last executing test programs: 11m43.476093682s ago: executing program 3 (id=2950): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100f7ffffff000000000200000014000200626f6e64300000000000000000000000090001"], 0x40}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (rerun: 64) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x0) 11m41.351852035s ago: executing program 3 (id=2953): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = dup(0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffee7, 0x91, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffcd}, 0x94) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f02b, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='/dev/kvm\x00', 0x0, r0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11m40.160025635s ago: executing program 3 (id=2956): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local}, @my=0x1, 0x0, 0x0, 0x5e, 0x3}) 11m39.858450809s ago: executing program 3 (id=2958): fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x80203, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m39.424260954s ago: executing program 3 (id=2959): syz_usb_connect(0x6, 0x1f2, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e0, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xb, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x40, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef87"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 11m38.123468023s ago: executing program 3 (id=2966): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) move_pages(r0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240), 0x2) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x0, 0x3}]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000280)={0x6, 0x8, 0x10, 0x4e, 0x40, 0x4, 0x10, 0xf, 0x20, 0x3a, 0x10, 0x100, &(0x7f0000000100)=[0x59ad], 0x1, &(0x7f0000000940)="43b997819c0fc5f1f09d2946a55488c00603947ef6da443e839de4b841163036963e3852410cd9525a9a74f96090becf0956bbf5a38e6e0adb7b95066b080415aa97ea66939808ae10785a4b4c201212a7450ef7d123109b5aa9509056625e86e80e2945b75ed6f178abf2006cbc2d11e0d513002e77508ec7e28878734d66f80323f87cf29533b145ff2a37b601531e07bd3ffcf7b7c5b281211748d91251bc8011207b9350c95c4829b5558413b8c4aa04f153599cf7efd13566e6e93b76291e4e7bf9ccf3bdc019e26f196a2364c8926b5d2df5177c2916a0f485dc28a04aed4b9b5cd8910ad80b7bcc6986eeb727a7f9330b65fedf5633a1c9c053a900980d747d7aade2e611e62c32ef202f9c76d945fe498bc830988e8662fc98cd78c1718f9ddc8e54fdb342d0f61199f1f0c4a46daf353dc284a0e633b39e6eeb1865e275dc7bae9328bbd67c30817802d3f4403850cab8392c245f510f42403d96fdedddfe6e81bdd7db0e328cab7843f7d948fa944496a8f7549cdfad4dda3b2e39ebc42a8df32e8e03f4f97bcaff3967265eea1bb72422d4d1265a9af04703e55b563c6ec8141995d3233d88f586080ad1226958460f2b1de2f90fa5f80f9b33fbf2b499f1fa7ce9c3c9434a36d7e9e5df15db6423b4678329ede61182e5b2a0281b2c3e019885593a6e8a6371f491a87df912cb7e5eb06300da14e486afbcb2f574c11e2261505cf22bf6a115219301e65954d8f99f2fb87111aefe1a5736ff2f0990aafdf085c7941cfc12e53e7251be223bea59fe70501c56a69828c7b88b301cae354f2d6d9cedc6aee41d39793e478ed9e454fd64a7e3175b406fd0a3b017add8b9edda7e2a1dc28897b496c9fe9c01825cf448c6fb5a79f3ebcec2a9798e17814dd55170fb51ee10d90ede990b378fa7b9cd1b6239697e89ffe7d3044e12bd4851ae502dd1e54981a6e6105a168da164343fec25b5ef7d73cddf58e58ff2df4baf0fa5e51d968eeb0f11b43dac13d106b4c7684a0ab0a552bcbd833de2e9020e5757b9e718c928181dc88438d0a8e55a2935b85d37da5b86d33d83464d288e1a8d5fcf270cab2a9069689a67815cfa651578bf593f2e2891dc8b5097bc2034d44ea5ed5cefd15481c8693ebcfe929a66bea0146dafdd341081ee0ddfbd3e0abe97c2ea09485c9822101f177fe0332950b99b4e0dc4d08e8f6f37c73a114bbb0b539136e4758e0f4a4a609e6d198a5dac2245b50b16b9a3248530810f8a6f2c9f5feb4946793e2a6f0484bfb26e1dfbc6b78a98d511e184a2af47f9f6feeead6c226761441d0fe6ae0a78e9a7f88f4a0e1309e77d51303759c3e724a758036a9fd2b6fdc300c3220a1f462250bed8ed739045b89c39b9753c39ea4de27798d8fb93a7f6f74dffaa211dbbf6eb6440d41dc67c7a8eb93f23c30865cc6a9427e453233d4f4d315b18e47b5a458e177092e6609c8bec0a05bbcf887904ce63731193560ff4a81c097273c8b4753677d2fc99f8030c7185ddb86504ad1cdee419bfd86756256da81e6798827680b55cb650d63df6724e0923707ca9bfdbc97554f448731bebab00efc630a590cbc9206aa09405f3c0ef56873c0e64a1969e9c231b07a913ca7c9f32b5b60ac3a3d3cdadaa16f85d5b9963cfe5c398cc3c4be38acb3116e4f835c2d79068bfe9c1383d8cc791c020cc0827346a261ddb1b99bea66703fbee87129a14b9ce0d5ab022435986c6941a7cf91e79b70dd8e2f09cded6593a49e1b6b3ee28ca4e4a1783581a063f91c9ae092f61cc88a908f0bf44fd218925cc16a94b7403c1c9a919bfe2f7358b19930f62043daecfe6c3d43fd581f6bc41f60682a88298f1cbe03db6b1e2347ac55abf59ff59c15b2e304bf1572079e154f0b2eb253aaef5d52e88e6ed86ca74e80d20b45c4803a43bd606bccedeead0de350c1e7ffa33b3dae444275d266fba09c032742bda2981a3bbf52887ea553fee39f250b0c1aa090478a25d95313689d9a8be807a59d44337a517a36011d76b42d8e366a4f5fbf2f5e2b04c1c7e0cdb85cc64f2bc05516700a08723d384f8981b23f6044196377fb586bc4835231b538a48b1f99ecb3e383eff8f693b916ff8e5b1dd60f63749e9bc9198945eb9da9c10c4e1b6c79572cb7a96440d8246c87362f92af3273e477a9322f197b8d447309c2fb393fb7bab5c85b0cec018e661d55dcf90d363c85fb9ee2de624fead6e694c87afa3bc62f8d52bb52e1f2d49ba300d6d50b7a7fe03e378e926365598f497a7d06a40a4645d71fe3afaf27a146b1e98265d6de6b861e720951b94d33f71d1317ac0f82885b5033c54e8128bd037031118b5da90344c9c4957302c9f5ae6ee37f14564d68d79100eb2948142aff00ef130cd2b2898c16cc6ae26cdff1762ada8384b3270c766779bb4be79c17173554ea0b80ff2abcc810c916b50443e248c9e0ee4e65bc9d346e3561d5ae4583e23fd9d132d98d181f54202a26237e83c86f1430c77c3c51c0d8288cee478e9850bb3f5bc16799e26db8b63577d4a0f0d5a3383c5321a5ca96e986e3d8b555e3c4a2c8ab7c62e0f357a6adf61f104716c2769784b89f2dd7f6c91d01d8203d406a8b22e3e6391e52d461f4238863a34894cf9bc7680197387adeb68a96b3377221a64be79b6b5a826271b18fadde9b09f85b2a78861aa958747abf4d5f015c9fbb2c738fd697bc17780e4790a9af5bf4afd5dd172b43352907acc9449884c193b3adee9dc6a9e85824e3e969881080d24d91c12e42a742c3dfd43cc6af4aceae840e3b457cb2ca47b415ce0dc1ca0312b7c158115e4ea1b2c6f3d01b9f33a997d13c6915f94a705d2d7be86b4b38b1ae218cbbb1d8d876c15b99b5aa503740f547e5ed5aab16dbfb812f032d5eb6284c50ad818e8791bca06267c12862b0143a7297d2a8807c952db5ef554b673af71b2c693dd8456916d487379f9499c82746a52d947d942c13bc63bfe29657b3bdd71176c94e505f804b0a7dc6450bacc02a7eb4624af9ebf61ee1acfdd00613f7ba8bf4a185275326004abd8ead812c34b85fd54437bec290a4e76749119d49e8433483a77dcb9cb7396a236129938e3aff0586aae881ab336350864f3cb9f2141b1e30a492a81cffcf6818939891395742bbcff797fcbe2d5145d925e613e341dbc1abba4ad7f50e2a7b79545f367ecd8343d95ca5ba61836b776c76d2e594d2088b5040bf535212015e08a5308f7627c29d34899e7462649d9db67c128a51ad6bcfdb7aa081a78d33754c7afac975dd5d913ab9128da24e74c12b7e862cb6925d046376110e3d19c98beb513af9acbee95af63a70b1c2713628b751c5b8084bffa5c96e6be9d07de4948c4cd0ddd65c1e9250d29aa5ea41ee03b0a34e19bc9da5cdb6e0c57cafa69cf87890d6956c07cc6d44a02de818567db6e8b39dbdd843072ef76a0cd6dc9a976df4692131da9a42ce67678da6d9ff9bab6e56e98d36d6cfcea14e12fa28e3be421710d5fff16435b15a18400df29f5241299841773c335f9de6488db2a60691cbf52684f77072fd08452b90d2941c7638b31a0dfe82737d6920e077f8ff9a8b0840a10f67a73895a669fe17693baa46f547722d41004875545e52dc35b7363461ca7d2b6d48f0217a0b10e7534bef3159334a3cb4cc88952ef94c17512f65157891471db9c65e63996d797f5b7e8a47456456ac63bb5ae06616a813592893cccfde51b1fcf90d93d593140972b5cc0f0397b99b970622acbc23df5a2c629aa455c4d9160e2df7103da05f713201cd5c7c5db3f8018c7724259b2ce5870eecdda5467d4d65e52ee834c374fe28ea990e57509ac0e4ffa1abc997a5c7ed3724fa0971a362965d61458420ec380ee037c56b3fe716e9f7abe02a52df4fa32402ea0fcfd7296dabe48324e21df740535aedf91506b3cedfb3b780afb2e73d99dd76a999dcad9c39817904041972233c62fb11477d6af17bb246c65b0c9634590b125f98e01356a85304354bf65f8a53087c0d97b0810eaf24b1cd3445f8ec51766ababd9270ab825fdc6e7baf0678e48aec81ef742ca29bded9b3da2cccc17d8fe85fea94d6229b7de824ffa51c85bdb631733bf0ec039a64cd6f503395a0fff9314b8e8273016463c3e775465cfc7ae75bdfc44b05cc908afb73b3c16dae5bdb4947dd88bda4c075d21a501bdeb7f8350585070c3555b1d4c4b1932f5edea6df2d9a94217897310e440c9c225bb22f2528babccfcd1f33f33f0c74e658e7a57d303dfc068c72e1b40934ca70c757f991b9c2b36d84f1b0b3138a8efee4d3eaeac8e26236489e6922721ef83d59c12d2578e4f08369d462f9401a4227039b06faa502321d7d5c65a163a0ee9b0a98d3bb4c4be7da574f99f7f0fa8dd9a90580f4d471241cb7f181ac2cf6f8c5289cf8d7bf2dc4cb81031f0fb8fd4ef3a7f6037f832d22fedbc3db217543a1f196087bb4752fc217e5e67b00d24687cbdad3bbe2280bf0576e2503cbeed8803786e19031527495bb374f99f982bd338c977c61906ffd16d204dc1af41468fd232cec389310bd9e89ec690fa0ebe8c27365074bc4f4e3e6b8f93e5345ba57c59c92149aa5e2b5443fc88ec9ddca77dbe64ece4cd37afd93c2cdeb065430df5be6286aa4f1f98df1f41818fa15d9a461a007c634c747004000d37a10a8e7d6ff8d17df6ce932198d232b384014ec09c4b01a80e6173eea885329b745b88d61068a25f3d2dc55d4f9490764f855dbc6802e3e2eabbdcb1c131147f3341d2cd3087519fc607efdf987e7eb97a5392cdcb9eff2c26a7f71490a6257ca849803cd16c116e458fe80daaa9df0578621f7d0404835ff038e141e1fe57e8e398f462e3ce7463dec37ffbfbc71560d49c589132e7923e8680aec00071666b99f66680e6c3a058bf74e125f714384a0aaf4b7fe95b9f49a6c20e30b5274ac77e6e7c5db8deef912cd7d3820d4d2bc93a320a50a8b6b4d920ddbf16137b7412ce28db54fbe28e2c9b5a8b34f48999f5e7601d7e4a0c9947435ee49d706bf98e88ecc2039b04057fffb4a5c4e1c8566854ee55a7b064e5bcebe9a73d64b05ca5c468411882c106249a61ec1ebba55725dba74b4f2576f61db71031a41eb75cbf918f18a9647478627c065808e89a812f8a65797bbc1fd58f4d72961503fc07644ca1758150a03b11ff7e35471dc6446cab3c4b245f42a5c2ddefe00b2f817ea5608f9c2d66b5ae109aa4fca0be8673508862a79c3f7d5ecd732b0b923cc7472e7b976cc81e857062cc01728a0db981975b95863b702043018fb8a6b454e4d176fd2203869f02bb2605ee150b523485b2788b93e4d9768b2b504e579288832f7c05f82092542125cddc36050872c7ef6eb26754af8cc5595445a15a5ca215d65ba529a7ac507cda5cd1756abd860f31898996aa4f2ad1547a3c4e03e42f705c3b9cb094d2007a862f674914fb8060384943a010bed7e7aeebf2d210c55be784088b1eb4410d87fca06dd7a911c36038eb60ef295fc465f0dbaff0765c08f5d1233919e3e9738e9ccc5ee1942fe835b08b659b6211cd52494a73726ddecc4f62b8c833125b8d02a1e3efa24d2fa0c0f8cd2abe4c05304a9898cb7655bed1d206a6925a30d824901d25d5620ba311bb", 0xfaa}) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 11m22.681133655s ago: executing program 32 (id=2966): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) move_pages(r0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240), 0x2) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x0, 0x3}]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000280)={0x6, 0x8, 0x10, 0x4e, 0x40, 0x4, 0x10, 0xf, 0x20, 0x3a, 0x10, 0x100, &(0x7f0000000100)=[0x59ad], 0x1, &(0x7f0000000940)="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", 0xfaa}) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 9m44.151731357s ago: executing program 4 (id=3185): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xa4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="3daa00000000000071101d00000000009500008000000000b2031102801e70b9935f581c965f085da91c8cba8b43175af6aac86f15b1372c6742733974cfdcd027b13ca9b5e59bb39fd57e3f6166230319ea8b4bad98d800"/109], &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000050c0)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x15, 0x0, 0x1, [@nested={0x4, 0x146}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 9m42.662094626s ago: executing program 4 (id=3186): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000680)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3d, 0x9, 0x8, 0x0, r2}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x40010, r1, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x401, 0x9, 0x0, 'queue1\x00', 0x200000}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 9m40.832395078s ago: executing program 4 (id=3187): syz_usb_connect(0x6, 0x1f5, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e3, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a51080002"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 9m34.768352028s ago: executing program 4 (id=3199): mknod$loop(&(0x7f0000000480)='./file0\x00', 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x13, &(0x7f0000000780)=@raw=[@ldst={0x3, 0x3, 0x4, 0x5, 0xb, 0xc, 0x4}, @tail_call, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @jmp={0x5, 0x1, 0xd, 0x3, 0xa, 0xfffffffffffffffc, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x25}, @alu={0x4, 0x1, 0x9, 0xc, 0x5, 0xfffffffffffffff0, 0x1}, @generic={0x7, 0x4, 0x1, 0x7, 0x8}, @jmp={0x5, 0x1, 0x5, 0x5, 0x5, 0xffffffffffffffe0, 0x8}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="76389e147583dd", 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r7, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) r8 = epoll_create1(0x80000) r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa0000) ioctl$NBD_SET_FLAGS(r9, 0xab0a, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r10, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r12, 0x0, 0x0}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0x40000000}) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000000c0)=0x20) ppoll(&(0x7f00000001c0)=[{r8, 0x8708}], 0x1, &(0x7f0000000040), 0x0, 0x1f) 9m33.203312901s ago: executing program 4 (id=3202): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019300)=""/102400, 0x19000) fanotify_mark(0xffffffffffffffff, 0x8, 0x4800003a, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 9m31.752443506s ago: executing program 4 (id=3204): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x3, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r0, 0x2, &(0x7f0000000300)=""/198, 0xc6, 0x2, 0x1}) io_uring_enter(r1, 0x1004be7, 0x4c3, 0x43, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) bind$unix(r5, 0x0, 0x0) r6 = syz_io_uring_setup(0x10f, &(0x7f00000009c0)={0x0, 0x46ee, 0x10000, 0xffffdffd, 0x10a}, &(0x7f0000000140)=0x0, &(0x7f0000001080)=0x0) r9 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201610117592920570509201ec70102030109022400010200100009045807028ab538000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x20, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r11, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r13 = accept(r10, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x14008040}, 0xc8c5) recvfrom(r12, &(0x7f0000000180)=""/60, 0xfffffffffffffe65, 0x14162, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) open(&(0x7f0000000000)='./file0\x00', 0x610000, 0x4c) io_uring_enter(r6, 0x3514, 0x67f, 0x64, 0x0, 0x0) dup3(r6, r4, 0x80000) 9m15.876150093s ago: executing program 33 (id=3204): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x3, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r0, 0x2, &(0x7f0000000300)=""/198, 0xc6, 0x2, 0x1}) io_uring_enter(r1, 0x1004be7, 0x4c3, 0x43, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x8000000) bind$unix(r5, 0x0, 0x0) r6 = syz_io_uring_setup(0x10f, &(0x7f00000009c0)={0x0, 0x46ee, 0x10000, 0xffffdffd, 0x10a}, &(0x7f0000000140)=0x0, &(0x7f0000001080)=0x0) r9 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201610117592920570509201ec70102030109022400010200100009045807028ab538000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x20, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r11, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r13 = accept(r10, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x14008040}, 0xc8c5) recvfrom(r12, &(0x7f0000000180)=""/60, 0xfffffffffffffe65, 0x14162, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) open(&(0x7f0000000000)='./file0\x00', 0x610000, 0x4c) io_uring_enter(r6, 0x3514, 0x67f, 0x64, 0x0, 0x0) dup3(r6, r4, 0x80000) 4m18.767383553s ago: executing program 5 (id=3985): r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(0x0, 0x0, &(0x7f0000000240)="df", 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", '\x00', "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x10000000000000, 0x60b, 0x23, 0xc6c1, 0x5, 0x20000003, "57c1169b6664ea61326ac71ae7213059", 0x0, 0xee, 0x7, 0xbd, 0x6, 0x7, 0xff}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fsmount(r0, 0x0, 0x18) 4m15.990053995s ago: executing program 5 (id=3989): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(0x0) 4m14.438457247s ago: executing program 5 (id=3992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000006c0)="e0e9bb28503f", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000ac0)="82909e324f1ba077b0f91ea324ba6387d61a29f3beae2f7bf31fd528c78149b74288e74c416d0470d72c1c7f4fb46b9ac53b45457b6bf34a94943c0a8130a92b381f58c22debaec4f4d9c4f578f4bd34f6d15a04a1cfdf57240497841eb3c910d4a2191e7ebd609c945fb4d61b8a1cb4032b9dff8c6add881a283415f812104c244f44d01ab21594c46d078a09de0be99b06c0b90f18cf2ec31cfd0eb10cec0775", 0xa1}, {&(0x7f0000000bc0)="2e40f6fddd8c7bd5b2a831575b1841081f7235d6001c3dcf", 