, [@nested={0x4}]}, 0x18}}, 0x0) 0s ago: executing program 6 (id=4177): syz_usb_connect(0x3, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) write$char_usb(r0, &(0x7f0000000d00)="d30549dee6d4eabd338bb2d9610d59023196ac64c07f51d4ff6fd58d368bee6619387b4e5f6bccbe093b9dadea1a72f9b3090935769d46232b6887a8b0526387036722385279973d60cc90da8295f94522bb914cf26700e796ce3b2b315bd8153edbac683e0000425d63f21dfc65d64c0af88c", 0x73) 0s ago: executing program 0 (id=4180): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 1 [ 683.698353][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 683.747064][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 683.756480][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.767084][ T5819] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 683.775049][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.954436][T15546] lo speed is unknown, defaulting to 1000 [ 684.747538][T15546] wlan0 speed is unknown, defaulting to 1000 [ 684.946314][T11881] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.061375][T11881] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.082186][T15546] chnl_net:caif_netlink_parms(): no params data found [ 685.140976][T11881] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.266697][T11881] team0: Port device netdevsim0 removed [ 685.288425][T15546] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.304816][T15546] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.313207][T15546] bridge_slave_0: entered allmulticast mode [ 685.320556][T15546] bridge_slave_0: entered promiscuous mode [ 685.331135][T15546] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.338501][T15546] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.346268][T15546] bridge_slave_1: entered allmulticast mode [ 685.370420][T15546] bridge_slave_1: entered promiscuous mode [ 685.459942][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.482356][T15546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.568065][T15584] tmpfs: Bad value for 'mpol' [ 686.009876][ T5819] Bluetooth: hci0: command tx timeout [ 686.027754][T15546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.232423][T15588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3049'. [ 686.309705][T15546] team0: Port device team_slave_0 added [ 686.334942][T11881] bridge_slave_1: left allmulticast mode [ 686.348048][T11881] bridge_slave_1: left promiscuous mode [ 686.372593][T11881] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.506784][T11881] bond1 (unregistering): (slave geneve2): Releasing active interface [ 687.515055][T11881] geneve2 (unregistering): left promiscuous mode [ 687.523117][T11881] geneve2 (unregistering): left allmulticast mode [ 687.713122][T11881] batman_adv: batadv0: Removing interface: macvlan1 [ 687.722459][T11881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.733332][T11881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.743187][T11881] bond0 (unregistering): Released all slaves [ 687.753418][T11881] bond1 (unregistering): Released all slaves [ 687.765326][T11881] bond2 (unregistering): Released all slaves [ 687.778949][T11881] bond3 (unregistering): Released all slaves [ 687.789313][T15546] team0: Port device team_slave_1 added [ 687.850991][T15546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.869256][T15546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.895856][T15546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.910605][T11881] : left promiscuous mode [ 687.943872][T15546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.952467][T15546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.979909][T15546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.028540][T11881] tipc: Disabling bearer [ 688.040898][T11881] tipc: Left network mode [ 688.056853][T15546] hsr_slave_0: entered promiscuous mode [ 688.071909][ T5819] Bluetooth: hci0: command tx timeout [ 688.100817][T15546] hsr_slave_1: entered promiscuous mode [ 688.118102][T15546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 688.126059][T15546] Cannot create hsr debugfs directory [ 688.205589][ T29] audit: type=1400 audit(1744793719.098:1115): avc: denied { cmd } for pid=15621 comm="syz.5.3060" path="socket:[47389]" dev="sockfs" ino=47389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 688.594535][T15630] : renamed from bond0 (while UP) [ 689.419156][ T5911] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 689.454407][T15637] IPv6: addrconf: prefix option has invalid lifetime [ 689.699094][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 689.710464][ T5911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 689.743059][T15642] overlayfs: failed to clone upperpath [ 689.836829][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 689.887111][T11881] hsr_slave_0: left promiscuous mode [ 689.931285][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 689.954045][ T5911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 689.970366][ T5911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 689.980634][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.995506][T11881] hsr_slave_1: left promiscuous mode [ 690.060463][T11881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.150994][ T5819] Bluetooth: hci0: command tx timeout [ 690.166534][T11881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.261651][T11881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.281692][T11881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.426628][T11881] veth1_macvtap: left promiscuous mode [ 690.447584][T11881] veth0_macvtap: left promiscuous mode [ 690.458902][T11881] veth1_vlan: left promiscuous mode [ 690.474388][T11881] veth0_vlan: left promiscuous mode [ 690.488200][ T5911] usb 5-1: GET_CAPABILITIES returned 0 [ 690.494236][ T5911] usbtmc 5-1:16.0: can't read capabilities [ 690.608792][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3069'. [ 690.694435][ T8] usb 5-1: USB disconnect, device number 50 [ 691.003996][T15662] futex_wake_op: syz.6.3069 tries to shift op by -1; fix this program [ 691.154628][T11881] team0 (unregistering): Port device team_slave_1 removed [ 691.203349][T11881] team0 (unregistering): Port device team_slave_0 removed [ 691.255448][ T35] smc: removing ib device syz! [ 691.457472][T15668] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3072'. [ 691.842082][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3073'. [ 692.154246][T15661] tipc: Enabling of bearer rejected, already enabled [ 692.198801][T15672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.229126][ T5819] Bluetooth: hci0: command tx timeout [ 692.244996][T15672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.335532][T15672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.360772][T15672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.767007][T15689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3079'. [ 694.208965][T15546] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 694.382908][T15546] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 694.439413][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 694.462673][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3082'. [ 694.550099][T15546] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 694.576996][T15699] netlink: 26 bytes leftover after parsing attributes in process `syz.4.3082'. [ 694.592007][T15546] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 694.817347][T15546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.857610][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3084'. [ 694.859594][T15546] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.921152][T15707] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3085'. [ 694.934861][T15706] tipc: Enabling of bearer rejected, already enabled [ 694.943324][T15706] futex_wake_op: syz.5.3084 tries to shift op by -1; fix this program [ 694.943649][ T9447] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.958560][ T9447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.998721][ T9447] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.005865][ T9447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.061859][T15711] IPv6: addrconf: prefix option has invalid lifetime [ 695.124973][T15546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 696.319316][ T29] audit: type=1400 audit(1744793727.168:1116): avc: denied { read } for pid=15721 comm="syz.5.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 696.781744][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3091'. [ 696.864444][T15546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.013699][T15546] veth0_vlan: entered promiscuous mode [ 697.036288][T15546] veth1_vlan: entered promiscuous mode [ 697.076067][T15546] veth0_macvtap: entered promiscuous mode [ 697.091397][ T29] audit: type=1400 audit(1744793727.988:1117): avc: denied { listen } for pid=15742 comm="syz.1.3095" lport=46474 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 697.095258][T15546] veth1_macvtap: entered promiscuous mode [ 697.179162][ T5911] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 697.370451][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 697.383175][ T5911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 697.616705][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 697.640639][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 697.651223][ T5911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.664753][ T5911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 697.674307][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.683961][T15546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.702544][T15546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.716807][T15546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.789091][T15546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.804721][T15546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.822301][T15546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.838120][T15546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.848838][T15546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.864271][T15546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.910380][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3099'. [ 697.911032][T15546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.928632][ T5911] usb 5-1: GET_CAPABILITIES returned 0 [ 697.945317][ T5911] usbtmc 5-1:16.0: can't read capabilities [ 697.972899][T15546] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.001614][T15546] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.021752][T15758] futex_wake_op: syz.5.3099 tries to shift op by -1; fix this program [ 698.038083][T15546] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.054207][T15546] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.066743][T15754] tipc: Enabling of bearer rejected, already enabled [ 698.132412][ T9] usb 5-1: USB disconnect, device number 51 [ 698.215489][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.235980][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.269502][T15762] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3101'. [ 698.284864][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.293276][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.673482][ T29] audit: type=1400 audit(1744793730.558:1118): avc: denied { ioctl } for pid=15793 comm="syz.0.3112" path="socket:[47023]" dev="sockfs" ino=47023 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 699.822093][T15792] hub 6-0:1.0: USB hub found [ 699.834174][T15796] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3113'. [ 699.855852][T15792] hub 6-0:1.0: 1 port detected [ 700.656729][T15815] ptrace attach of "./syz-executor exec"[15072] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\ [ 701.132987][T15818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 701.281417][T15818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 701.304292][T15818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 701.314384][T15818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 701.332271][T15818] geneve2: entered promiscuous mode [ 701.664058][T15837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3126'. [ 702.304809][T15844] ALSA: mixer_oss: invalid OSS volume '/file0' [ 703.969308][ T970] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 704.149170][ T970] usb 1-1: Using ep0 maxpacket: 32 [ 704.175834][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 704.185640][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 704.195228][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 704.204579][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 704.215073][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 704.225174][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 704.237739][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 704.248589][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 704.257966][ T970] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 704.271773][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.280236][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 704.289925][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 704.301137][ T970] usb 1-1: Product: syz [ 704.305379][ T970] usb 1-1: Manufacturer: syz [ 704.310872][ T970] usb 1-1: SerialNumber: syz [ 704.318380][ T970] usb 1-1: config 0 descriptor?? [ 704.345310][ T970] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 704.813525][T15910] dccp_close: ABORT with 15584 bytes unread [ 705.649420][ T5868] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 705.824912][ T5868] usb 2-1: config index 0 descriptor too short (expected 31, got 27) [ 705.854768][ T5868] usb 2-1: config 1 interface 0 has no altsetting 0 [ 705.864520][ T5868] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 705.886223][ T5868] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 705.902475][ T5868] usb 2-1: Product: syz [ 705.906669][ T5868] usb 2-1: Manufacturer: syz [ 705.924329][ T5868] usb 2-1: SerialNumber: syz [ 705.948829][T15953] overlayfs: failed to clone upperpath [ 706.182710][ T970] gspca_stk1135: reg_w 0x200 err -71 [ 706.209067][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 706.215455][ T970] gspca_stk1135: Sensor write failed [ 706.243217][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 706.270627][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 706.278112][ T970] gspca_stk1135: Sensor write failed [ 706.289128][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 706.298812][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 706.305789][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 706.319257][ T970] gspca_stk1135: Sensor read failed [ 706.324810][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 706.331703][ T970] gspca_stk1135: Sensor read failed [ 706.337092][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 706.348134][ T970] gspca_stk1135: Detected sensor type unknown (0x0) [ 706.355305][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 706.362065][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 706.362448][ T5868] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 706.369155][ T970] gspca_stk1135: Sensor read failed [ 706.369190][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 706.369199][ T970] gspca_stk1135: Sensor read failed [ 706.369223][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 706.404686][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 706.412077][ T970] gspca_stk1135: Sensor write failed [ 706.417605][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 706.420635][T15964] ptrace attach of "./syz-executor exec"[10167] was attempted by "./syz-executor exec"[15964] [ 706.424555][ T970] gspca_stk1135: Sensor write failed [ 706.440252][ T970] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 706.455569][ T970] usb 1-1: USB disconnect, device number 50 [ 706.487104][ T29] audit: type=1400 audit(1744793737.378:1119): avc: denied { write } for pid=15965 comm="syz.4.3183" lport=59363 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 706.519102][ T5868] usb 2-1: USB disconnect, device number 48 [ 706.533131][ T5868] usblp0: removed [ 706.540526][T15959] lo speed is unknown, defaulting to 1000 [ 706.546773][T15959] wlan0 speed is unknown, defaulting to 1000 [ 706.750426][T15959] chnl_net:caif_netlink_parms(): no params data found [ 706.808787][T15959] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.833739][T15959] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.861140][T15959] bridge_slave_0: entered allmulticast mode [ 706.928320][T15959] bridge_slave_0: entered promiscuous mode [ 706.962010][T15959] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.969249][T15959] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.983218][T15959] bridge_slave_1: entered allmulticast mode [ 707.004507][T15959] bridge_slave_1: entered promiscuous mode [ 707.476646][T15959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.056147][T15959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.117123][T15959] team0: Port device team_slave_0 added [ 708.145113][T15959] team0: Port device team_slave_1 added [ 708.203328][T15959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.223003][T15959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.279041][T15959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.334122][T15959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.390003][T15959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.431722][T15959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.474323][T15959] hsr_slave_0: entered promiscuous mode [ 708.519495][ T5830] Bluetooth: hci3: command tx timeout [ 708.606543][T15959] hsr_slave_1: entered promiscuous mode [ 708.620391][T15959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.628124][T15959] Cannot create hsr debugfs directory [ 708.703293][T16003] dccp_close: ABORT with 15604 bytes unread [ 708.841849][T15959] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 708.925038][T15959] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 709.021169][T15959] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 709.099954][T15959] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 709.119094][ T5868] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 709.213934][T15959] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 709.223731][T15959] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 709.232309][T15959] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 709.241397][T15959] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 709.283988][ T5868] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 709.304333][ T5868] usb 1-1: config 1 interface 0 has no altsetting 0 [ 709.315343][T15959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.320628][ T5868] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 709.341946][ T5868] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 709.346969][T15959] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.364223][ T977] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.371406][ T977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.387913][ T5868] usb 1-1: Product: syz [ 709.392384][ T5868] usb 1-1: Manufacturer: syz [ 709.396977][ T5868] usb 1-1: SerialNumber: syz [ 709.928119][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.935227][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.023279][ T5868] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 710.550636][ T5830] Bluetooth: hci3: command tx timeout [ 710.820534][T16037] __nla_validate_parse: 45 callbacks suppressed [ 710.820550][T16037] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3206'. [ 710.848562][ C1] usblp0: nonzero write bulk status received: -71 [ 710.849272][ T9] usb 1-1: USB disconnect, device number 51 [ 710.880872][T15959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.050724][T16014] usblp0: removed [ 711.207698][T15959] veth0_vlan: entered promiscuous mode [ 711.218075][T15959] veth1_vlan: entered promiscuous mode [ 711.251696][T15959] veth0_macvtap: entered promiscuous mode [ 711.267069][T15959] veth1_macvtap: entered promiscuous mode [ 711.282799][T15959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.293638][T15959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.304148][T15959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.315004][T15959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.325261][T15959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.336671][T15959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.348622][T15959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.359152][T15959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.370355][T15959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.381001][T15959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.391736][T15959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.401916][T15959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.412677][T15959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.423417][T15959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.436635][T15959] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.465757][T15959] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.479241][T15959] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.487987][T15959] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.565996][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.576040][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.616787][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.625318][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.139483][ T25] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 712.435416][ T25] usb 6-1: device descriptor read/64, error -71 [ 712.557616][T16076] netlink: 'syz.4.3217': attribute type 4 has an invalid length. [ 712.639572][ T5830] Bluetooth: hci3: command tx timeout [ 712.859098][ T25] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 712.869284][ T5830] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 712.879579][ T5830] Bluetooth: hci0: Injecting HCI hardware error event [ 712.891059][ T5819] Bluetooth: hci0: hardware error 0x00 [ 713.249131][ T25] usb 6-1: device descriptor read/64, error -71 [ 713.271482][T16084] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3218'. [ 713.359449][ T25] usb usb6-port1: attempt power cycle [ 713.609146][ T5865] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 713.839165][ T25] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 713.861074][ T25] usb 6-1: device descriptor read/8, error -71 [ 713.868590][ T5865] usb 2-1: config index 0 descriptor too short (expected 31, got 27) [ 713.883044][ T5865] usb 2-1: config 1 interface 0 has no altsetting 0 [ 713.899406][ T5865] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 713.908520][ T5865] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 713.919105][ T5865] usb 2-1: Product: syz [ 713.926849][ T5865] usb 2-1: Manufacturer: syz [ 713.935500][ T5865] usb 2-1: SerialNumber: syz [ 714.109098][ T25] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 714.144455][ T25] usb 6-1: device descriptor read/8, error -71 [ 714.159280][T16119] 9pnet_fd: Insufficient options for proto=fd [ 714.260190][ T25] usb usb6-port1: unable to enumerate USB device [ 714.562078][ T5865] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 714.709450][ T5830] Bluetooth: hci3: command tx timeout [ 714.868179][ C1] usblp0: nonzero write bulk status received: -71 [ 714.875101][ T5865] usb 2-1: USB disconnect, device number 49 [ 715.037103][ T5830] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 715.046571][ T5830] Bluetooth: hci1: Injecting HCI hardware error event [ 715.060324][ T5830] Bluetooth: hci1: hardware error 0x00 [ 715.121271][T16091] usblp0: removed [ 715.189575][ T5819] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 715.895397][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3239'. [ 715.905938][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3239'. [ 717.269109][ T5830] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 718.136103][T16103] Set syz1 is full, maxelem 65536 reached [ 719.265282][T16161] hub 6-0:1.0: USB hub found [ 719.270155][T16161] hub 6-0:1.0: 1 port detected [ 719.656091][T16181] [U]  [ 719.662903][T16181] [U] K{ [ 719.666274][T16181] [U] T 1ŠFFˊ`GJǘGO/MC [ 719.683877][T16184] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3254'. [ 719.693549][T16181] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 719.717028][T16181] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 719.730184][T16181] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 719.768392][T16181] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 719.792787][T16181] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 719.805418][T16181] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 719.818257][T16181] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 719.921857][T16181] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 719.938558][T16181] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 719.956906][T16181] [U] 22Ʃ۩X?0;3U [ 719.962373][T16181] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 719.988235][T16181] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 719.998505][T16181] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 720.007664][T16181] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 720.015437][T16181] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 720.028420][T16181] [U] EC [ 720.032606][T16181] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 720.246290][T16171] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 720.749025][T16193] fuse: Bad value for 'rootmode' [ 721.199644][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3259'. [ 721.272072][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.273370][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.274198][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.274939][T16207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.376989][T16226] overlayfs: failed to clone upperpath [ 723.253364][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'. [ 723.284803][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3277'. [ 723.317127][T16243] netlink: 26 bytes leftover after parsing attributes in process `syz.4.3277'. [ 723.517248][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3278'. [ 724.319211][ T5865] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 724.509465][ T5865] usb 1-1: device descriptor read/64, error -71 [ 724.769279][ T5865] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 724.899112][ T5865] usb 1-1: device descriptor read/64, error -71 [ 725.040077][ T5865] usb usb1-port1: attempt power cycle [ 725.409475][ T5865] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 725.459337][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3299'. [ 725.473212][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3299'. [ 725.638395][ T51] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 725.819524][ T5865] usb 1-1: device descriptor read/8, error -71 [ 726.029534][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 726.174992][ T51] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.215014][ T51] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 726.231077][ T51] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.241000][ T5865] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 726.273335][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.289119][ T51] usb 5-1: Product: syz [ 726.295335][ T51] usb 5-1: Manufacturer: syz [ 726.302225][ T5865] usb 1-1: device descriptor read/8, error -71 [ 726.313224][T16310] tipc: Started in network mode [ 726.329055][ T51] usb 5-1: SerialNumber: syz [ 726.331986][T16310] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 726.345322][T16310] tipc: Enabled bearer , priority 0 [ 726.364148][T16310] futex_wake_op: syz.1.3305 tries to shift op by -1; fix this program [ 726.429399][ T5865] usb usb1-port1: unable to enumerate USB device [ 726.747238][ T51] usb 5-1: 0:2 : does not exist [ 727.459174][ T5867] tipc: Node number set to 11578026 [ 727.589420][ T5867] usb 5-1: USB disconnect, device number 52 [ 728.973023][T16377] fuse: Unknown parameter 'user_i00000000000000000000' [ 731.980865][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'. [ 732.008796][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'. [ 732.217215][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'. [ 732.241829][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'. [ 732.253206][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'. [ 732.269053][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'. [ 732.285706][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'. [ 732.301447][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'. [ 732.314576][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'. [ 732.362643][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3335'. [ 732.498416][T16408] fuse: Unknown parameter 'user_i00000000000000000000' [ 732.732710][ T29] audit: type=1400 audit(1744793763.628:1120): avc: denied { read } for pid=5176 comm="acpid" name="event4" dev="devtmpfs" ino=3913 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 732.763442][ T29] audit: type=1400 audit(1744793763.628:1121): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3913 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 732.786868][ T29] audit: type=1400 audit(1744793763.628:1122): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3913 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 734.130828][T16443] mkiss: ax0: crc mode is auto. [ 737.189719][T16485] hub 6-0:1.0: USB hub found [ 737.194714][T16485] hub 6-0:1.0: 1 port detected [ 738.539047][ T9] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 738.742710][ T9] usb 2-1: config index 0 descriptor too short (expected 31, got 27) [ 738.835145][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 738.835799][T16512] __nla_validate_parse: 38 callbacks suppressed [ 738.835812][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'. [ 738.868071][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'. [ 738.870092][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 738.942489][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'. [ 739.039245][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'. [ 739.048807][ T9] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 739.059381][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'. [ 739.084298][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'. [ 739.101999][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'. [ 739.117460][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'. [ 739.130849][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'. [ 739.143217][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'. [ 739.145410][ T9] usb 2-1: Product: syz [ 739.200665][ T9] usb 2-1: Manufacturer: syz [ 739.239075][ T9] usb 2-1: SerialNumber: syz [ 740.697171][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 741.047214][ T9] usb 2-1: USB disconnect, device number 50 [ 741.086425][ T9] usblp0: removed [ 742.373569][ T29] audit: type=1400 audit(1744793773.268:1123): avc: denied { append } for pid=16554 comm="syz.5.3395" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 742.972907][ T5865] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 743.077299][T16559] xt_connbytes: Forcing CT accounting to be enabled [ 743.084710][T16559] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 743.096605][T16559] xt_bpf: check failed: parse error [ 743.129172][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 743.397850][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.459100][ T5865] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 743.492549][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.526275][ T5865] usb 1-1: config 0 descriptor?? [ 743.848276][ T5865] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 744.521080][ T51] usb 1-1: USB disconnect, device number 56 [ 744.859056][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 745.072180][ T9] usb 2-1: config index 0 descriptor too short (expected 63506, got 18) [ 745.103643][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.158292][ T9] usb 2-1: config 0 has no interfaces? [ 745.261970][T16586] __nla_validate_parse: 48 callbacks suppressed [ 745.261988][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3405'. [ 745.367525][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3405'. [ 745.370783][ T9] usb 2-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 745.386099][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.399777][ T9] usb 2-1: Product: syz [ 745.408376][ T9] usb 2-1: Manufacturer: syz [ 745.417471][ T9] usb 2-1: SerialNumber: syz [ 745.419359][T16586] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3405'. [ 745.592819][ T9] usb 2-1: config 0 descriptor?? [ 745.806432][ T29] audit: type=1400 audit(1744793776.698:1124): avc: denied { execute } for pid=16592 comm="syz.0.3407" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=51091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 745.832747][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.972630][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.712943][ T29] audit: type=1400 audit(1744793778.128:1125): avc: denied { map } for pid=16612 comm="syz.0.3414" path="socket:[51513]" dev="sockfs" ino=51513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 747.823475][ T29] audit: type=1400 audit(1744793778.128:1126): avc: denied { read } for pid=16612 comm="syz.0.3414" path="socket:[51513]" dev="sockfs" ino=51513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 747.964152][T16621] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3415'. [ 748.111458][ T9] usb 2-1: USB disconnect, device number 51 [ 748.779108][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 749.209157][ T9] usb 1-1: device descriptor read/64, error -71 [ 749.459736][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 749.864148][ T9] usb 1-1: device descriptor read/64, error -71 [ 750.026030][ T9] usb usb1-port1: attempt power cycle [ 750.343531][T16647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'. [ 750.619223][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 750.690778][ T9] usb 1-1: device descriptor read/8, error -71 [ 750.831392][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3432'. [ 750.840647][T16666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.849928][T16666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.859047][T15236] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 750.884939][T16666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.893407][T16666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.979150][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 751.019659][T15236] usb 2-1: Using ep0 maxpacket: 16 [ 751.029254][ T9] usb 1-1: device descriptor read/8, error -71 [ 751.040986][T15236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.057584][T15236] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 751.152327][ T9] usb usb1-port1: unable to enumerate USB device [ 751.163293][T15236] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 751.172851][T15236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.183187][T15236] usb 2-1: Product: syz [ 751.193091][T15236] usb 2-1: Manufacturer: syz [ 751.219074][T15236] usb 2-1: SerialNumber: syz [ 751.264279][T16669] fuse: Unknown parameter '0x0000000000000003' [ 751.637060][T15236] usb 2-1: cannot find UAC_HEADER [ 751.661207][T15236] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 751.823688][T16273] udevd[16273]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 752.413710][ T25] usb 2-1: USB disconnect, device number 52 [ 753.021483][T16693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.339681][T16696] overlayfs: failed to clone upperpath [ 753.649037][T15236] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 754.650608][ T25] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 755.679076][ T25] usb 2-1: device descriptor read/64, error -71 [ 755.691015][T15236] usb 6-1: config index 0 descriptor too short (expected 31, got 27) [ 755.715056][T16725] fuse: Unknown parameter '0x0000000000000003' [ 755.721382][T15236] usb 6-1: config 1 interface 0 has no altsetting 0 [ 755.771844][T15236] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 755.781095][T15236] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 755.790135][T15236] usb 6-1: Product: syz [ 755.794358][T15236] usb 6-1: Manufacturer: syz [ 755.799019][T15236] usb 6-1: SerialNumber: syz [ 755.929679][ T25] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 755.951786][T16733] overlayfs: failed to clone upperpath [ 756.079212][ T25] usb 2-1: device descriptor read/64, error -71 [ 756.119142][ T5865] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 756.357648][ T25] usb usb2-port1: attempt power cycle [ 756.440778][ T5865] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 756.452447][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 756.467651][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 756.500885][ T5865] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 756.516273][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.526263][ T5865] usb 1-1: Product: syz [ 756.535834][ T5865] usb 1-1: Manufacturer: syz [ 756.543604][ T5865] usb 1-1: SerialNumber: syz [ 756.556053][ T5865] usb 1-1: config 0 descriptor?? [ 756.572688][ T5865] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 756.573330][T15236] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 756.786996][ T5865] usb 6-1: USB disconnect, device number 52 [ 757.035238][T15236] usb 1-1: USB disconnect, device number 61 [ 757.359197][ T5865] usblp0: removed [ 757.989141][ T29] audit: type=1400 audit(1744793788.878:1127): avc: denied { ioctl } for pid=16758 comm="syz.0.3469" path="socket:[51865]" dev="sockfs" ino=51865 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 758.846428][T16780] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3476'. [ 759.699186][ T970] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 759.960486][ T970] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.979105][ T970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 760.047820][T16794] ptrace attach of "./syz-executor exec"[10167] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\ [ 760.540060][ T970] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 760.657293][T15236] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 760.707920][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 760.716824][ T970] usb 5-1: SerialNumber: syz [ 760.904222][T15236] usb 6-1: config index 0 descriptor too short (expected 31, got 27) [ 760.912489][T15236] usb 6-1: config 1 interface 0 has no altsetting 0 [ 760.923836][T15236] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 760.971404][T15236] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 761.105353][ T970] usb 5-1: cannot find UAC_HEADER [ 761.194574][T15236] usb 6-1: Product: syz [ 761.283783][T15236] usb 6-1: Manufacturer: syz [ 761.361074][T15236] usb 6-1: SerialNumber: syz [ 761.470114][ T970] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 761.522692][ T970] usb 5-1: USB disconnect, device number 53 [ 761.719537][T16273] udevd[16273]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.177235][T15236] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 762.357067][ T25] usb 6-1: USB disconnect, device number 53 [ 762.604656][T16789] usblp0: removed [ 762.907335][T16830] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3495'. [ 763.875907][ T25] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 764.159049][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 764.179032][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.195878][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 764.210085][ T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 764.220055][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.286934][ T29] audit: type=1400 audit(1744793795.128:1128): avc: denied { append } for pid=16841 comm="syz.0.3499" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 764.321118][ T25] usb 5-1: config 0 descriptor?? [ 764.362117][ T25] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 766.210806][T15236] usb 5-1: USB disconnect, device number 54 [ 766.689171][ T25] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 767.048761][T16887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3510'. [ 767.495443][ T25] usb 6-1: config index 0 descriptor too short (expected 31, got 27) [ 767.515354][ T25] usb 6-1: config 1 interface 0 has no altsetting 0 [ 767.541841][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 767.571903][ T25] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 767.584001][ T25] usb 6-1: Product: syz [ 767.588749][ T25] usb 6-1: Manufacturer: syz [ 767.593692][ T25] usb 6-1: SerialNumber: syz [ 769.139855][ T25] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 769.359836][ T25] usb 6-1: USB disconnect, device number 54 [ 769.386195][ T25] usblp0: removed [ 771.009730][T16933] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3529'. [ 772.219649][ T5865] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 772.455129][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 772.466677][ T5865] usb 6-1: unable to get BOS descriptor or descriptor too short [ 772.475871][ T5865] usb 6-1: config 255 has an invalid interface number: 81 but max is 0 [ 772.493101][ T5865] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 772.507769][ T5865] usb 6-1: config 255 has no interface number 0 [ 772.514867][ T5865] usb 6-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 772.533932][ T5865] usb 6-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 772.546258][ T5865] usb 6-1: config 255 interface 81 has no altsetting 0 [ 772.558325][ T5865] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 772.572235][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.580993][ T5865] usb 6-1: Product: syz [ 772.585230][ T5865] usb 6-1: Manufacturer: 諤ᯡ㉃畬ⶃﮅ廈ᾈ㵽跨혇弫⽥眚ꩣ뼣Ἑ攊昗磛뚷଴㶜郙댶⁆⩋￶넁猪⨚Ɫ㨪ꏊ夲箕 [ 772.619902][ T5865] usb 6-1: SerialNumber: syz [ 772.937065][ T5865] input: 諤ᯡ㉃畬ⶃﮅ廈ᾈ㵽跨혇弫⽥眚ꩣ뼣Ἑ攊昗磛뚷଴㶜郙댶⁆⩋￶넁猪⨚Ɫ㨪ꏊ夲箕 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.81/input/input76 [ 772.989355][ T5865] usb 6-1: USB disconnect, device number 55 [ 773.082074][T16974] mkiss: ax0: crc mode is auto. [ 774.899086][T15236] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 775.080555][T15236] usb 2-1: Using ep0 maxpacket: 32 [ 775.094577][T15236] usb 2-1: config index 0 descriptor too short (expected 249, got 27) [ 775.103081][T15236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.119153][T15236] usb 2-1: config 0 has no interfaces? [ 775.127982][T15236] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 775.137800][T15236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.171488][T15236] usb 2-1: config 0 descriptor?? [ 776.933670][T17030] mkiss: ax0: crc mode is auto. [ 777.664611][ T51] usb 2-1: USB disconnect, device number 56 [ 779.292220][ T970] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 779.400121][T17064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.415939][T17064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.432185][T17064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.450560][T17064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.478093][ T970] usb 5-1: Using ep0 maxpacket: 8 [ 779.485175][ T970] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 779.500651][ T970] usb 5-1: config 0 has no interface number 0 [ 779.508676][ T970] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 779.528216][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.540030][ T970] usb 5-1: Product: syz [ 779.544222][ T970] usb 5-1: Manufacturer: syz [ 779.554982][ T970] usb 5-1: SerialNumber: syz [ 779.566454][ T970] usb 5-1: config 0 descriptor?? [ 779.579068][ T5865] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 779.637340][ T970] msi2500 5-1:0.246: Registered as swradio24 [ 779.645926][ T970] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 779.732579][ T5865] usb 6-1: config index 0 descriptor too short (expected 63506, got 18) [ 779.747304][ T5865] usb 6-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 779.767619][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.776942][ T5865] usb 6-1: Product: syz [ 779.788070][ T5865] usb 6-1: Manufacturer: syz [ 779.793873][ T5865] usb 6-1: SerialNumber: syz [ 779.821184][ T970] usb 5-1: USB disconnect, device number 55 [ 780.020865][ T5865] usb 6-1: palm_os_4_probe - error -32 getting connection info [ 780.036019][ T5865] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 780.055160][ T5865] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 780.073421][ T5865] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 780.094365][ T5865] usb 6-1: USB disconnect, device number 56 [ 780.268289][ T5865] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 780.289786][ T5865] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 780.306630][ T5865] visor 6-1:1.0: device disconnected [ 781.177732][T17094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3588'. [ 781.212861][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'. [ 781.222766][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'. [ 781.232212][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'. [ 781.242246][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'. [ 781.253484][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'. [ 781.263478][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'. [ 781.274370][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'. [ 781.284416][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'. [ 781.296317][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3585'. [ 781.907739][T17112] tipc: Enabling of bearer rejected, failed to enable media [ 782.655064][T17119] macvtap1: entered promiscuous mode [ 782.822183][T17122] syz_tun: entered allmulticast mode [ 782.890721][T17121] syz_tun: left allmulticast mode [ 785.129753][T17172] syz_tun: entered allmulticast mode [ 785.146920][T17171] syz_tun: left allmulticast mode [ 785.185861][ T5911] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 785.510308][ T5911] usb 6-1: config index 0 descriptor too short (expected 31, got 27) [ 785.519910][ T5911] usb 6-1: config 1 interface 0 has no altsetting 0 [ 785.536238][ T5911] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 785.551082][ T5911] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 785.589052][ T5911] usb 6-1: Product: syz [ 785.605189][ T5911] usb 6-1: Manufacturer: syz [ 785.625696][ T5911] usb 6-1: SerialNumber: syz [ 786.026867][ T29] audit: type=1400 audit(1744793816.918:1129): avc: denied { read } for pid=17180 comm="syz.0.3618" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 786.100745][ T5911] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 786.137138][ T29] audit: type=1400 audit(1744793816.948:1130): avc: denied { open } for pid=17180 comm="syz.0.3618" path="/88/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 786.170409][ T5911] usb 6-1: USB disconnect, device number 57 [ 786.209757][ T5911] usblp0: removed [ 786.968436][T17195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.170599][T17195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.446698][T17200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.766792][T17212] lo: entered allmulticast mode [ 787.772985][T17211] lo: left allmulticast mode [ 789.911468][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 791.189135][ T5911] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 791.226476][T17265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.260724][T17265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.303095][T17265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.389754][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 791.430576][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 791.461481][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 791.471457][T17272] lo: entered allmulticast mode [ 791.491695][ T5911] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 791.502344][T17271] lo: left allmulticast mode [ 791.516670][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.526777][ T5911] usb 2-1: config 0 descriptor?? [ 791.755444][ T5911] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 791.947343][T17261] iowarrior 2-1:0.0: Error -90 while submitting URB [ 791.961999][ T5911] usb 2-1: USB disconnect, device number 57 [ 792.429248][ T5911] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 792.669263][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 792.727445][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 792.779333][T15236] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 792.787026][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 792.790610][ T5911] usb 5-1: config 255 has an invalid interface number: 81 but max is 0 [ 792.821448][ T5911] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 792.841960][ T5911] usb 5-1: config 255 has no interface number 0 [ 792.848661][ T5911] usb 5-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 792.878840][ T5911] usb 5-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 792.896502][ T5911] usb 5-1: config 255 interface 81 has no altsetting 0 [ 792.916688][ T5911] usb 5-1: string descriptor 0 read error: -22 [ 792.923313][ T5911] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 792.932695][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.974416][ T5911] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:255.81/input/input77 [ 792.989137][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 793.001060][T15236] usb 1-1: config 0 has an invalid interface number: 137 but max is 0 [ 793.024914][T15236] usb 1-1: config 0 has no interface number 0 [ 793.041654][ T9] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 793.056176][T15236] usb 1-1: config 0 interface 137 has no altsetting 0 [ 793.063645][ T9] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 793.073681][ T29] audit: type=1400 audit(1744793823.958:1131): avc: denied { mount } for pid=17296 comm="syz.1.3653" name="/" dev="autofs" ino=54433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 793.078906][T15236] usb 1-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=90.83 [ 793.105525][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.138979][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 793.148159][ T9] usb 6-1: config 1 has no interface number 0 [ 793.162430][T15236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.174630][ T9] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 793.180546][ T29] audit: type=1400 audit(1744793824.068:1132): avc: denied { unmount } for pid=15072 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 793.203997][T15236] usb 