0x18}], 0x2}}], 0x2, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m13.863699231s ago: executing program 5 (id=3993): pipe(&(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x48) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000040) 4m7.259090475s ago: executing program 5 (id=4005): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$pptp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket(0x2, 0x2, 0x1) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 4m5.758522638s ago: executing program 5 (id=4009): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00'}, 0x18) capget(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x3, 0x8, 0xb, 0x8, 0x8, 0x293}) syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 3m50.538901853s ago: executing program 34 (id=4009): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00'}, 0x18) capget(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x3, 0x8, 0xb, 0x8, 0x8, 0x293}) syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 3m22.662793778s ago: executing program 1 (id=4109): r0 = socket(0x11, 0x2, 0x0) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24044005) 3m22.419963475s ago: executing program 1 (id=4111): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x29a61a4dd1539fc9) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_clone3(&(0x7f0000000440)={0x20080, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 3m22.088020253s ago: executing program 1 (id=4113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8044001280110001006272696467655f736c617665000000002c00058008002200", @ANYRES32=0x0, @ANYBLOB="080003004000000005002000010004"], 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 3m21.181375859s ago: executing program 1 (id=4114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, 0x0, 0x0, 0x400002d, 0x0, 0x0) 3m21.023248093s ago: executing program 0 (id=4115): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='gfs2\x00', 0x5, 0x0) 3m19.96578877s ago: executing program 0 (id=4116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m19.855852985s ago: executing program 1 (id=4117): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x82083) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x9, 0xb801, 0x0, 0x0}, {0xc7d, 0x2010, 0x0, 0x0}], 0x2}) 3m19.629111742s ago: executing program 0 (id=4118): fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5) 3m19.386521489s ago: executing program 0 (id=4119): ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000040)) 3m19.172087749s ago: executing program 1 (id=4120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f00000058c0)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x31}, 0x8000) 3m19.171921156s ago: executing program 0 (id=4121): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1) 3m18.926549961s ago: executing program 0 (id=4123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8044001280110001006272696467655f736c617665000000002c00058008002200", @ANYRES32=0x0, @ANYBLOB="080003004000000005002000010004"], 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 3m3.576027535s ago: executing program 35 (id=4123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8044001280110001006272696467655f736c617665000000002c00058008002200", @ANYRES32=0x0, @ANYBLOB="080003004000000005002000010004"], 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 3m3.477005688s ago: executing program 36 (id=4120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f00000058c0)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x31}, 0x8000) 6.618098435s ago: executing program 6 (id=4366): r0 = socket$pptp(0x18, 0x1, 0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bind$pptp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket(0x2, 0x2, 0x1) r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 4.785829957s ago: executing program 2 (id=4367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.710135813s ago: executing program 2 (id=4368): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x34, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x20050800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000380)=0x4) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 3.15921518s ago: executing program 6 (id=4369): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)) chdir(&(0x7f00000001c0)='./bus\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) 3.071831779s ago: executing program 6 (id=4370): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000035c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183000000000000000019000000200001801400020076657468315f766c616e00000000000008000100", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x40010) 2.904740746s ago: executing program 6 (id=4371): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[], 0xffffff55) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.869040608s ago: executing program 2 (id=4372): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x29a61a4dd1539fc9) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x20080, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1.866467647s ago: executing program 6 (id=4373): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, 0x0, &(0x7f0000000080)=r0}, 0x20) 967.753138ms ago: executing program 2 (id=4374): capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 694.173478ms ago: executing program 2 (id=4375): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b01, 0x0) 655.200579ms ago: executing program 6 (id=4376): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bind$pptp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket(0x2, 0x2, 0x1) r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=4377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000440) socket$inet_udp(0x2, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) kernel console output (not intermixed with test programs): 661][T18226] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1222.464742][T18226] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.464755][T18226] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1222.464851][T18226] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.464863][T18226] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1222.464945][T18226] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.464957][T18226] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1222.465036][T18226] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.465048][T18226] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1222.465140][T18226] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.465152][T18226] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1222.465240][T18226] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.465252][T18226] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1222.465332][T18226] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.465344][T18226] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1222.472972][T18226] ldm_validate_partition_table(): Disk read failed. [ 1222.475269][T18226] Dev nbd0: unable to read RDB block 0 [ 1222.486754][T18226] nbd0: unable to read partition table [ 1222.636266][ T10] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1222.705443][T18168] hsr_slave_0: entered promiscuous mode [ 1222.723316][T18168] hsr_slave_1: entered promiscuous mode [ 1222.724336][T18168] debugfs: 'hsr0' already exists in 'hsr' [ 1222.724360][T18168] Cannot create hsr debugfs directory [ 1222.798768][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1222.798837][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1222.798862][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1222.800095][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1222.800150][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1222.800169][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1222.804365][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1222.804412][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1222.804437][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1222.871919][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1222.872073][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1222.872096][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.136809][ T10] adutux 6-1:168.0: interrupt endpoints not found [ 1223.166382][ T5818] Bluetooth: hci0: command tx timeout [ 1223.967466][T16143] usb 6-1: USB disconnect, device number 8 [ 1225.246342][ T5818] Bluetooth: hci0: command tx timeout [ 1225.925429][T18168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.146796][T18168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.394701][ T6621] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 1227.519858][T18168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.549499][ T6621] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1227.549542][ T6621] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1227.549556][ T6621] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1227.550718][ T6621] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1227.550769][ T6621] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1227.550786][ T6621] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1227.551991][ T6621] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1227.552041][ T6621] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1227.552056][ T6621] usb 7-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1227.618732][ T6621] usb 7-1: string descriptor 0 read error: -22 [ 1227.618893][ T6621] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1227.618915][ T6621] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.682591][ T6621] adutux 7-1:168.0: interrupt endpoints not found [ 1228.588296][T15823] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1228.681577][ T7241] usb 7-1: USB disconnect, device number 6 [ 1228.916221][T15823] usb 2-1: Using ep0 maxpacket: 16 [ 1228.918748][T15823] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1228.918775][T15823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.020134][T15823] usb 2-1: config 0 descriptor?? [ 1229.039091][T15823] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1229.485530][T15823] gspca_sonixj: reg_r err -32 [ 1229.486010][T15823] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 1229.590449][T18168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.080546][T18294] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1230.733827][T18168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1230.877229][T15823] usb 2-1: USB disconnect, device number 73 [ 1231.036938][T18168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1231.114747][T18168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1231.228387][T18168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1232.020073][T18168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.195697][T18168] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.866747][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.867746][ T1351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.097764][ T3815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.097882][ T3815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.856586][T15823] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1235.964401][ T6735] usb 1-1: new low-speed USB device number 103 using dummy_hcd [ 1236.038502][T15823] usb 6-1: Using ep0 maxpacket: 16 [ 1236.064342][T15823] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1236.064371][T15823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.107929][T15823] usb 6-1: config 0 descriptor?? [ 1236.150602][T15823] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1236.221318][ T6735] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1236.221483][ T6735] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1236.221507][ T6735] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1236.227197][ T6735] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1236.234583][ T6735] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1236.234613][ T6735] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1236.281975][ T6735] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1236.282027][ T6735] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1236.305180][ T6735] usb 1-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1236.395053][ T6735] usb 1-1: string descriptor 0 read error: -22 [ 1236.411041][ T6735] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1236.411069][ T6735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.566916][ T6735] adutux 1-1:168.0: interrupt endpoints not found [ 1236.736237][T15823] gspca_sonixj: reg_r err -32 [ 1236.736308][T15823] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 1236.809001][T18343] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1238.398024][T15823] usb 1-1: USB disconnect, device number 103 [ 1238.557061][T16143] usb 6-1: USB disconnect, device number 9 [ 1238.705086][T18168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.181030][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.181074][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.205201][T18168] veth0_vlan: entered promiscuous mode [ 1239.231768][T18168] veth1_vlan: entered promiscuous mode [ 1239.366780][T18168] veth0_macvtap: entered promiscuous mode [ 1239.377016][T18168] veth1_macvtap: entered promiscuous mode [ 1239.433692][T18168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.485078][T18168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.537703][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.537905][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.542677][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.549649][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.704532][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.704629][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.118965][ T2221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.118986][ T2221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.526754][T17571] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 1242.656280][T17571] usb 6-1: device descriptor read/64, error -71 [ 1242.906486][T17571] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 1243.126728][T17571] usb 6-1: device descriptor read/64, error -71 [ 1243.159599][T18392] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1243.250366][T17571] usb usb6-port1: attempt power cycle [ 1243.796733][T17571] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1243.827086][T17571] usb 6-1: device descriptor read/8, error -71 [ 1244.091607][T17571] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 1244.113121][T17571] usb 6-1: device descriptor read/8, error -71 [ 1244.226944][T17571] usb usb6-port1: unable to enumerate USB device [ 1245.887950][T16143] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1246.336294][T16143] usb 7-1: Using ep0 maxpacket: 32 [ 1246.348255][T16143] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1246.371477][T16143] usb 7-1: config 0 has an invalid interface number: 251 but max is 1 [ 1246.371495][T16143] usb 7-1: config 0 has an invalid descriptor of length 227, skipping remainder of the config [ 1246.371505][T16143] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1246.371515][T16143] usb 7-1: config 0 has no interface number 0 [ 1246.371533][T16143] usb 7-1: config 0 interface 251 has no altsetting 0 [ 1246.473463][T16143] usb 7-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 1246.473494][T16143] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.473527][T16143] usb 7-1: Product: syz [ 1246.473541][T16143] usb 7-1: Manufacturer: syz [ 1246.473554][T16143] usb 7-1: SerialNumber: syz [ 1246.531508][T16143] usb 7-1: config 0 descriptor?? [ 1249.525516][T18444] ======================================================= [ 1249.525516][T18444] WARNING: The mand mount option has been deprecated and [ 1249.525516][T18444] and is ignored by this kernel. Remove the mand [ 1249.525516][T18444] option from the mount to silence this warning. [ 1249.525516][T18444] ======================================================= [ 1249.900906][T18447] overlayfs: overlapping lowerdir path [ 1250.586288][T15823] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 1250.716385][T15823] usb 2-1: device descriptor read/64, error -71 [ 1250.956236][T15823] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 1251.086310][T15823] usb 2-1: device descriptor