1-1: config 0 descriptor?? [ 793.220459][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 793.259065][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.335640][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 794.021249][T15236] dvb-usb: found a 'DiBcom TFE8096P reference design' in warm state. [ 794.212291][ T9] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 794.252555][ T9] snd_usb_pod 6-1:1.1: invalid control EP [ 794.380101][T15236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 794.389474][ T9] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 794.406626][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 794.421506][T15236] dvbdev: DVB: registering new adapter (DiBcom TFE8096P reference design) [ 794.434137][ T9] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 794.443980][T15236] usb 1-1: media controller created [ 794.465073][ T9] usb 6-1: USB disconnect, device number 58 [ 794.486719][T15236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 794.537874][T15236] DVB: Unable to find symbol dib8000_attach() [ 794.544782][T15236] dvb-usb: no frontend was attached by 'DiBcom TFE8096P reference design' [ 794.619384][T15236] rc_core: IR keymap rc-dib0700-rc5 not found [ 794.628642][T15236] Registered IR keymap rc-empty [ 794.637077][T15236] dvb-usb: could not initialize remote control. [ 794.648665][T15236] dvb-usb: DiBcom TFE8096P reference design successfully initialized and connected. [ 794.693289][T15236] usb 1-1: USB disconnect, device number 62 [ 794.784049][T15236] dvb-usb: DiBcom TFE8096P reference design successfully deinitialized and disconnected. [ 795.190698][ T25] usb 5-1: USB disconnect, device number 56 [ 796.579069][T15236] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 796.751014][T15236] usb 1-1: Using ep0 maxpacket: 8 [ 796.755987][ T29] audit: type=1800 audit(1744793827.648:1133): pid=17333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3663" name="file1" dev="tmpfs" ino=2908 res=0 errno=0 [ 796.758633][T15236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.797995][T15236] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 796.807403][T15236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.824899][T15236] usb 1-1: config 0 descriptor?? [ 797.928147][T15236] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 798.241127][ T5867] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 798.325859][ T8] usb 1-1: USB disconnect, device number 63 [ 798.362813][T17346] 9pnet_fd: Insufficient options for proto=fd [ 798.470457][ T5867] usb 2-1: config index 0 descriptor too short (expected 31, got 27) [ 798.482733][ T5867] usb 2-1: config 1 interface 0 has no altsetting 0 [ 798.493718][ T5867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 798.506906][ T5867] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 798.516394][ T5867] usb 2-1: Product: syz [ 798.524084][ T5867] usb 2-1: Manufacturer: syz [ 798.529393][ T5867] usb 2-1: SerialNumber: syz [ 799.512794][ T5867] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 799.847926][ T5867] usb 2-1: USB disconnect, device number 58 [ 799.858050][ T5867] usblp0: removed [ 803.039970][ T5865] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 803.683001][ T5865] usb 5-1: config index 0 descriptor too short (expected 31, got 27) [ 803.700137][ T5865] usb 5-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 803.779537][T17470] __nla_validate_parse: 45 callbacks suppressed [ 803.779555][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3708'. [ 803.788621][ T5865] usb 5-1: config 1 interface 0 has no altsetting 0 [ 803.858233][ T5865] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 803.884467][ T5865] usb 5-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 804.019407][ T5865] usb 5-1: Product: syz [ 804.023614][ T5865] usb 5-1: Manufacturer: syz [ 804.028223][ T5865] usb 5-1: SerialNumber: syz [ 804.128336][T17481] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 805.395190][ T5865] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 805.616146][ T5865] usb 5-1: USB disconnect, device number 57 [ 805.828009][T17439] usblp0: removed [ 808.322895][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.779097][ T5867] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 808.956947][ T5867] usb 2-1: config index 0 descriptor too short (expected 31, got 27) [ 808.968650][ T5867] usb 2-1: config 1 interface 0 has no altsetting 0 [ 808.992158][ T5867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 809.009013][ T5867] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 809.035849][ T5867] usb 2-1: Product: syz [ 809.045644][ T5867] usb 2-1: Manufacturer: syz [ 809.066947][ T5867] usb 2-1: SerialNumber: syz [ 809.504664][ T5867] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 809.564758][ T5867] usb 2-1: USB disconnect, device number 59 [ 809.581330][ T5867] usblp0: removed [ 810.756103][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 810.857385][T17580] netlink: 1304 bytes leftover after parsing attributes in process `syz.0.3747'. [ 810.909533][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 810.926245][ T9] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 811.050868][ T9] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 811.071252][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 811.113797][ T9] usb 6-1: config 1 has no interface number 0 [ 811.122563][ T9] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 811.138326][ T9] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 811.150918][ T9] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 811.170591][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 811.185372][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.219362][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 811.653999][T17597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3752'. [ 812.512912][ T9] snd_usb_pod 6-1:1.1: cannot start listening: -90 [ 812.536388][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 812.558512][ T9] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 812.661741][ T9] usb 6-1: USB disconnect, device number 59 [ 814.007049][ T25] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 814.059045][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 814.183492][ T25] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 814.195013][ T25] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 814.204708][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 814.215623][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.269056][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 814.293459][ T9] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 814.302333][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.313379][ T9] usb 6-1: config 0 has no interface number 0 [ 814.322262][ T9] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 814.372229][ T9] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 814.406276][ T9] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 814.419103][ T9] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 814.504331][ T9] usb 6-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 814.526189][ T9] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 814.566310][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.581996][ T8] usb 5-1: USB disconnect, device number 58 [ 814.598542][ T9] usb 6-1: Product: syz [ 814.612033][ T9] usb 6-1: Manufacturer: syz [ 814.616947][ T9] usb 6-1: SerialNumber: syz [ 814.627592][ T9] usb 6-1: config 0 descriptor?? [ 815.177796][T17616] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 815.308461][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'. [ 815.391420][ T9] usb 6-1: NFC: intf ffff888077a51000 id ffffffff8f11c360 [ 815.454996][ T9] nfcmrvl 6-1:0.122: NFC: registered with nci successfully [ 815.474427][ T9] usb 6-1: USB disconnect, device number 60 [ 815.486670][ T9] usb 6-1: NFC: intf ffff888077a51000 [ 817.879916][T17678] hub 6-0:1.0: USB hub found [ 817.886194][T17678] hub 6-0:1.0: 1 port detected [ 818.921390][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3783'. [ 819.347188][T17694] dccp_close: ABORT with 15604 bytes unread [ 819.807341][T17712] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3787'. [ 821.211139][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3799'. [ 821.223482][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3799'. [ 821.236946][T17746] netlink: 34 bytes leftover after parsing attributes in process `syz.5.3799'. [ 821.389263][T17750] mkiss: ax0: crc mode is auto. [ 822.644813][T17771] ref_ctr_offset mismatch. inode: 0xc14 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 822.939649][ T25] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 823.100501][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 823.269174][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 823.819718][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 823.873539][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 823.909395][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 824.219085][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.230274][ T25] usb 1-1: config 0 descriptor?? [ 824.433729][ T25] hdpvr 1-1:0.0: firmware version 0x33 dated ~ xe@VwSH0"nPmB]. Ǥ=UO+ [ 824.433776][ T25] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 824.655460][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3822'. [ 825.016187][ T25] hdpvr 1-1:0.0: Could not setup controls [ 825.016431][ T25] hdpvr 1-1:0.0: registering videodev failed [ 825.024632][ T25] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 825.032090][ T25] usb 1-1: USB disconnect, device number 64 [ 825.771755][T17835] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3832'. [ 827.429063][ T25] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 827.593047][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 827.605502][ T5865] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 827.617724][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 827.639347][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.653818][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 827.668087][ T25] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 827.685273][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.698441][ T25] usb 5-1: config 0 descriptor?? [ 827.790451][ T5865] usb 2-1: config index 0 descriptor too short (expected 31, got 27) [ 827.799828][ T5865] usb 2-1: config 1 interface 0 has no altsetting 0 [ 827.819568][ T5865] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 827.828692][ T5865] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 827.851655][ T5865] usb 2-1: Product: syz [ 827.861368][ T5865] usb 2-1: Manufacturer: syz [ 827.872681][ T5865] usb 2-1: SerialNumber: syz [ 828.123617][ T25] corsair-cpro 0003:1B1C:0C10.0027: item fetching failed at offset 0/3 [ 828.132800][ T25] corsair-cpro 0003:1B1C:0C10.0027: probe with driver corsair-cpro failed with error -22 [ 828.358497][ T25] usb 5-1: USB disconnect, device number 59 [ 828.522751][ T5865] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 828.837960][ C1] usblp0: nonzero write bulk status received: -71 [ 828.838647][ T8] usb 2-1: USB disconnect, device number 60 [ 829.039745][T17869] usblp0: removed [ 830.876007][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 831.231488][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 831.242670][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 831.260445][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 831.270463][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 831.279659][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 831.289233][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 831.368156][T17920] lo speed is unknown, defaulting to 1000 [ 831.399756][T17920] wlan0 speed is unknown, defaulting to 1000 [ 831.633093][T17934] hub 6-0:1.0: USB hub found [ 831.639037][T17934] hub 6-0:1.0: 1 port detected [ 832.091256][T17920] chnl_net:caif_netlink_parms(): no params data found [ 832.475510][T17920] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.530246][T17920] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.530527][ T8] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 832.589209][T17920] bridge_slave_0: entered allmulticast mode [ 832.616440][T17920] bridge_slave_0: entered promiscuous mode [ 832.643245][T17920] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.669137][T17920] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.679334][T17920] bridge_slave_1: entered allmulticast mode [ 832.758798][ T8] usb 6-1: config index 0 descriptor too short (expected 31, got 27) [ 832.775692][ T8] usb 6-1: config 1 interface 0 has no altsetting 0 [ 832.795185][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 