read/64, error -71 [ 1251.196808][T15823] usb usb2-port1: attempt power cycle [ 1251.536239][T15823] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 1251.557299][T15823] usb 2-1: device descriptor read/8, error -71 [ 1252.036266][T15823] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 1252.080074][T15823] usb 2-1: device descriptor read/8, error -71 [ 1252.187729][T15823] usb usb2-port1: unable to enumerate USB device [ 1257.576295][T16143] usb 1-1: new low-speed USB device number 104 using dummy_hcd [ 1257.736348][T16143] usb 1-1: device descriptor read/64, error -71 [ 1258.067440][T16143] usb 1-1: new low-speed USB device number 105 using dummy_hcd [ 1258.208502][T16143] usb 1-1: device descriptor read/64, error -71 [ 1258.316875][T16143] usb usb1-port1: attempt power cycle [ 1258.582617][T10970] usb 7-1: USB disconnect, device number 7 [ 1258.661549][T16143] usb 1-1: new low-speed USB device number 106 using dummy_hcd [ 1258.676832][T16143] usb 1-1: device descriptor read/8, error -71 [ 1258.916513][T16143] usb 1-1: new low-speed USB device number 107 using dummy_hcd [ 1258.937332][T16143] usb 1-1: device descriptor read/8, error -71 [ 1259.237718][T16143] usb usb1-port1: unable to enumerate USB device [ 1260.192045][ T5818] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 1262.184820][T18599] CIFS: Unable to determine destination address [ 1263.476298][T10970] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1263.616236][T10970] usb 7-1: device descriptor read/64, error -71 [ 1263.856266][T10970] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1263.986361][T10970] usb 7-1: device descriptor read/64, error -71 [ 1264.096913][T10970] usb usb7-port1: attempt power cycle [ 1264.436264][T10970] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1264.457641][T10970] usb 7-1: device descriptor read/8, error -71 [ 1264.666261][ T10] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 1264.819328][ T10] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1264.819357][ T10] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1264.821143][ T10] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1264.821166][ T10] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1264.822863][ T10] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1264.822885][ T10] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1264.916293][T10970] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1264.937204][T10970] usb 7-1: device descriptor read/8, error -71 [ 1264.961388][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1264.961559][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1264.961581][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.018441][ T10] usb 6-1: rejected 3 configurations due to insufficient available bus power [ 1265.018466][ T10] usb 6-1: no configuration chosen from 3 choices [ 1265.050586][T10970] usb usb7-port1: unable to enumerate USB device [ 1265.411559][T18655] overlayfs: failed to resolve './cgroup': -2 [ 1267.279005][T18668] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1267.358065][ T10] usb 6-1: USB disconnect, device number 14 [ 1268.196657][T18686] CIFS: Unable to determine destination address [ 1270.444583][T18696] overlayfs: failed to resolve './cgroup': -2 [ 1272.048900][ T5899] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1272.061282][T18717] fuse: Bad value for 'fd' [ 1272.106295][ T5884] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1272.930225][ T5884] usb 3-1: device descriptor read/64, error -71 [ 1273.276676][ T5884] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1273.484475][ T5884] usb 3-1: device descriptor read/64, error -71 [ 1273.498304][ T5899] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1273.498365][ T5899] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1273.499509][ T5899] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1273.499576][ T5899] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1273.500714][ T5899] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1273.500763][ T5899] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1273.505298][ T5899] usb 7-1: string descriptor 0 read error: -22 [ 1273.505464][ T5899] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1273.505485][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.686904][ T5884] usb usb3-port1: attempt power cycle [ 1274.076529][ T5884] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1274.130049][ T5884] usb 3-1: device descriptor read/8, error -71 [ 1275.554866][ T5899] usb 7-1: can't set config #168, error -71 [ 1275.724358][ T5899] usb 7-1: USB disconnect, device number 12 [ 1277.155821][T18750] CIFS: Unable to determine destination address [ 1279.578486][T18767] fuse: Bad value for 'fd' [ 1282.493413][ T10] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 1282.568050][T18690] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1282.649017][ T10] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1282.649078][ T10] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1282.650718][ T10] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1282.650770][ T10] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1282.652210][ T10] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1282.652265][ T10] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1282.722360][T18690] usb 1-1: device descriptor read/64, error -71 [ 1283.897728][T18690] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1283.941263][ T10] usb 7-1: string descriptor 0 read error: -22 [ 1283.941355][ T10] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1283.941371][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.021217][ T10] adutux 7-1:168.0: interrupt endpoints not found [ 1284.036276][T18690] usb 1-1: device descriptor read/64, error -71 [ 1284.152706][T18690] usb usb1-port1: attempt power cycle [ 1284.626425][T18690] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1284.783048][ T9446] usb 7-1: USB disconnect, device number 13 [ 1284.945602][T18690] usb 1-1: device descriptor read/8, error -71 [ 1286.130126][T18801] fuse: Bad value for 'fd' [ 1286.434630][T18810] netlink: 'syz.5.3945': attribute type 1 has an invalid length. [ 1286.536674][T18807] CIFS: Unable to determine destination address [ 1289.446301][ T6735] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1289.456290][T18690] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 1289.576343][ T6735] usb 6-1: device descriptor read/64, error -71 [ 1289.609253][T18690] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1289.609315][T18690] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1289.610854][T18690] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1289.610907][T18690] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1289.612584][T18690] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1289.612639][T18690] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1289.617068][T18690] usb 1-1: string descriptor 0 read error: -22 [ 1289.617261][T18690] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1289.617283][T18690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.642362][T18690] adutux 1-1:168.0: interrupt endpoints not found [ 1289.816235][ T6735] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1289.974702][T18690] usb 1-1: USB disconnect, device number 112 [ 1289.999906][ T6735] usb 6-1: device descriptor read/64, error -71 [ 1290.209965][ T6735] usb usb6-port1: attempt power cycle [ 1290.919011][T18842] qnx4: unable to read the superblock [ 1291.497025][T18849] CIFS: Unable to determine destination address [ 1294.626220][T17571] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 1294.778501][T17571] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1294.778564][T17571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1294.778589][T17571] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1294.780080][T17571] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1294.780137][T17571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1294.780161][T17571] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1294.781700][T17571] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1294.781756][T17571] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1294.781781][T17571] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1294.914426][T17571] usb 3-1: string descriptor 0 read error: -22 [ 1294.914595][T17571] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1294.914617][T17571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.986346][T17571] adutux 3-1:168.0: interrupt endpoints not found [ 1295.673459][T17571] usb 3-1: USB disconnect, device number 115 [ 1295.792238][T18886] fuse: Bad value for 'fd' [ 1296.207632][T18894] sctp: [Deprecated]: syz.2.3973 (pid 18894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1296.207632][T18894] Use struct sctp_sack_info instead [ 1296.506039][T18901] CIFS: Unable to determine destination address [ 1297.706373][T18690] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 1297.836289][T18690] usb 1-1: device descriptor read/64, error -71 [ 1299.546441][T18690] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 1300.146348][T18690] usb 1-1: device descriptor read/64, error -71 [ 1300.260046][T18690] usb usb1-port1: attempt power cycle [ 1300.628448][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.628524][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.706459][T10970] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 1300.878994][T10970] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1300.879142][T10970] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1300.879169][T10970] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1301.229756][T10970] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1301.229818][T10970] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1301.229840][T10970] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1301.286299][T10970] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1301.286364][T10970] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1301.286389][T10970] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1301.483255][T10970] usb 7-1: string descriptor 0 read error: -22 [ 1301.483421][T10970] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1301.483443][T10970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.696360][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 1302.913804][T10970] adutux 7-1:168.0: interrupt endpoints not found [ 1303.928509][ T6621] usb 7-1: USB disconnect, device number 14 [ 1304.921187][T18953] CIFS: Unable to determine destination address [ 1304.990259][T18948] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3990'. [ 1305.698231][T18962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3994'. [ 1307.822397][T18969] netlink: 'syz.1.3997': attribute type 12 has an invalid length. [ 1312.221085][T19002] CIFS: Unable to determine destination address [ 1312.316326][T15823] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 1312.680953][T15823] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1312.683363][T15823] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1312.683502][T15823] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1312.727786][T15823] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1312.727865][T15823] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1312.727888][T15823] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1312.756307][T15823] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1312.756357][T15823] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1312.756372][T15823] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1312.824192][T15823] usb 7-1: string descriptor 0 read error: -22 [ 1312.824307][T15823] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1312.824320][T15823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.869085][T15823] adutux 7-1:168.0: interrupt endpoints not found [ 1313.142703][T15823] usb 7-1: USB disconnect, device number 15 [ 1320.686450][T19046] gfs2: not a GFS2 filesystem [ 1321.185518][T19054] fuse: Bad value for 'fd' [ 1321.286291][ T10] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 1321.437786][ T10] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1321.437821][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1321.437835][ T10] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1321.438698][ T10] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1321.438730][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1321.438743][ T10] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1321.439582][ T10] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1321.439610][ T10] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1321.439623][ T10] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1321.442619][ T10] usb 7-1: string descriptor 0 read error: -22 [ 1321.442702][ T10] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1321.442714][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.548092][ T10] adutux 7-1:168.0: interrupt endpoints not found [ 1322.499721][ T10] usb 7-1: USB disconnect, device number 16 [ 1328.166288][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1328.326296][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1328.333251][ T10] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1328.333277][ T10] usb 7-1: config 0 has no interface number 0 [ 1328.333328][ T10] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1328.335707][ T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1328.335724][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.335735][ T10] usb 7-1: Product: syz [ 1328.335743][ T10] usb 7-1: Manufacturer: syz [ 1328.335750][ T10] usb 7-1: SerialNumber: syz [ 1328.348580][ T10] usb 7-1: config 0 descriptor?? [ 1328.387037][T19100] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1328.526275][T15823] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1328.528525][T14765] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 1328.598274][T19100] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1328.676653][T15823] usb 3-1: Using ep0 maxpacket: 32 [ 1328.678744][T15823] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1328.678760][T15823] usb 3-1: config 0 has no interface number 0 [ 1328.681988][T15823] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1328.682004][T15823] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1328.682015][T15823] usb 3-1: Product: syz [ 1328.682022][T15823] usb 3-1: Manufacturer: syz [ 1328.682029][T15823] usb 3-1: SerialNumber: syz [ 1328.787109][T15823] usb 3-1: config 0 descriptor?? [ 1328.810806][ T10] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1328.810975][ T10] asix 7-1:0.188: probe with driver asix failed with error -61 [ 1328.845601][T15823] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1328.845639][T15823] usb 3-1: selecting invalid altsetting 1 [ 1328.845654][T15823] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1328.894617][T15823] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1328.909435][T15823] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1328.909499][T15823] usb 3-1: media controller created [ 1328.961165][T15823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1329.703493][T15823] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1329.703528][T15823] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1329.704261][T15823] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1329.870549][T15823] usb 3-1: USB disconnect, device number 116 [ 1330.440491][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1330.456529][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1330.466576][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1330.473810][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1330.482940][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1330.489558][ T5904] usb 7-1: USB disconnect, device number 17 [ 1330.893388][T15823] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 1331.075365][T15823] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1331.075423][T15823] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1331.075448][T15823] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1331.086618][T15823] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1331.086656][T15823] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1331.086670][T15823] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1331.088672][T15823] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1331.088722][T15823] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1331.088747][T15823] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1331.143558][T15823] usb 3-1: string descriptor 0 read error: -22 [ 1331.143713][T15823] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1331.143736][T15823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.208273][T14765] Bluetooth: hci3: command tx timeout [ 1340.576385][T15823] usb 3-1: can't set config #168, error -71 [ 1340.651870][T15823] usb 3-1: USB disconnect, device number 117 [ 1341.346759][T19154] gfs2: not a GFS2 filesystem [ 1341.496567][T19156] new mount options do not match the existing superblock, will be ignored [ 1341.512259][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1341.512281][ T37] audit: type=1800 audit(1764926022.094:29): pid=19156 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4051" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1342.188132][ T8135] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1342.339526][ T8135] usb 1-1: Using ep0 maxpacket: 32 [ 1342.341670][ T8135] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1342.341688][ T8135] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1342.341702][ T8135] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1342.394643][ T8135] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1342.394673][ T8135] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1342.394692][ T8135] usb 1-1: Product: syz [ 1342.394706][ T8135] usb 1-1: Manufacturer: syz [ 1342.394719][ T8135] usb 1-1: SerialNumber: syz [ 1342.578795][ T8135] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input51 [ 1343.047861][T14765] Bluetooth: hci3: command tx timeout [ 1344.043068][T18972] usb 1-1: USB disconnect, device number 116 [ 1344.087150][T14765] Bluetooth: hci0: command 0x0406 tx timeout [ 1344.277533][T19120] chnl_net:caif_netlink_parms(): no params data found [ 1344.326674][T18972] appletouch 1-1:1.0: input: appletouch disconnected [ 1344.356261][T19143] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1344.506191][T19143] usb 3-1: Using ep0 maxpacket: 32 [ 1344.515569][T19143] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1344.515597][T19143] usb 3-1: config 0 has no interface number 0 [ 1344.515660][T19143] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1344.688832][T19143] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1344.688861][T19143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.688880][T19143] usb 3-1: Product: syz [ 1344.688892][T19143] usb 3-1: Manufacturer: syz [ 1344.688906][T19143] usb 3-1: SerialNumber: syz [ 1344.750460][T19143] usb 3-1: config 0 descriptor?? [ 1344.751516][T19169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1344.964561][T19169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1344.981263][T19172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4057'. [ 1345.088270][ T5818] Bluetooth: hci3: command tx timeout [ 1345.126320][ T10] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1345.276457][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1345.285092][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.285149][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1345.285191][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1345.285212][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.311427][ T10] usb 1-1: config 0 descriptor?? [ 1345.382359][T19143] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1345.382644][T19143] asix 3-1:0.188: probe with driver asix failed with error -32 [ 1345.387507][ T10] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 1345.674864][ T159] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.429730][ T10] usb 3-1: USB disconnect, device number 118 [ 1346.777788][ T159] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.898097][T19120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.900122][T19120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.900379][T19120] bridge_slave_0: entered allmulticast mode [ 1346.902092][T19120] bridge_slave_0: entered promiscuous mode [ 1346.912920][T19120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.915423][T19120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.915681][T19120] bridge_slave_1: entered allmulticast mode [ 1346.924187][T19120] bridge_slave_1: entered promiscuous mode [ 1347.162567][ T159] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.167602][ T5818] Bluetooth: hci3: command tx timeout [ 1347.367409][T19206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4069'. [ 1347.638719][ T159] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.682259][T19120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.697868][T19120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.706291][T18972] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 1347.800980][T18781] usb 1-1: USB disconnect, device number 117 [ 1347.861187][T18972] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1347.861249][T18972] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1347.861275][T18972] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1347.862416][T18972] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1347.862466][T18972] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1347.862490][T18972] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1347.863635][T18972] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1347.863684][T18972] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1347.863709][T18972] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1347.961686][T18972] usb 3-1: string descriptor 0 read error: -22 [ 1347.961835][T18972] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1347.961857][T18972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.993464][T18972] adutux 3-1:168.0: interrupt endpoints not found [ 1348.027212][T19120] team0: Port device team_slave_0 added [ 1348.031122][T19120] team0: Port device team_slave_1 added [ 1348.252511][T19120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.252530][T19120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.252556][T19120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.269108][T19120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.269128][T19120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.269153][T19120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.345310][ T7241] usb 3-1: USB disconnect, device number 119 [ 1349.174490][T19236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4080'. [ 1349.227841][T19120] hsr_slave_0: entered promiscuous mode [ 1349.233424][T19120] hsr_slave_1: entered promiscuous mode [ 1349.237302][T19120] debugfs: 'hsr0' already exists in 'hsr' [ 1349.237329][T19120] Cannot create hsr debugfs directory [ 1349.339548][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1349.438944][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4084'. [ 1349.496352][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1349.498334][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.498391][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1349.498432][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1349.498454][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.559722][ T10] usb 7-1: config 0 descriptor?? [ 1349.574229][ T10] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 1349.606305][T18781] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1349.756223][T18781] usb 3-1: Using ep0 maxpacket: 32 [ 1349.758446][T18781] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1349.758473][T18781] usb 3-1: config 0 has no interface number 0 [ 1349.758504][T18781] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1349.759371][ T159] bridge_slave_1: left allmulticast mode [ 1349.759397][ T159] bridge_slave_1: left promiscuous mode [ 1349.760015][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.764709][T18781] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1349.764735][T18781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.764750][T18781] usb 3-1: Product: syz [ 1349.764763][T18781] usb 3-1: Manufacturer: syz [ 1349.764776][T18781] usb 3-1: SerialNumber: syz [ 1349.850854][T18781] usb 3-1: config 0 descriptor?? [ 1349.851833][T19242] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1349.889417][ T159] bridge_slave_0: left allmulticast mode [ 1349.889446][ T159] bridge_slave_0: left promiscuous mode [ 1349.889686][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.946336][ T7241] usb 1-1: new low-speed USB device number 118 using dummy_hcd [ 1350.062238][T19242] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1350.098435][ T7241] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1350.098495][ T7241] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1350.098520][ T7241] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1350.100197][ T7241] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1350.100236][ T7241] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1350.100261][ T7241] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1350.101677][ T7241] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1350.101776][ T7241] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1350.101798][ T7241] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1350.107387][ T7241] usb 1-1: string descriptor 0 read error: -22 [ 1350.107545][ T7241] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1350.107567][ T7241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.217087][ T7241] adutux 1-1:168.0: interrupt endpoints not found [ 1350.508661][T18781] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1350.550090][T18781] asix 3-1:0.188: probe with driver asix failed with error -32 [ 1350.738953][ T5899] usb 1-1: USB disconnect, device number 118 [ 1352.101741][ T7241] usb 7-1: USB disconnect, device number 18 [ 1352.534730][T19279] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4094'. [ 1352.548974][T19282] gfs2: not a GFS2 filesystem [ 1352.571226][ T7241] usb 3-1: USB disconnect, device number 120 [ 1353.133943][ T7241] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1353.287207][ T7241] usb 3-1: no configurations [ 1353.287227][ T7241] usb 3-1: can't read configurations, error -22 [ 1353.418066][ T7241] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1353.567351][ T7241] usb 3-1: no configurations [ 1353.567372][ T7241] usb 3-1: can't read configurations, error -22 [ 1353.567735][ T7241] usb usb3-port1: attempt power cycle [ 1353.636486][T18972] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 1353.850371][T18972] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1353.850428][T18972] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1353.850454][T18972] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1353.851591][T18972] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1353.851638][T18972] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1353.851662][T18972] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1353.866842][T18972] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1353.866897][T18972] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1353.866921][T18972] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1353.871283][T18972] usb 7-1: string descriptor 0 read error: -22 [ 1353.871434][T18972] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1353.871454][T18972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.906269][ T7241] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 1353.917951][T18972] adutux 7-1:168.0: interrupt endpoints not found [ 1353.929906][ T7241] usb 3-1: no configurations [ 1353.929925][ T7241] usb 3-1: can't read configurations, error -22 [ 1354.073889][ T7241] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1354.092010][ T7241] usb 3-1: no configurations [ 1354.092029][ T7241] usb 3-1: can't read configurations, error -22 [ 1354.092601][ T7241] usb usb3-port1: unable to enumerate USB device [ 1354.228948][T18972] usb 7-1: USB disconnect, device number 19 [ 1354.356286][ T159] bond0 (unregistering): left promiscuous mode [ 1354.356307][ T159] bond_slave_0: left promiscuous mode [ 1354.356503][ T159] bond_slave_1: left promiscuous mode [ 1354.418194][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.520363][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.570132][ T159] bond0 (unregistering): Released all slaves [ 1354.789635][T19268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4092'. [ 1355.236320][T18972] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1355.506295][T18972] usb 1-1: Using ep0 maxpacket: 8 [ 1355.508707][T18972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.508766][T18972] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1355.508816][T18972] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1355.508838][T18972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.516747][T18972] usb 1-1: config 0 descriptor?? [ 1355.521753][T18972] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 1356.797833][T19319] binder: 19318:19319 ioctl c0306201 0 returned -14 [ 1356.799621][ T5818] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 1357.360941][ T10] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 1357.520184][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1357.520301][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1357.520325][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1357.520338][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1357.520351][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1357.522309][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1357.522341][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1357.522355][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1357.522367][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1357.522380][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1357.524177][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1357.524363][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1357.524390][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1357.524408][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1357.524421][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1357.836554][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4113'. [ 1357.929437][ T5871] usb 1-1: USB disconnect, device number 119 [ 1358.602358][T19344] gfs2: not a GFS2 filesystem [ 1358.790363][ T159] batadv0: left promiscuous mode [ 1358.960708][ T159] hsr_slave_0: left promiscuous mode [ 1358.996309][ T159] hsr_slave_1: left promiscuous mode [ 1358.998146][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.998174][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.086624][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.086653][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.068792][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1360.068819][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.109921][ T10] usb 3-1: can't set config #168, error -71 [ 1360.113144][ T159] veth1_macvtap: left promiscuous mode [ 1360.113252][ T159] veth0_macvtap: left promiscuous mode [ 1360.113543][ T159] veth1_vlan: left promiscuous mode [ 1360.115421][ T159] veth0_vlan: left promiscuous mode [ 1360.152379][ T10] usb 3-1: USB disconnect, device number 125 [ 1360.536232][ T10] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1360.700973][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.701000][ T10] usb 3-1: config 0 has no interfaces? [ 1360.701028][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1360.701050][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.780034][ T10] usb 3-1: config 0 descriptor?? [ 1360.992494][ T10] usb 3-1: USB disconnect, device number 126 [ 1361.136262][T15823] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1361.336487][T15823] usb 7-1: Using ep0 maxpacket: 8 [ 1361.387914][T15823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1361.387957][T15823] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1361.387978][T15823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.399712][T15823] usb 7-1: config 0 descriptor?? [ 1361.406778][T15823] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 