832.924010][T17920] bridge_slave_1: entered promiscuous mode [ 832.932916][ T8] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 832.976655][ T8] usb 6-1: Product: syz [ 832.995330][ T8] usb 6-1: Manufacturer: syz [ 833.003447][ T8] usb 6-1: SerialNumber: syz [ 833.011808][T17920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.033822][T17920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.107379][T17920] team0: Port device team_slave_0 added [ 833.134615][T17920] team0: Port device team_slave_1 added [ 833.226356][T17920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.257162][T17920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.294448][T17920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.313088][T17920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.344581][T17920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.349137][ T5830] Bluetooth: hci4: command tx timeout [ 833.458863][T17920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.880915][ T8] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 833.901885][ T8] usb 6-1: USB disconnect, device number 61 [ 833.940292][ T8] usblp0: removed [ 833.958334][T17920] hsr_slave_0: entered promiscuous mode [ 833.986077][T17920] hsr_slave_1: entered promiscuous mode [ 834.005208][T17920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 834.023140][T17920] Cannot create hsr debugfs directory [ 834.415149][T17973] hub 6-0:1.0: USB hub found [ 834.421574][T17973] hub 6-0:1.0: 1 port detected [ 834.643720][T17920] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.429239][ T5830] Bluetooth: hci4: command tx timeout [ 835.512540][T17920] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.780343][T17920] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.139419][T17920] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.703533][T17920] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 836.762262][T17920] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 836.792146][T17920] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 836.823000][T17920] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 837.674485][ T5830] Bluetooth: hci4: command tx timeout [ 837.738353][T18010] input: syz0 as /devices/virtual/input/input79 [ 837.952447][T17920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.966592][T17920] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.988712][ T977] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.997261][ T977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.148272][T17920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 838.265097][T17920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 838.291500][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.298610][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.212682][T17920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.457829][T18035] netlink: 'syz.0.3895': attribute type 1 has an invalid length. [ 839.465792][T18035] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3895'. [ 839.864398][ T5830] Bluetooth: hci4: command tx timeout [ 840.356335][T17920] veth0_vlan: entered promiscuous mode [ 840.376255][T17920] veth1_vlan: entered promiscuous mode [ 840.414415][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 840.443667][T17920] veth0_macvtap: entered promiscuous mode [ 840.472011][T17920] veth1_macvtap: entered promiscuous mode [ 840.505107][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.544278][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.564541][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.585322][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.610675][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.663047][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.688370][T17920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.698309][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.717884][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.744655][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.758666][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.770033][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.780925][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.795653][T17920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.926623][T17920] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.979105][T17920] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.007459][T17920] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.025096][T17920] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.540764][ T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.580707][ T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.682236][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.700845][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.216903][T18073] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 842.773568][ T5865] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 843.284295][ T5865] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 843.345957][ T29] audit: type=1400 audit(1744793874.208:1134): avc: denied { getopt } for pid=18077 comm="syz.4.3907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 843.387672][ T5865] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 843.473708][ T5865] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.616566][ T5865] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 843.738012][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.779347][ T5865] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 843.830158][ T5865] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 843.983096][ T25] usb 7-1: USB disconnect, device number 15 [ 844.151247][ T5865] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 844.383192][ T5865] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 844.414775][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 844.439055][ T5865] usb 6-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 844.471247][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.507992][ T5865] usb 6-1: config 0 descriptor?? [ 844.943954][ T5865] cypress 0003:04B4:ED81.0028: unknown main item tag 0x0 [ 844.959042][ T5865] cypress 0003:04B4:ED81.0028: unknown main item tag 0x0 [ 844.974605][ T5865] cypress 0003:04B4:ED81.0028: unknown main item tag 0x0 [ 844.989696][ T5865] cypress 0003:04B4:ED81.0028: unknown main item tag 0x0 [ 845.019175][ T5865] cypress 0003:04B4:ED81.0028: unknown main item tag 0x0 [ 845.045880][ T5865] cypress 0003:04B4:ED81.0028: hidraw0: USB HID v0.00 Device [HID 04b4:ed81] on usb-dummy_hcd.5-1/input0 [ 845.337315][ T5865] usb 6-1: USB disconnect, device number 62 [ 848.967907][T18146] mkiss: ax0: crc mode is auto. [ 849.435795][ T29] audit: type=1800 audit(1744793880.328:1135): pid=18149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3931" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 849.457507][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.107530][T18159] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3932'. [ 850.583646][ T29] audit: type=1400 audit(1744793881.468:1136): avc: denied { unmount } for pid=15283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 850.611649][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3933'. [ 850.644983][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3933'. [ 850.679207][T18158] nbd: socks must be embedded in a SOCK_ITEM attr [ 850.929079][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 851.519234][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.535549][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.546489][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 851.558957][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.638675][ T9] usb 5-1: config 0 descriptor?? [ 852.074869][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 852.088071][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 852.117497][ T9] usb 5-1: USB disconnect, device number 60 [ 852.312727][T18196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.333533][T18196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.347073][T18196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.388541][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3950'. [ 852.984640][ T5865] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 853.190401][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 853.228227][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3958'. [ 853.264955][ T5865] usb 5-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 853.363666][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.464424][ T5865] usb 5-1: config 0 descriptor?? [ 854.628886][T18229] overlayfs: missing 'lowerdir' [ 854.945103][ T5865] usbhid 5-1:0.0: can't add hid device: -71 [ 854.952470][ T5865] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 855.001876][ T5865] usb 5-1: USB disconnect, device number 61 [ 855.040289][ T5868] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 855.509772][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.705940][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.748644][ T5868] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 855.788434][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.820414][ T5868] usb 6-1: config 0 descriptor?? [ 856.117101][T18244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3966'. [ 856.836133][ T29] audit: type=1400 audit(1744793887.718:1137): avc: denied { ioctl } for pid=18245 comm="syz.4.3967" path="socket:[58047]" dev="sockfs" ino=58047 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 856.949717][ T5868] usbhid 6-1:0.0: can't add hid device: -71 [ 856.958626][ T5868] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 856.989990][ T5868] usb 6-1: USB disconnect, device number 63 [ 857.683630][T15236] IPVS: starting estimator thread 0... [ 857.851304][T18263] IPVS: using max 34 ests per chain, 81600 per kthread [ 858.269036][ T973] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 858.888131][ T973] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.888158][ T973] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.890178][ T973] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 858.890202][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 858.890220][ T973] usb 7-1: SerialNumber: syz [ 859.120753][ T973] usb 7-1: cannot find UAC_HEADER [ 859.730909][ T973] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 859.740109][ T973] usb 7-1: USB disconnect, device number 16 [ 859.928535][ T29] audit: type=1400 audit(1744793890.818:1138): avc: denied { append } for pid=18293 comm="syz.1.3981" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 859.928641][T18294] random: crng reseeded on system resumption [ 859.955140][T15236] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 860.024761][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 860.760649][T15236] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 860.760675][T15236] usb 6-1: config 1 has no interface number 1 [ 860.760699][T15236] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 860.762282][T15236] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 860.762314][T15236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.762333][T15236] usb 6-1: Product: syz [ 860.762346][T15236] usb 6-1: Manufacturer: syz [ 860.762359][T15236] usb 6-1: SerialNumber: syz [ 860.902766][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3984'. [ 861.784985][ T973] IPVS: starting estimator thread 0... [ 861.905709][T18312] IPVS: using max 36 ests per chain, 86400 per kthread [ 861.952638][T18320] autofs: Bad value for 'fd' [ 862.028616][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3989'. [ 862.038870][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3989'. [ 862.052042][T18323] gretap0: entered promiscuous mode [ 862.058263][T18323] batadv_slave_1: entered promiscuous mode [ 862.715076][ T29] audit: type=1400 audit(1744793893.158:1139): avc: denied { bind } for pid=18325 comm="syz.4.