1362.054510][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.054582][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.476475][T15823] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1363.680790][T15823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.680809][T15823] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1363.680831][T15823] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1363.680843][T15823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.684154][T15823] usb 3-1: config 0 descriptor?? [ 1363.930575][T15823] usb 7-1: USB disconnect, device number 20 [ 1363.959083][ T5899] usb 3-1: USB disconnect, device number 127 [ 1364.597081][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1364.835320][T15823] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 1365.018179][T15823] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1365.018235][T15823] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1365.018249][T15823] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1365.018262][T15823] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1365.018275][T15823] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1365.023239][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1365.023650][T15823] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1365.023701][T15823] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1365.023719][T15823] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1365.023732][T15823] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1365.023745][T15823] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1365.024831][T15823] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1365.024880][T15823] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1365.024900][T15823] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1365.024913][T15823] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1365.024926][T15823] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1366.199147][ T37] audit: type=1800 audit(1764926046.724:30): pid=19397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4133" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1367.146309][T19143] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1367.318770][T19143] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.318796][T19143] usb 7-1: config 0 has no interfaces? [ 1367.318828][T19143] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1367.318849][T19143] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.324875][T19143] usb 7-1: config 0 descriptor?? [ 1367.555535][ T5956] usb 7-1: USB disconnect, device number 21 [ 1367.624541][T15823] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1367.624571][T15823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.668677][T15823] usb 3-1: can't set config #168, error -71 [ 1367.671021][T15823] usb 3-1: USB disconnect, device number 2 [ 1369.250273][ T5871] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1369.416354][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 1369.422554][ T5871] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1369.422581][ T5871] usb 3-1: config 0 has no interface number 0 [ 1369.424964][ T5871] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1369.424988][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.424998][ T5871] usb 3-1: Product: syz [ 1369.425006][ T5871] usb 3-1: Manufacturer: syz [ 1369.425013][ T5871] usb 3-1: SerialNumber: syz [ 1369.430807][ T5871] usb 3-1: config 0 descriptor?? [ 1369.456697][ T5871] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1369.632065][T18690] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1369.818511][T18690] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.818536][T18690] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1369.818581][T18690] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1369.818609][T18690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.824209][T18690] usb 7-1: config 0 descriptor?? [ 1370.053953][ T6842] usb 7-1: USB disconnect, device number 22 [ 1371.997558][ T5871] gspca_spca1528: reg_r err -71 [ 1371.997664][ T5871] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1372.016394][ T5871] usb 3-1: USB disconnect, device number 3 [ 1373.428908][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4145'. [ 1374.377151][ T5956] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1374.991065][ T5956] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.991125][ T5956] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1374.991243][ T5956] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1374.991296][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.101945][ T5956] usb 7-1: config 0 descriptor?? [ 1375.448185][ T5956] usb 7-1: USB disconnect, device number 23 [ 1375.699850][T19366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4123'. [ 1376.081201][T19120] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1376.247934][T19120] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1376.394046][T19120] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1376.667326][ T8135] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1377.010133][ T8135] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.010223][ T8135] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1377.010630][ T8135] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1377.010700][ T8135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.375380][ T8135] usb 3-1: config 0 descriptor?? [ 1377.492550][T19120] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1377.600584][ T8135] usb 3-1: USB disconnect, device number 4 [ 1377.941161][T14765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1377.967882][T14765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1377.969720][T14765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1377.971064][T14765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1377.974230][T14765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1379.445812][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1379.460358][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1379.462032][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1379.463657][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1379.465033][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1380.095170][ T5818] Bluetooth: hci1: command tx timeout [ 1381.976301][T14765] Bluetooth: hci6: command tx timeout [ 1382.130322][T14765] Bluetooth: hci1: command tx timeout [ 1383.446399][T15823] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1383.606201][T15823] usb 3-1: Using ep0 maxpacket: 8 [ 1383.608788][T15823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1383.608818][T15823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1383.608856][T15823] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1383.608877][T15823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.618215][T15823] usb 3-1: config 0 descriptor?? [ 1383.913075][T15823] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1384.023512][T19504] iowarrior 3-1:0.0: Error -90 while submitting URB [ 1384.025755][T15823] usb 3-1: USB disconnect, device number 5 [ 1384.047247][T14765] Bluetooth: hci6: command tx timeout [ 1384.206259][T14765] Bluetooth: hci1: command tx timeout [ 1384.584399][ T159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.014405][ T159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.040394][T19524] 9pnet_fd: Insufficient options for proto=fd [ 1385.059724][T19454] chnl_net:caif_netlink_parms(): no params data found [ 1385.073216][T19462] chnl_net:caif_netlink_parms(): no params data found [ 1385.095701][T19120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.116300][T18690] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1385.269023][T18690] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.269050][T18690] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1385.269087][T18690] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1385.269108][T18690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.341011][T18690] usb 3-1: config 0 descriptor?? [ 1386.128321][T14765] Bluetooth: hci6: command tx timeout [ 1386.287558][T14765] Bluetooth: hci1: command tx timeout [ 1386.308549][T18690] usb 3-1: USB disconnect, device number 6 [ 1388.236048][T14765] Bluetooth: hci6: command tx timeout [ 1388.758391][ T159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.950698][ T159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.055283][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1390.099124][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1390.140736][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1390.145534][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1390.172468][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1390.601948][T19560] 9pnet_fd: Insufficient options for proto=fd [ 1391.356436][ T37] audit: type=1800 audit(1764926071.854:31): pid=19567 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4168" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1391.683182][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4169'. [ 1392.286368][ T5818] Bluetooth: hci2: command tx timeout [ 1393.672504][T19462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.672714][T19462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.672992][T19462] bridge_slave_0: entered allmulticast mode [ 1393.675648][T19462] bridge_slave_0: entered promiscuous mode [ 1393.811552][T19454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.811640][T19454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.811807][T19454] bridge_slave_0: entered allmulticast mode [ 1393.813802][T19454] bridge_slave_0: entered promiscuous mode [ 1393.859031][T19462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.859169][T19462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.859470][T19462] bridge_slave_1: entered allmulticast mode [ 1393.861348][T19462] bridge_slave_1: entered promiscuous mode [ 1394.007708][T19454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.007856][T19454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.008099][T19454] bridge_slave_1: entered allmulticast mode [ 1394.044139][T19454] bridge_slave_1: entered promiscuous mode [ 1394.366255][ T5818] Bluetooth: hci2: command tx timeout [ 1395.133755][T19605] 9pnet_fd: Insufficient options for proto=fd [ 1395.481686][T19462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.504218][T19454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.624114][T19462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1395.632461][T19454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.112057][T19462] team0: Port device team_slave_0 added [ 1396.115515][T19454] team0: Port device team_slave_0 added [ 1396.167738][T19462] team0: Port device team_slave_1 added [ 1396.173019][T19454] team0: Port device team_slave_1 added [ 1396.446292][ T5818] Bluetooth: hci2: command tx timeout [ 1396.911400][T19462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.911412][T19462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.911427][T19462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.914230][T19454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.914242][T19454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.914256][T19454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.938546][T19462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.938563][T19462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.938588][T19462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.939908][T19454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.939920][T19454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.939963][T19454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.211682][ T37] audit: type=1800 audit(1764926079.804:32): pid=19623 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4179" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1399.214992][ T5818] Bluetooth: hci2: command tx timeout [ 1400.604189][T19462] hsr_slave_0: entered promiscuous mode [ 1400.605292][T19462] hsr_slave_1: entered promiscuous mode [ 1400.616266][T19462] debugfs: 'hsr0' already exists in 'hsr' [ 1400.616295][T19462] Cannot create hsr debugfs directory [ 1400.712707][T19454] hsr_slave_0: entered promiscuous mode [ 1400.714673][T19454] hsr_slave_1: entered promiscuous mode [ 1400.716045][T19454] debugfs: 'hsr0' already exists in 'hsr' [ 1400.716070][T19454] Cannot create hsr debugfs directory [ 1402.753893][T19551] chnl_net:caif_netlink_parms(): no params data found [ 1402.857809][ T5904] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1403.036394][ T5904] usb 7-1: Using ep0 maxpacket: 16 [ 1403.041212][ T5904] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1403.041240][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.069761][ T5904] usb 7-1: config 0 descriptor?? [ 1403.089373][ T5904] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1403.495882][ T5904] gspca_sonixj: reg_r err -32 [ 1403.495974][ T5904] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 1403.979368][ T159] bridge_slave_1: left allmulticast mode [ 1403.979388][ T159] bridge_slave_1: left promiscuous mode [ 1403.979547][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.029920][ T159] bridge_slave_0: left allmulticast mode [ 1404.029940][ T159] bridge_slave_0: left promiscuous mode [ 1404.030093][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.122343][ T159] bridge_slave_1: left allmulticast mode [ 1404.122372][ T159] bridge_slave_1: left promiscuous mode [ 1404.122635][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.208997][ T159] bridge_slave_0: left allmulticast mode [ 1404.209026][ T159] bridge_slave_0: left promiscuous mode [ 1404.209258][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.610082][ T5904] usb 7-1: USB disconnect, device number 24 [ 1410.486367][ T6473] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1410.636389][ T6473] usb 7-1: Using ep0 maxpacket: 16 [ 1410.638562][ T6473] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1410.638590][ T6473] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.655788][ T6473] usb 7-1: config 0 descriptor?? [ 1410.680904][ T6473] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1410.897232][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.021360][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.095008][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4198'. [ 1411.151144][ T6473] gspca_sonixj: reg_r err -32 [ 1411.151420][ T6473] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 1411.713304][ T159] bond0 (unregistering): Released all slaves [ 1413.257660][ T5871] usb 7-1: USB disconnect, device number 25 [ 1418.177382][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.240168][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.258960][ T159] bond0 (unregistering): Released all slaves [ 1418.297389][T19551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.297559][T19551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.297858][T19551] bridge_slave_0: entered allmulticast mode [ 1418.300636][T19551] bridge_slave_0: entered promiscuous mode [ 1418.461732][T19551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.461870][T19551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.462060][T19551] bridge_slave_1: entered allmulticast mode [ 1418.463907][T19551] bridge_slave_1: entered promiscuous mode [ 1418.717530][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4207'. [ 1421.315048][T19551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.369264][T19551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.552368][T19462] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1421.813989][T19462] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1422.182151][T19551] team0: Port device team_slave_0 added [ 1422.183162][T19462] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1422.271176][T19551] team0: Port device team_slave_1 added [ 1422.387930][T19462] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1423.507733][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.507908][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.948973][ T37] audit: type=1800 audit(1764926104.764:33): pid=19775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4214" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 