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 862.762685][ T29] audit: type=1400 audit(1744793893.168:1140): avc: denied { ioctl } for pid=18325 comm="syz.4.3991" path="socket:[58534]" dev="sockfs" ino=58534 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 863.181641][T15236] usb 6-1: 2:1 : unsupported format bits 0x40 [ 863.201375][T15236] usb 6-1: USB disconnect, device number 64 [ 863.400459][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 863.886771][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4003'. [ 863.897564][T18357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4003'. [ 863.929109][T18357] nbd: socks must be embedded in a SOCK_ITEM attr [ 863.978683][ T29] audit: type=1800 audit(1744793894.868:1141): pid=18361 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4005" name="file1" dev="tmpfs" ino=979 res=0 errno=0 [ 864.308076][T18367] autofs: Bad value for 'fd' [ 864.513677][T18377] ptrace attach of "./syz-executor exec"[17920] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\ [ 864.859050][ T973] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 864.950104][ C1] vkms_vblank_simulate: vblank timer overrun [ 865.209205][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 865.221787][ T973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.235058][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 865.287912][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 865.338831][ T973] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 865.367165][ T973] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 865.562189][ T973] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 865.579161][ T973] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 865.588794][ T973] usb 5-1: Manufacturer: syz [ 865.601292][ T973] usb 5-1: config 0 descriptor?? [ 865.700272][T18396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4016'. [ 866.207509][ T29] audit: type=1400 audit(1744793897.098:1142): avc: denied { write } for pid=18395 comm="syz.0.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 866.219677][ T973] rc_core: IR keymap rc-hauppauge not found [ 866.279017][ T973] Registered IR keymap rc-empty [ 866.297321][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.349119][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.389562][ T973] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 866.433324][ T973] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input80 [ 866.472752][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.482778][ C1] mceusb 5-1:0.0: long-range (0x14) receiver active [ 866.539049][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.572831][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.603104][T18409] overlayfs: failed to resolve './file0': -2 [ 866.609161][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.629551][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.659760][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.694545][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.719060][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.761715][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.819065][ T973] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 866.860344][ T973] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 866.864559][T18416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4023'. [ 866.899020][ T973] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x14 active) [ 866.942989][ T973] usb 5-1: USB disconnect, device number 62 [ 866.960625][T18416] tipc: Started in network mode [ 866.965519][T18416] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 867.012837][T18416] tipc: Enabled bearer , priority 0 [ 867.012854][T18419] futex_wake_op: syz.0.4023 tries to shift op by -1; fix this program [ 868.139073][ T970] tipc: Node number set to 11578026 [ 868.322924][T18437] xt_hashlimit: overflow, rate too high: 0 [ 868.483166][T18441] overlayfs: failed to resolve './file0': -2 [ 868.990721][T18449] delete_channel: no stack [ 868.995534][T18449] delete_channel: no stack [ 869.789340][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.990707][ T29] audit: type=1800 audit(1744793901.888:1143): pid=18480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4046" name="file1" dev="tmpfs" ino=1047 res=0 errno=0 [ 871.156752][ T5865] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 871.755325][ T5911] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 871.890941][ T5865] usb 7-1: Using ep0 maxpacket: 16 [ 871.899550][ T5865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.910705][ T5865] usb 7-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 871.920386][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.934209][ T5865] usb 7-1: config 0 descriptor?? [ 871.998392][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 872.010912][ T5911] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 872.020070][ T5911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.034943][T18492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4047'. [ 872.045945][ T5911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 872.057657][ T5911] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 872.068444][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.076913][ T5911] usb 5-1: Product: syz [ 872.081639][ T5911] usb 5-1: Manufacturer: syz [ 872.086315][ T5911] usb 5-1: SerialNumber: syz [ 872.189096][ T973] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 872.339152][ T973] usb 1-1: Using ep0 maxpacket: 8 [ 872.350365][ T973] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 872.361976][ T5865] glorious 0003:258A:0036.0029: item fetching failed at offset 0/3 [ 872.370444][ T973] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 872.383198][ T5865] glorious 0003:258A:0036.0029: probe with driver glorious failed with error -22 [ 872.392774][ T973] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 872.417714][ T973] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 872.445115][ T973] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 872.470672][ T973] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 872.480096][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.514527][ T5911] usb 5-1: 0:2 : does not exist [ 872.589459][T15236] usb 7-1: USB disconnect, device number 17 [ 872.696364][ T973] usb 1-1: usb_control_msg returned -32 [ 872.702101][ T973] usbtmc 1-1:16.0: can't read capabilities [ 873.901387][ T29] audit: type=1400 audit(1744793904.788:1144): avc: denied { append } for pid=18507 comm="syz.1.4054" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 874.066906][T18513] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 874.067121][ T5911] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 874.693073][ T5911] usb 5-1: USB disconnect, device number 63 [ 875.608538][ T973] usb 1-1: USB disconnect, device number 65 [ 876.769176][ T973] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 876.967681][ T5830] Bluetooth: hci3: unexpected event 0x09 length: 9 > 3 [ 877.032668][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4066'. [ 877.080253][ T973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.097339][ T973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 877.120499][ T973] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 877.136943][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 877.155991][T18557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.166335][ T973] usb 2-1: SerialNumber: syz [ 877.189391][T18557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.242434][T18557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.441996][ T973] usb 2-1: cannot find UAC_HEADER [ 877.494944][ T973] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 877.813820][T18561] program syz.5.4070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 877.869477][ T973] usb 2-1: USB disconnect, device number 61 [ 878.181068][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.072144][ T5830] Bluetooth: hci5: unexpected event 0x09 length: 9 > 3 [ 880.071641][T15236] IPVS: starting estimator thread 0... [ 880.112655][ T29] audit: type=1400 audit(1744793910.998:1145): avc: denied { mount } for pid=18612 comm="syz.5.4088" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 880.117510][T18617] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 880.144430][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 880.156275][T18613] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 880.169055][T18617] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 880.219128][T18611] IPVS: using max 33 ests per chain, 79200 per kthread [ 880.251509][ T29] audit: type=1400 audit(1744793911.148:1146): avc: denied { unmount } for pid=15959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 880.271502][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.342112][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.367312][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 880.410310][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 880.462248][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 880.572647][ T9] usb 2-1: SerialNumber: syz [ 880.852224][ T9] usb 2-1: cannot find UAC_HEADER [ 880.859113][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 880.860870][ T9] usb 2-1: USB disconnect, device number 62 [ 881.058334][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.569450][T18645] overlayfs: failed to resolve './file1': -2 [ 882.363845][ T973] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 882.739085][ T973] usb 7-1: Using ep0 maxpacket: 16 [ 882.752415][ T973] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 882.919381][ T973] usb 7-1: config 0 has no interface number 0 [ 882.949281][ T973] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 882.994764][ T973] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 883.039725][ T973] usb 7-1: config 0 interface 41 has no altsetting 0 [ 883.058087][ T973] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 883.087304][ T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.109109][ T973] usb 7-1: Product: syz [ 883.129308][ T973] usb 7-1: Manufacturer: syz [ 883.139046][ T973] usb 7-1: SerialNumber: syz [ 883.170150][ T973] usb 7-1: config 0 descriptor?? [ 883.183388][T18636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 883.199300][T18636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 883.423460][T18636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 883.432668][T18636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 883.875289][ T973] Error reading MAC address [ 883.892042][T18636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 883.919221][T18636] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 884.376965][ T973] sr9700 7-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 884.519470][ T5911] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 884.574747][ T973] usb 7-1: USB disconnect, device number 18 [ 884.682258][ T5911] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.713618][ T5911] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 884.740030][ T5911] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 884.758629][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 884.767304][ T5911] usb 6-1: SerialNumber: syz [ 885.023313][T18693] overlayfs: failed to resolve './file0': -2 [ 885.329864][ T5911] usb 6-1: cannot find UAC_HEADER [ 885.480123][ T5911] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 885.658189][ T5911] usb 6-1: USB disconnect, device number 65 [ 886.202886][T18707] netlink: 1304 bytes leftover after parsing attributes in process `syz.6.4116'. [ 886.300054][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.801295][ T29] audit: type=1400 audit(1744793920.548:1147): avc: denied { create } for pid=18730 comm="syz.4.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 889.905586][T18736] overlayfs: failed to resolve './file0': -2 [ 890.476171][ T970] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 890.679272][ T5911] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 890.859465][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.890798][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 890.909005][ T970] usb 6-1: Using ep0 maxpacket: 16 [ 890.913539][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.915545][ T970] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 890.933627][ T5911] usb 2-1: Product: syz [ 890.946843][ T5911] usb 2-1: Manufacturer: syz [ 890.954403][ T5911] usb 2-1: SerialNumber: syz [ 890.956568][ T970] usb 6-1: config 0 has no interface number 0 [ 890.979621][ T5911] hub 2-1:1.0: bad descriptor, ignoring hub [ 890.980405][ T970] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 890.985537][ T5911] hub 2-1:1.0: probe with driver hub failed with error -5 [ 891.007483][ T970] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 891.017468][ T970] usb 6-1: config 0 interface 41 has no altsetting 0 [ 891.025865][ T970] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 891.069574][ T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.077599][ T970] usb 6-1: Product: syz [ 891.086448][ T970] usb 6-1: Manufacturer: syz [ 891.096188][ T970] usb 6-1: SerialNumber: syz [ 891.111526][ T970] usb 6-1: config 0 descriptor?? [ 891.117397][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 891.129224][T15236] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 891.129275][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 891.362188][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 891.369878][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 891.409017][T15236] usb 1-1: Using ep0 maxpacket: 8 [ 891.444515][T15236] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 891.478425][T15236] usb 1-1: config 0 has no interface number 0 [ 891.534309][T15236] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 891.557836][T15236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.604059][T15236] usb 1-1: Product: syz [ 891.637937][T15236] usb 1-1: Manufacturer: syz [ 891.669463][T15236] usb 1-1: SerialNumber: syz [ 891.737592][T15236] usb 1-1: config 0 descriptor?? [ 891.784839][ T970] Error reading MAC address [ 891.809507][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 891.857548][T18729] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 891.891514][T15236] msi2500 1-1:0.246: Registered as swradio24 [ 891.898289][T15236] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 891.997550][T15236] usb 1-1: USB disconnect, device number 66 [ 892.093065][ T5911] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 892.099677][ T5911] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 892.152962][ T5911] cdc_ncm 2-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 892.421357][ T970] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 892.438868][ T970] usb 6-1: USB disconnect, device number 66 [ 892.542477][ T5911] usb 2-1: USB disconnect, device number 63 [ 892.596323][ T5911] cdc_ncm 2-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 893.416299][T18787] overlayfs: failed to resolve './file0': -2 [ 894.479507][ T5868] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 894.508990][ T5911] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 894.630038][T18815] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4156'. [ 895.269087][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 895.274246][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 895.295783][ T5911] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 895.327933][ T5868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 895.340114][ T5911] usb 2-1: config 0 has no interface number 0 [ 895.350537][ T5868] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 895.362016][ T5911] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 895.377448][ T5868] usb 1-1: can't read configurations, error -71 [ 895.385873][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.398734][ T5911] usb 2-1: Product: syz [ 895.403179][ T5911] usb 2-1: Manufacturer: syz [ 895.408021][ T5911] usb 2-1: SerialNumber: syz [ 895.418467][ T5911] usb 2-1: config 0 descriptor?? [ 895.470712][ T5911] msi2500 2-1:0.246: Registered as swradio24 [ 895.478778][ T5911] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 895.689917][ T8] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 895.783531][T15236] usb 2-1: USB disconnect, device number 64 [ 895.949229][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 895.963013][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.009226][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.027113][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 896.048983][ T8] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 896.068974][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.090419][ T8] usb 7-1: config 0 descriptor?? [ 896.150137][ T5911] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 896.309596][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 896.329043][ T5911] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 896.344240][ T5911] usb 6-1: config 0 has no interface number 0 [ 896.354351][ T5911] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 896.365272][ T5911] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 896.375347][ T5911] usb 6-1: config 0 interface 41 has no altsetting 0 [ 896.383848][ T5911] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 896.393185][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.407262][ T5911] usb 6-1: Product: syz [ 896.531375][ T8] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 896.556245][ T5911] usb 6-1: Manufacturer: syz [ 896.561855][ T5911] usb 6-1: SerialNumber: syz [ 896.579296][ T8] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 896.586282][ T8] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 896.589635][ T5911] usb 6-1: config 0 descriptor?? [ 896.594048][ T8] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 896.605580][ T8] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 896.607018][T18826] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 896.614830][ T8] input: HID 0955:7214 Haptics as /devices/virtual/input/input81 [ 896.649181][T18826] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 896.688565][ T8] shield 0003:0955:7214.002A: Registered Thunderstrike controller [ 896.699088][ T8] shield 0003:0955:7214.002A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 896.769681][ T970] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 896.793900][ T8] usb 7-1: USB disconnect, device number 19 [ 896.804318][ T970] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 896.825239][ T970] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 896.863721][ T970] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 896.875745][T18826] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 896.906099][T18826] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 897.179478][ T970] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 897.413854][ T970] usb 5-1: unable to get BOS descriptor or descriptor too short [ 897.496994][ T970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 897.621989][ T970] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 897.782391][ T5911] Error reading MAC address [ 897.787408][ T29] audit: type=1400 audit(1744793928.218:1148): avc: denied { bind } for pid=18843 comm="syz.0.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 897.808719][T18826] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 897.808803][T18826] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 897.828729][ T970] usb 5-1: config 1 interface 0 has no altsetting 1 [ 897.853139][ T29] audit: type=1400 audit(1744793928.218:1149): avc: denied { write } for pid=18843 comm="syz.0.4166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 897.862591][ T970] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 897.979594][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.988099][ T970] usb 5-1: Product: syz [ 897.992908][ T970] usb 5-1: Manufacturer: syz [ 897.997512][ T970] usb 5-1: SerialNumber: syz [ 898.011665][ T970] smsusb:smsusb_probe: board id=8, interface number 0 [ 898.172812][ T5911] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 898.316717][ T5911] usb 6-1: USB disconnect, device number 67 [ 898.497490][ T970] smsusb:smsusb_probe: Device initialized with return code -19 [ 899.919269][T15236] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 899.935267][ T29] audit: type=1400 audit(1744793930.828:1150): avc: denied { override_creds } for pid=18885 comm="syz.5.4178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 900.006337][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4179'. [ 900.022798][T18892] tipc: Enabling of bearer rejected, already enabled [ 900.030819][T18892] futex_wake_op: syz.0.4179 tries to shift op by -1; fix this program [ 900.089058][T15236] usb 7-1: Using ep0 maxpacket: 8 [ 900.097329][T15236] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 900.108153][T15236] usb 7-1: config 0 has no interface number 0 [ 900.240766][T15236] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 900.273599][T15236] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 900.384253][T18896] ------------[ cut here ]------------ [ 900.390108][T18896] kernel BUG at mm/hugetlb.c:2333! [ 900.395226][T18896] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 900.402332][T18896] CPU: 1 UID: 0 PID: 18896 Comm: syz.0.4180 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 900.413085][T18896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 900.423132][T18896] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0 [ 900.429557][T18896] Code: a3 d0 00 00 00 e8 e4 43 a2 ff 48 c7 c7 40 56 e1 8d e8 f8 f4 41 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 c5 43 a2 ff 90 <0f> 0b e8 2d 5c 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 900.449166][T18896] RSP: 0018:ffffc9000490f900 EFLAGS: 00010083 [ 900.455231][T18896] RAX: 0000000000001575 RBX: ffffffff9a8d8758 RCX: ffffc9000eaf2000 [ 900.463199][T18896] RDX: 0000000000080000 RSI: ffffffff8217901b RDI: 0000000000000007 [ 900.471167][T18896] RBP: ffffea0008eb0000 R08: 0000000000000007 R09: 0000000000000000 [ 900.479135][T18896] R10: 0000000000000000 R11: 00000000000000c0 R12: 0000000000000000 [ 900.487103][T18896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015 [ 900.495070][T18896] FS: 00007f1c8d7e46c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 900.503986][T18896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 900.510550][T18896] CR2: 0000001b2e805ff8 CR3: 00000000620a6000 CR4: 00000000003526f0 [ 900.518502][T18896] Call Trace: [ 900.521760][T18896] [ 900.524672][T18896] ? die+0x31/0x80 [ 900.528383][T18896] ? do_trap+0x232/0x430 [ 900.532607][T18896] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 900.538397][T18896] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 900.544184][T18896] ? do_error_trap+0xf4/0x230 [ 900.548852][T18896] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 900.554652][T18896] ? handle_invalid_op+0x34/0x40 [ 900.559581][T18896] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 900.565372][T18896] ? exc_invalid_op+0x2e/0x50 [ 900.570034][T18896] ? asm_exc_invalid_op+0x1a/0x20 [ 900.575047][T18896] ? alloc_hugetlb_folio_reserve+0xab/0xc0 [ 900.580835][T18896] ? alloc_hugetlb_folio_reserve+0xac/0xc0 [ 900.586633][T18896] memfd_alloc_folio+0x16c/0x3b0 [ 900.591556][T18896] memfd_pin_folios+0xe8c/0x1150 [ 900.596473][T18896] ? __pfx_memfd_pin_folios+0x10/0x10 [ 900.601848][T18896] ? lock_acquire.part.0+0x155/0x380 [ 900.607145][T18896] ? __pfx_down_read+0x10/0x10 [ 900.611893][T18896] ? __fget_files+0x206/0x3a0 [ 900.616549][T18896] udmabuf_create+0x641/0x11e0 [ 900.621296][T18896] ? __pfx_udmabuf_create+0x10/0x10 [ 900.626469][T18896] ? lock_acquire+0x2f/0xb0 [ 900.630953][T18896] ? __might_fault+0xe3/0x190 [ 900.635612][T18896] ? __might_fault+0xe3/0x190 [ 900.640283][T18896] udmabuf_ioctl+0x193/0x310 [ 900.644848][T18896] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 900.649941][T18896] ? selinux_file_ioctl+0xb4/0x270 [ 900.655036][T18896] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 900.660122][T18896] __x64_sys_ioctl+0x190/0x200 [ 900.664868][T18896] do_syscall_64+0xcd/0x250 [ 900.669354][T18896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.675240][T18896] RIP: 0033:0x7f1c8c98cde9 [ 900.679635][T18896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.699221][T18896] RSP: 002b:00007f1c8d7e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 900.707610][T18896] RAX: ffffffffffffffda RBX: 00007f1c8cba6160 RCX: 00007f1c8c98cde9 [ 900.715568][T18896] RDX: 0000400000000040 RSI: 0000000040187542 RDI: 0000000000000008 [ 900.723529][T18896] RBP: 00007f1c8ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 900.731490][T18896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.739445][T18896] R13: 0000000000000000 R14: 00007f1c8cba6160 R15: 00007ffe2e844558 [ 900.747403][T18896] [ 900.750400][T18896] Modules linked in: [ 900.754277][T18896] ---[ end trace 0000000000000000 ]--- [ 900.759710][T18896] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0 [ 900.766115][T18896] Code: a3 d0 00 00 00 e8 e4 43 a2 ff 48 c7 c7 40 56 e1 8d e8 f8 f4 41 09 48 89 e8 5b 5d 41 5c 41 5d c3 cc cc cc cc e8 c5 43 a2 ff 90 <0f> 0b e8 2d 5c 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 900.785705][T18896] RSP: 0018:ffffc9000490f900 EFLAGS: 00010083 [ 900.791758][T18896] RAX: 0000000000001575 RBX: ffffffff9a8d8758 RCX: ffffc9000eaf2000 [ 900.799724][T18896] RDX: 0000000000080000 RSI: ffffffff8217901b RDI: 0000000000000007 [ 900.807676][T18896] RBP: ffffea0008eb0000 R08: 0000000000000007 R09: 0000000000000000 [ 900.815638][T18896] R10: 0000000000000000 R11: 00000000000000c0 R12: 0000000000000000 [ 900.823588][T18896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015 [ 900.831538][T18896] FS: 00007f1c8d7e46c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 900.840466][T18896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 900.847030][T18896] CR2: 0000001b2e805ff8 CR3: 00000000620a6000 CR4: 00000000003526f0 [ 900.854984][T18896] Kernel panic - not syncing: Fatal exception [ 900.861256][T18896] Kernel Offset: disabled [ 900.865555][T18896] Rebooting in 86400 seconds..