1425.529504][T19551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.529516][T19551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.529532][T19551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.616897][T19551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.616914][T19551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.616939][T19551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.296580][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4215'. [ 1429.551255][T19454] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1429.593989][T19551] hsr_slave_0: entered promiscuous mode [ 1429.594961][T19551] hsr_slave_1: entered promiscuous mode [ 1429.595585][T19551] debugfs: 'hsr0' already exists in 'hsr' [ 1429.595601][T19551] Cannot create hsr debugfs directory [ 1429.756446][ T159] hsr_slave_0: left promiscuous mode [ 1429.776431][ T159] hsr_slave_1: left promiscuous mode [ 1429.777676][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1429.777705][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.845407][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1429.845432][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1430.204666][T19806] [U] [ 1430.204706][T19806] [U] [ 1430.204738][T19806] [U] [ 1430.204769][T19806] [U] [ 1430.204915][T19806] [U] [ 1430.204946][T19806] [U] [ 1430.204978][T19806] [U] [ 1430.205010][T19806] [U] [ 1430.205108][T19806] [U] [ 1430.205139][T19806] [U] [ 1430.205171][T19806] [U] [ 1430.205894][T19805] [U] [ 1430.416564][ T159] hsr_slave_0: left promiscuous mode [ 1430.794753][ T159] hsr_slave_1: left promiscuous mode [ 1430.823762][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.277009][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1431.536359][ T159] batman_adv: batadv0: Removing interface: dummy0 [ 1431.689121][ T159] veth1_macvtap: left promiscuous mode [ 1431.689186][ T159] veth0_macvtap: left promiscuous mode [ 1431.689375][ T159] veth1_vlan: left promiscuous mode [ 1431.689476][ T159] veth0_vlan: left promiscuous mode [ 1432.091231][ T37] audit: type=1800 audit(1764926112.654:34): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.4223" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1432.243535][ T5871] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1432.836303][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 1432.838458][ T5871] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1432.838489][ T5871] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1432.838503][ T5871] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1432.840887][ T5871] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1432.840909][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1432.840919][ T5871] usb 7-1: Product: syz [ 1432.840934][ T5871] usb 7-1: Manufacturer: syz [ 1432.840941][ T5871] usb 7-1: SerialNumber: syz [ 1432.943241][ T5871] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input52 [ 1434.322825][ T5904] usb 7-1: USB disconnect, device number 26 [ 1434.480095][ T5904] appletouch 7-1:1.0: input: appletouch disconnected [ 1436.236251][ T5904] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1436.396222][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1436.403022][ T5904] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1436.403048][ T5904] usb 3-1: config 0 has no interface number 0 [ 1436.403094][ T5904] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1436.408230][ T5904] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1436.408257][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.408275][ T5904] usb 3-1: Product: syz [ 1436.408289][ T5904] usb 3-1: Manufacturer: syz [ 1436.408301][ T5904] usb 3-1: SerialNumber: syz [ 1436.437505][T14765] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1436.452049][ T5904] usb 3-1: config 0 descriptor?? [ 1436.487618][T14765] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1436.494471][T19832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1436.506322][T14765] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1436.581989][T14765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1436.593830][T14765] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1436.734629][T19832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1436.880691][T14765] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1436.895636][T14765] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1436.950285][T14765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1436.964837][T14765] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1437.032192][T14765] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1437.398100][ T5904] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1437.398360][ T5904] asix 3-1:0.188: probe with driver asix failed with error -32 [ 1437.976007][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1438.317303][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1438.696486][T14765] Bluetooth: hci3: command tx timeout [ 1439.184445][T14765] Bluetooth: hci4: command tx timeout [ 1439.701104][ T7241] usb 3-1: USB disconnect, device number 7 [ 1440.766414][ T5818] Bluetooth: hci3: command tx timeout [ 1441.272948][T14765] Bluetooth: hci4: command tx timeout [ 1441.780931][T19857] new mount options do not match the existing superblock, will be ignored [ 1441.955550][ T37] audit: type=1800 audit(1764926122.424:35): pid=19857 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4232" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 1442.806276][T18781] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1442.876245][T14765] Bluetooth: hci3: command tx timeout [ 1442.956286][T18781] usb 3-1: Using ep0 maxpacket: 16 [ 1442.958326][T18781] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1442.958350][T18781] usb 3-1: config 0 has no interface number 0 [ 1442.961817][T18781] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1442.961844][T18781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.961861][T18781] usb 3-1: Product: syz [ 1442.961874][T18781] usb 3-1: Manufacturer: syz [ 1442.961887][T18781] usb 3-1: SerialNumber: syz [ 1442.965913][T18781] usb 3-1: config 0 descriptor?? [ 1443.031069][T18781] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1443.326654][T14765] Bluetooth: hci4: command tx timeout [ 1444.878097][T18781] gspca_spca1528: reg_r err -71 [ 1444.878191][T18781] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1444.886717][T18781] usb 3-1: USB disconnect, device number 8 [ 1444.926390][T14765] Bluetooth: hci3: command tx timeout [ 1445.409394][T14765] Bluetooth: hci4: command tx timeout [ 1446.376624][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1446.558387][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1446.560564][ T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1446.560591][ T10] usb 3-1: config 0 has no interface number 0 [ 1446.560635][ T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1446.562903][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1446.562924][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.562934][ T10] usb 3-1: Product: syz [ 1446.562943][ T10] usb 3-1: Manufacturer: syz [ 1446.562951][ T10] usb 3-1: SerialNumber: syz [ 1446.576997][ T10] usb 3-1: config 0 descriptor?? [ 1446.633452][T19872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1447.007332][T19872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1447.613508][ T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1447.614442][ T10] asix 3-1:0.188: probe with driver asix failed with error -32 [ 1449.346735][ T5812] usb 3-1: USB disconnect, device number 9 [ 1450.530057][ T37] audit: type=1800 audit(1764926131.094:36): pid=19890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4241" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 1451.690492][ T5818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1451.695082][ T5818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1451.697941][ T5818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1451.721839][ T5818] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1451.726297][ T5812] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1451.755690][ T5818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1451.934053][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 1451.942363][ T5812] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1451.942390][ T5812] usb 3-1: config 0 has no interface number 0 [ 1451.945383][ T5812] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1451.945408][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.945427][ T5812] usb 3-1: Product: syz [ 1451.945439][ T5812] usb 3-1: Manufacturer: syz [ 1451.945452][ T5812] usb 3-1: SerialNumber: syz [ 1451.950948][ T5812] usb 3-1: config 0 descriptor?? [ 1451.962338][ T5812] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1453.601552][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1453.715558][ T5812] gspca_spca1528: reg_r err -71 [ 1453.715652][ T5812] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1453.726936][ T5812] usb 3-1: USB disconnect, device number 10 [ 1453.806382][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1453.808227][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1453.808252][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.811225][ T10] usb 7-1: config 0 descriptor?? [ 1453.821871][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1453.904332][T14765] Bluetooth: hci7: command tx timeout [ 1454.600853][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1454.692717][ T10] gspca_sonixj: reg_r err -32 [ 1454.692803][ T10] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 1454.956948][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1455.976741][T14765] Bluetooth: hci7: command tx timeout [ 1456.424672][T18972] usb 7-1: USB disconnect, device number 27 [ 1458.216393][T14765] Bluetooth: hci7: command tx timeout [ 1460.286366][T14765] Bluetooth: hci7: command tx timeout [ 1460.577061][T19923] new mount options do not match the existing superblock, will be ignored [ 1460.643420][ T37] audit: type=1800 audit(1764926141.194:37): pid=19923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4250" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 1463.858401][ T37] audit: type=1800 audit(1764926144.354:38): pid=19927 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4251" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 1464.637212][T19454] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1465.526223][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1465.707611][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1465.709974][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1465.709998][ T10] usb 3-1: config 0 has no interface number 0 [ 1465.723157][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1465.723186][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.723204][ T10] usb 3-1: Product: syz [ 1465.723224][ T10] usb 3-1: Manufacturer: syz [ 1465.723238][ T10] usb 3-1: SerialNumber: syz [ 1465.736778][ T10] usb 3-1: config 0 descriptor?? [ 1465.758725][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1467.396591][ T10] gspca_spca1528: reg_r err -71 [ 1467.396655][ T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1467.408451][ T10] usb 3-1: USB disconnect, device number 11 [ 1468.121759][ T5904] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1468.266235][ T5904] usb 7-1: Using ep0 maxpacket: 16 [ 1468.273010][ T5904] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1468.273038][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.278761][ T5904] usb 7-1: config 0 descriptor?? [ 1468.313873][ T5904] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1469.149087][ T5904] gspca_sonixj: reg_r err -32 [ 1469.149187][ T5904] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 1469.206997][T19833] chnl_net:caif_netlink_parms(): no params data found [ 1469.283482][T19895] chnl_net:caif_netlink_parms(): no params data found [ 1471.070040][ T6621] usb 7-1: USB disconnect, device number 28 [ 1471.217108][T19981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4257'. [ 1471.360455][T19984] Bluetooth: MGMT ver 1.23 [ 1471.360491][T19984] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 1471.403232][T19835] chnl_net:caif_netlink_parms(): no params data found [ 1472.204915][T20005] new mount options do not match the existing superblock, will be ignored [ 1472.333907][ T37] audit: type=1800 audit(1764926152.824:39): pid=20005 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.4260" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1473.317449][T19833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.317660][T19833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.317893][T19833] bridge_slave_0: entered allmulticast mode [ 1473.323006][T19833] bridge_slave_0: entered promiscuous mode [ 1473.413708][T19895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.413790][T19895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.414081][T19895] bridge_slave_0: entered allmulticast mode [ 1473.416015][T19895] bridge_slave_0: entered promiscuous mode [ 1473.447017][T19833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.447144][T19833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.447353][T19833] bridge_slave_1: entered allmulticast mode [ 1473.449676][T19833] bridge_slave_1: entered promiscuous mode [ 1473.567971][T19895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.568090][T19895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.568251][T19895] bridge_slave_1: entered allmulticast mode [ 1473.570118][T19895] bridge_slave_1: entered promiscuous mode [ 1473.863422][T19833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.948353][T19835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.948498][T19835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.948732][T19835] bridge_slave_0: entered allmulticast mode [ 1473.950876][T19835] bridge_slave_0: entered promiscuous mode [ 1473.982555][T19833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.987159][T19895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.991463][T19835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.991676][T19835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.992005][T19835] bridge_slave_1: entered allmulticast mode [ 1473.998705][T19835] bridge_slave_1: entered promiscuous mode [ 1474.086777][T19895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1475.866307][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1476.036167][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1476.057258][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1476.057310][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1476.057366][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1476.068451][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1476.068477][ T10] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1476.068496][ T10] usb 3-1: Product: syz [ 1476.068508][ T10] usb 3-1: Manufacturer: syz [ 1476.068522][ T10] usb 3-1: SerialNumber: syz [ 1476.154570][ T10] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input53 [ 1476.591672][ T10] usb 3-1: USB disconnect, device number 12 [ 1476.904237][T19928] udevd[19928]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 1477.793724][ T10] appletouch 3-1:1.0: input: appletouch disconnected [ 1477.839253][T20036] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 1477.894210][T19833] team0: Port device team_slave_0 added [ 1477.993880][T19835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.098823][T19833] team0: Port device team_slave_1 added [ 1478.100499][T19895] team0: Port device team_slave_0 added [ 1478.103625][T19835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.186369][T18972] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1478.302803][T19895] team0: Port device team_slave_1 added [ 1478.336256][T18972] usb 7-1: Using ep0 maxpacket: 32 [ 1478.338083][T18972] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1478.340343][T18972] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1478.340363][T18972] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1478.340374][T18972] usb 7-1: Product: syz [ 1478.340381][T18972] usb 7-1: Manufacturer: syz [ 1478.340388][T18972] usb 7-1: SerialNumber: syz [ 1478.399541][T18972] usb 7-1: config 0 descriptor?? [ 1478.400457][T20038] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1478.613097][ T10] usb 7-1: USB disconnect, device number 29 [ 1478.713254][T19833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.713266][T19833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.713281][T19833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.851692][T19835] team0: Port device team_slave_0 added [ 1480.580199][T20048] new mount options do not match the existing superblock, will be ignored [ 1481.254966][ T37] audit: type=1800 audit(1764926161.204:40): pid=20048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4271" name="SYSV00000000" dev="tmpfs" ino=9 res=0 errno=0 [ 1481.454854][T19833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.454867][T19833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.454882][T19833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1481.455958][T19895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.455967][T19895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.455981][T19895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.465870][T19835] team0: Port device team_slave_1 added [ 1481.633321][T19895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.633339][T19895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1481.633363][T19895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.450956][T19835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.450975][T19835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.451000][T19835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.583205][T19835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.583225][T19835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.583252][T19835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.794172][T19833] hsr_slave_0: entered promiscuous mode [ 1484.807686][T19833] hsr_slave_1: entered promiscuous mode [ 1484.809116][T19833] debugfs: 'hsr0' already exists in 'hsr' [ 1484.809142][T19833] Cannot create hsr debugfs directory [ 1484.933455][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.933508][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.193770][T19895] hsr_slave_0: entered promiscuous mode [ 1485.195629][T19895] hsr_slave_1: entered promiscuous mode [ 1485.200905][T19895] debugfs: 'hsr0' already exists in 'hsr' [ 1485.200931][T19895] Cannot create hsr debugfs directory [ 1487.845063][T19835] hsr_slave_0: entered promiscuous mode [ 1487.853129][T19835] hsr_slave_1: entered promiscuous mode [ 1487.854398][T19835] debugfs: 'hsr0' already exists in 'hsr' [ 1487.854424][T19835] Cannot create hsr debugfs directory [ 1490.495699][ T5871] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1490.656405][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 1490.667083][ T5871] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1490.667108][ T5871] usb 3-1: config 0 has no interface number 0 [ 1490.696611][ T5871] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1490.696640][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.696658][ T5871] usb 3-1: Product: syz [ 1490.696670][ T5871] usb 3-1: Manufacturer: syz [ 1490.696682][ T5871] usb 3-1: SerialNumber: syz [ 1490.720623][ T5871] usb 3-1: config 0 descriptor?? [ 1490.750098][ T5871] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1492.740195][ T5871] gspca_spca1528: reg_w err -110 [ 1492.740288][ T5871] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 1493.906342][ T5899] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1494.086258][ T5899] usb 7-1: Using ep0 maxpacket: 32 [ 1494.095409][ T5899] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1494.095437][ T5899] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1494.095451][ T5899] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.098153][ T5899] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1494.098181][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1494.098200][ T5899] usb 7-1: Product: syz [ 1494.098213][ T5899] usb 7-1: Manufacturer: syz [ 1494.098221][ T5899] usb 7-1: SerialNumber: syz [ 1494.174799][ T5899] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input54 [ 1494.369699][ T5892] usb 3-1: USB disconnect, device number 13 [ 1494.963325][ T6735] usb 7-1: USB disconnect, device number 30 [ 1494.963484][ C1] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1495.058798][ T6735] appletouch 7-1:1.0: input: appletouch disconnected [ 1499.533679][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1499.550111][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1499.551730][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1499.555570][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1499.557020][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1499.658603][T14765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1499.663964][T14765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1499.694122][T14765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1499.715825][T14765] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1499.724872][T14765] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1500.181402][T20219] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1501.414631][ T159] bridge_slave_1: left allmulticast mode [ 1501.414661][ T159] bridge_slave_1: left promiscuous mode [ 1501.414925][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.517877][ T159] bridge_slave_0: left allmulticast mode [ 1501.517908][ T159] bridge_slave_0: left promiscuous mode [ 1501.518185][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.584867][ T159] bridge_slave_1: left allmulticast mode [ 1501.584888][ T159] bridge_slave_1: left promiscuous mode [ 1501.585051][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.647200][T14765] Bluetooth: hci1: command tx timeout [ 1501.811760][T14765] Bluetooth: hci2: command tx timeout [ 1501.821356][ T159] bridge_slave_0: left allmulticast mode [ 1501.821383][ T159] bridge_slave_0: left promiscuous mode [ 1501.821618][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.941362][ T159] bridge_slave_1: left allmulticast mode [ 1501.941393][ T159] bridge_slave_1: left promiscuous mode [ 1501.941649][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.157941][ T159] bridge_slave_0: left allmulticast mode [ 1502.157971][ T159] bridge_slave_0: left promiscuous mode [ 1502.158293][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.229014][ T159] bridge_slave_1: left allmulticast mode [ 1502.229035][ T159] bridge_slave_1: left promiscuous mode [ 1502.229193][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.297153][ T159] bridge_slave_0: left allmulticast mode [ 1502.297244][ T159] bridge_slave_0: left promiscuous mode [ 1502.297430][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.728374][T14765] Bluetooth: hci1: command tx timeout [ 1503.896337][T14765] Bluetooth: hci2: command tx timeout [ 1505.126976][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1505.278211][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1505.987705][T14765] Bluetooth: hci1: command tx timeout [ 1505.987950][T14765] Bluetooth: hci2: command tx timeout [ 1506.602012][ T159] bond0 (unregistering): Released all slaves [ 1507.457041][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1507.536861][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1507.788461][ T159] bond0 (unregistering): Released all slaves [ 1508.057286][T14765] Bluetooth: hci1: command tx timeout [ 1508.057320][ T5818] Bluetooth: hci2: command tx timeout [ 1508.078932][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.146888][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.188533][ T159] bond0 (unregistering): Released all slaves [ 1509.971378][T20277] CIFS: Unable to determine destination address [ 1513.424936][T14765] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1513.459414][T14765] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1513.658646][T14765] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1514.104843][T14765] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1514.105817][T14765] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1514.676354][ T6621] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1514.890516][ T6621] usb 3-1: Using ep0 maxpacket: 8 [ 1514.892570][ T6621] usb 3-1: config 0 has no interfaces? [ 1514.892604][ T6621] usb 3-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 1514.892626][ T6621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.896857][ T6621] usb 3-1: config 0 descriptor?? [ 1515.205846][ T10] usb 3-1: USB disconnect, device number 14 [ 1516.173724][T14765] Bluetooth: hci6: command tx timeout [ 1516.725777][T20313] CIFS: Unable to determine destination address [ 1517.797014][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.878388][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.935671][ T159] bond0 (unregistering): Released all slaves [ 1518.226617][T14765] Bluetooth: hci6: command tx timeout [ 1519.270153][T20201] chnl_net:caif_netlink_parms(): no params data found [ 1519.532008][T20205] chnl_net:caif_netlink_parms(): no params data found [ 1520.175603][T20321] ufs: You didn't specify the type of your ufs filesystem [ 1520.175603][T20321] [ 1520.175603][T20321] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1520.175603][T20321] [ 1520.175603][T20321] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1520.175899][T20321] ufs: ufstype=old is supported read-only [ 1520.426744][T14765] Bluetooth: hci6: command tx timeout [ 1520.499210][ T159] hsr_slave_0: left promiscuous mode [ 1520.606358][ T159] hsr_slave_1: left promiscuous mode [ 1520.607013][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1520.775668][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1520.847459][ T159] hsr_slave_0: left promiscuous mode [ 1520.879460][ T159] hsr_slave_1: left promiscuous mode [ 1520.882508][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1520.917270][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1521.156377][ T159] hsr_slave_0: left promiscuous mode [ 1522.075367][ T159] hsr_slave_1: left promiscuous mode [ 1522.076573][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.237266][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.456503][T14765] Bluetooth: hci6: command tx timeout [ 1522.477388][ T159] hsr_slave_0: left promiscuous mode [ 1522.676460][ T5871] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1522.679377][ T159] hsr_slave_1: left promiscuous mode [ 1522.680049][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.736969][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.845637][ T5871] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1522.847435][ T5871] usb 3-1: not running at top speed; connect to a high speed hub [ 1522.851099][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.851122][ T5871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 16 [ 1522.854157][ T5871] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1522.854184][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.854202][ T5871] usb 3-1: Product: syz [ 1522.854215][ T5871] usb 3-1: Manufacturer: syz [ 1522.854228][ T5871] usb 3-1: SerialNumber: syz [ 1523.454516][ T5892] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1523.646241][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 1523.704638][ T5892] usb 7-1: config 0 has no interfaces? [ 1523.704675][ T5892] usb 7-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 1523.704698][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.735928][ T5892] usb 7-1: config 0 descriptor?? [ 1523.767155][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1523.916873][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1523.981609][ T6521] usb 7-1: USB disconnect, device number 31 [ 1525.491456][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1525.707122][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1526.016827][T20347] CIFS: Unable to determine destination address [ 1527.717745][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1527.918061][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1528.055644][ T5871] usb 3-1: 0:2 : does not exist [ 1528.955669][ T37] audit: type=1800 audit(1764926209.544:41): pid=20349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.4329" name="file1" dev="tmpfs" ino=1508 res=0 errno=0 [ 1529.349776][ T159] team0 (unregistering): Port device team_slave_1 removed [ 1529.547389][ T159] team0 (unregistering): Port device team_slave_0 removed [ 1530.629581][ T5892] usb 3-1: USB disconnect, device number 15 [ 1532.847374][ T5892] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1532.996289][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 1532.998931][ T5892] usb 7-1: config 0 has no interfaces? [ 1532.998965][ T5892] usb 7-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 1532.998987][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.059993][ T5892] usb 7-1: config 0 descriptor?? [ 1533.264630][ T5871] usb 7-1: USB disconnect, device number 32 [ 1533.611673][T20201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.612365][T20201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.612624][T20201] bridge_slave_0: entered allmulticast mode [ 1533.614467][T20201] bridge_slave_0: entered promiscuous mode [ 1533.758408][T20201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.758535][T20201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.758991][T20201] bridge_slave_1: entered allmulticast mode [ 1533.761201][T20201] bridge_slave_1: entered promiscuous mode [ 1533.926992][T20205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.927124][T20205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.927429][T20205] bridge_slave_0: entered allmulticast mode [ 1533.977819][T20205] bridge_slave_0: entered promiscuous mode [ 1534.110743][T20205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.110862][T20205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.111049][T20205] bridge_slave_1: entered allmulticast mode [ 1534.112596][T20205] bridge_slave_1: entered promiscuous mode [ 1534.166291][ T6735] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1534.458132][ T6735] usb 7-1: config 0 has no interfaces? [ 1534.461827][ T6735] usb 7-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1534.461847][ T6735] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.461858][ T6735] usb 7-1: Product: syz [ 1534.461865][ T6735] usb 7-1: Manufacturer: syz [ 1534.461872][ T6735] usb 7-1: SerialNumber: syz [ 1534.466271][ T6735] usb 7-1: config 0 descriptor?? [ 1534.595203][T20398] CIFS: Unable to determine destination address [ 1535.603998][T20201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.815464][T20201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.867745][T20205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.990410][T20205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1536.075554][ T5904] usb 7-1: USB disconnect, device number 33 [ 1536.455532][T20201] team0: Port device team_slave_0 added [ 1536.651408][T20201] team0: Port device team_slave_1 added [ 1536.670428][T20205] team0: Port device team_slave_0 added [ 1536.950341][T20205] team0: Port device team_slave_1 added [ 1537.020100][ T5892] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1537.229039][ T5892] usb 7-1: Using ep0 maxpacket: 32 [ 1537.231138][ T5892] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1537.231171][ T5892] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1537.231186][ T5892] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1537.233722][ T5892] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1537.233748][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1537.233775][ T5892] usb 7-1: Product: syz [ 1537.233789][ T5892] usb 7-1: Manufacturer: syz [ 1537.233799][ T5892] usb 7-1: SerialNumber: syz [ 1537.377312][ T5892] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input55 [ 1537.465467][ T37] audit: type=1326 audit(1764926218.054:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20407 comm="syz.2.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ff5cf749 code=0x7ffc0000 [ 1537.526680][ T37] audit: type=1326 audit(1764926218.084:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20407 comm="syz.2.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7ff5cf749 code=0x7ffc0000 [ 1537.526736][ T37] audit: type=1326 audit(1764926218.084:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20407 comm="syz.2.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ff5cf749 code=0x7ffc0000 [ 1537.526825][ T37] audit: type=1326 audit(1764926218.084:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20407 comm="syz.2.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ff5cf749 code=0x7ffc0000 [ 1537.526865][ T37] audit: type=1326 audit(1764926218.084:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20407 comm="syz.2.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7ff5cf749 code=0x7ffc0000 [ 1537.526904][ T37] audit: type=1326 audit(1764926218.094:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20407 comm="syz.2.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ff5cf749 code=0x7ffc0000 [ 1537.526989][ T37] audit: type=1326 audit(1764926218.094:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20407 comm="syz.2.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7ff5cf749 code=0x7ffc0000 [ 1537.527034][ T37] audit: type=1326 audit(1764926218.124:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20407 comm="syz.2.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ff5cf749 code=0x7ffc0000 [ 1537.533921][ T37] audit: type=1326 audit(1764926218.124:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20407 comm="syz.2.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ff5cf749 code=0x7ffc0000 [ 1537.533970][ T37] audit: type=1326 audit(1764926218.124:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20407 comm="syz.2.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe7ff5cf749 code=0x7ffc0000 [ 1538.050796][ T9749] usb 7-1: USB disconnect, device number 34 [ 1538.050891][ C0] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1538.299517][ T9749] appletouch 7-1:1.0: input: appletouch disconnected [ 1538.478129][T20201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.478142][T20201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.478157][T20201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.710349][T20201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.710362][T20201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.710377][T20201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1538.713100][T20205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.713110][T20205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.713175][T20205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.713881][T20293] chnl_net:caif_netlink_parms(): no params data found [ 1538.801409][T20414] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1538.855734][T20205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.855751][T20205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.855776][T20205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.225318][T20419] overlayfs: missing 'lowerdir' [ 1539.739876][T20425] CIFS: Unable to determine destination address [ 1540.810510][T20201] hsr_slave_0: entered promiscuous mode [ 1540.824496][T20201] hsr_slave_1: entered promiscuous mode [ 1540.834881][T20201] debugfs: 'hsr0' already exists in 'hsr' [ 1540.834911][T20201] Cannot create hsr debugfs directory [ 1541.061471][T20205] hsr_slave_0: entered promiscuous mode [ 1541.062576][T20205] hsr_slave_1: entered promiscuous mode [ 1541.063233][T20205] debugfs: 'hsr0' already exists in 'hsr' [ 1541.063257][T20205] Cannot create hsr debugfs directory [ 1541.618697][T20293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.619566][T20293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.619739][T20293] bridge_slave_0: entered allmulticast mode [ 1541.622390][T20293] bridge_slave_0: entered promiscuous mode [ 1542.014227][T20293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.014336][T20293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.014483][T20293] bridge_slave_1: entered allmulticast mode [ 1542.021841][T20293] bridge_slave_1: entered promiscuous mode [ 1542.176328][ T9749] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1542.314611][T20293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.326295][ T9749] usb 7-1: Using ep0 maxpacket: 32 [ 1542.328445][ T9749] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1542.328478][ T9749] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1542.328502][ T9749] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1542.331474][ T9749] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1542.331502][ T9749] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1542.331521][ T9749] usb 7-1: Product: syz [ 1542.331534][ T9749] usb 7-1: Manufacturer: syz [ 1542.331548][ T9749] usb 7-1: SerialNumber: syz [ 1542.363570][ T9749] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input56 [ 1542.482162][T20293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.641965][T10970] usb 7-1: USB disconnect, device number 35 [ 1542.967864][T10970] appletouch 7-1:1.0: input: appletouch disconnected [ 1544.351182][T20447] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1544.373019][T20446] overlayfs: missing 'lowerdir' [ 1544.380346][T20293] team0: Port device team_slave_0 added [ 1545.639301][T20293] team0: Port device team_slave_1 added [ 1546.195689][T20465] CIFS: Unable to determine destination address [ 1547.009613][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.009695][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.415105][T20469] new mount options do not match the existing superblock, will be ignored [ 1547.557067][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1547.557109][ T37] audit: type=1800 audit(1764926228.064:54): pid=20469 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.4358" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1548.310215][T20293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.310234][T20293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1548.310260][T20293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.428309][T20293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.428325][T20293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1548.428347][T20293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.447194][T20293] hsr_slave_0: entered promiscuous mode [ 1549.553317][T20293] hsr_slave_1: entered promiscuous mode [ 1549.590062][T20293] debugfs: 'hsr0' already exists in 'hsr' [ 1549.591628][T20293] Cannot create hsr debugfs directory [ 1550.194290][T20477] overlayfs: missing 'lowerdir' [ 1550.703304][T20201] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1551.290707][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1551.290990][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1551.296300][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1551.309210][T20485] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1551.325572][T20485] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1551.913460][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1551.986937][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1552.077823][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1552.080354][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1552.081889][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1552.083706][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1552.085493][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1552.087896][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1552.090734][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1552.093594][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1552.095313][T20485] wlan0 speed is unknown, defaulting to 1000 [ 1552.126538][T20201] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1552.286464][ T6735] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1552.290412][T20201] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1552.345586][T20201] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1552.436286][ T6735] usb 3-1: Using ep0 maxpacket: 8 [ 1552.438362][ T6735] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1552.438418][ T6735] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1552.438439][ T6735] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1552.438461][ T6735] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1552.438482][ T6735] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1552.438521][ T6735] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1552.438541][ T6735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.765790][ T6735] usb 3-1: usb_control_msg returned -32 [ 1552.765840][ T6735] usbtmc 3-1:16.0: can't read capabilities [ 1552.990951][T20506] CIFS: Unable to determine destination address [ 1553.861688][T20507] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1553.900016][ T5892] usb 3-1: USB disconnect, device number 16 [ 1554.125925][ T159] bridge_slave_1: left allmulticast mode [ 1554.125947][ T159] bridge_slave_1: left promiscuous mode [ 1554.126560][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.177159][ T159] bridge_slave_0: left allmulticast mode [ 1554.177179][ T159] bridge_slave_0: left promiscuous mode [ 1554.182525][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.239943][ T159] bridge_slave_1: left allmulticast mode [ 1554.239971][ T159] bridge_slave_1: left promiscuous mode [ 1554.240138][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.297451][ T159] bridge_slave_0: left allmulticast mode [ 1554.297472][ T159] bridge_slave_0: left promiscuous mode [ 1554.297636][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.358988][ T159] bridge_slave_1: left allmulticast mode [ 1554.359008][ T159] bridge_slave_1: left promiscuous mode [ 1554.362846][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.447433][ T159] bridge_slave_0: left allmulticast mode [ 1554.447454][ T159] bridge_slave_0: left promiscuous mode [ 1554.447618][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.072042][T20516] overlayfs: missing 'lowerdir' [ 1556.107742][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.167129][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.210624][ T159] bond0 (unregistering): Released all slaves [ 1556.466893][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.547656][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.610600][ T159] bond0 (unregistering): Released all slaves [ 1556.826969][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.907010][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.948349][ T159] bond0 (unregistering): Released all slaves [ 1558.334692][T20537] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1558.680523][ T159] hsr_slave_0: left promiscuous mode [ 1558.716342][ T159] hsr_slave_1: left promiscuous mode [ 1558.717397][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.751725][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.890692][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1558.895280][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1559.043015][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1559.048476][T19469] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1559.064899][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1559.074669][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1559.083616][T19469] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1559.085909][ T159] hsr_slave_0: left promiscuous mode [ 1559.128979][T19469] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1559.140209][T19469] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1559.141148][T19469] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1559.180030][ T159] hsr_slave_1: left promiscuous mode [ 1559.180981][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1559.239319][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1559.313939][T20548] ------------[ cut here ]------------ [ 1559.313953][T20548] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 1559.313998][T20548] WARNING: kernel/bpf/verifier.c:2748 at 0x0, CPU#1: syz.2.4377/20548 [ 1559.314028][T20548] Modules linked in: [ 1559.314051][T20548] CPU: 1 UID: 0 PID: 20548 Comm: syz.2.4377 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1559.314076][T20548] Tainted: [L]=SOFTLOCKUP [ 1559.314084][T20548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1559.314096][T20548] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 1559.314125][T20548] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 1559.314142][T20548] RSP: 0018:ffffc90004c2eed0 EFLAGS: 00010246 [ 1559.314159][T20548] RAX: dffffc0000000000 RBX: 1ffff11006f6f858 RCX: 0000000004000000 [ 1559.314174][T20548] RDX: ffffffff8af1cb80 RSI: ffffffff8af253c0 RDI: ffffffff8eddf6d0 [ 1559.314190][T20548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000004000000 [ 1559.314202][T20548] R10: 0000000000000100 R11: 00000000000000d0 R12: ffff888037b7c2c0 [ 1559.314216][T20548] R13: 0000000004000000 R14: 1ffff11006f6f857 R15: 0000000000000000 [ 1559.314229][T20548] FS: 00007fe7fd8366c0(0000) GS:ffff888126e5e000(0000) knlGS:0000000000000000 [ 1559.314246][T20548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1559.314259][T20548] CR2: 00007fe7fd835f98 CR3: 000000004b526000 CR4: 00000000003526f0 [ 1559.314277][T20548] Call Trace: [ 1559.314286][T20548] [ 1559.314325][T20548] reg_set_min_max+0x2b4/0x340 [ 1559.314358][T20548] check_cond_jmp_op+0x19c6/0x2e20 [ 1559.314400][T20548] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1559.314429][T20548] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 1559.314458][T20548] do_check+0x58f5/0xeba0 [ 1559.314479][T20548] ? __pfx_stack_trace_save+0x10/0x10 [ 1559.314573][T20548] ? __pfx_do_check+0x10/0x10 [ 1559.314593][T20548] ? init_func_state+0x1ab2/0x28d0 [ 1559.314624][T20548] do_check_common+0x19cc/0x25b0 [ 1559.314661][T20548] bpf_check+0x5e87/0x1c300 [ 1559.314701][T20548] ? __lock_acquire+0x6b6/0x2cf0 [ 1559.314728][T20548] ? __lock_acquire+0x6b6/0x2cf0 [ 1559.314763][T20548] ? __lock_acquire+0x6b6/0x2cf0 [ 1559.314798][T20548] ? __lock_acquire+0x6b6/0x2cf0 [ 1559.314825][T20548] ? css_rstat_updated+0x23a/0x4f0 [ 1559.314849][T20548] ? __lock_acquire+0x6b6/0x2cf0 [ 1559.314875][T20548] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1559.314915][T20548] ? __pfx_bpf_check+0x10/0x10 [ 1559.314944][T20548] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 1559.314967][T20548] ? lockdep_hardirqs_on+0x98/0x140 [ 1559.314993][T20548] ? ktime_get_with_offset+0x93/0x2a0 [ 1559.315013][T20548] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 1559.315035][T20548] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1559.315067][T20548] ? __asan_memset+0x22/0x50 [ 1559.315088][T20548] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1559.315104][T20548] ? security_bpf_prog_load+0x125/0x3f0 [ 1559.315132][T20548] bpf_prog_load+0x13ba/0x1a10 [ 1559.315165][T20548] ? __pfx_bpf_prog_load+0x10/0x10 [ 1559.315208][T20548] ? bpf_lsm_bpf+0x9/0x20 [ 1559.315231][T20548] ? security_bpf+0x7e/0x300 [ 1559.315257][T20548] __sys_bpf+0x507/0x860 [ 1559.315279][T20548] ? __pfx___sys_bpf+0x10/0x10 [ 1559.315317][T20548] ? __pfx___se_sys_futex+0x10/0x10 [ 1559.315350][T20548] __x64_sys_bpf+0x7c/0x90 [ 1559.315369][T20548] do_syscall_64+0xfa/0xf80 [ 1559.315393][T20548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.315413][T20548] ? clear_bhb_loop+0x60/0xb0 [ 1559.315435][T20548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.315453][T20548] RIP: 0033:0x7fe7ff5cf749 [ 1559.315471][T20548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1559.315487][T20548] RSP: 002b:00007fe7fd836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1559.315506][T20548] RAX: ffffffffffffffda RBX: 00007fe7ff825fa0 RCX: 00007fe7ff5cf749 [ 1559.315527][T20548] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1559.315540][T20548] RBP: 00007fe7ff653f91 R08: 0000000000000000 R09: 0000000000000000 [ 1559.315554][T20548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.315567][T20548] R13: 00007fe7ff826038 R14: 00007fe7ff825fa0 R15: 00007fffcf29b2b8 [ 1559.315600][T20548] [ 1559.315622][T20548] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1559.315640][T20548] CPU: 1 UID: 0 PID: 20548 Comm: syz.2.4377 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1559.315667][T20548] Tainted: [L]=SOFTLOCKUP [ 1559.315674][T20548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1559.315686][T20548] Call Trace: [ 1559.315694][T20548] [ 1559.315702][T20548] dump_stack_lvl+0x99/0x250 [ 1559.315728][T20548] ? __asan_memcpy+0x40/0x70 [ 1559.315747][T20548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1559.315770][T20548] ? __pfx__printk+0x10/0x10 [ 1559.315801][T20548] vpanic+0x237/0x6d0 [ 1559.315824][T20548] ? __pfx_vpanic+0x10/0x10 [ 1559.315845][T20548] ? is_bpf_text_address+0x292/0x2b0 [ 1559.315867][T20548] ? is_bpf_text_address+0x26/0x2b0 [ 1559.315897][T20548] panic+0xb9/0xc0 [ 1559.315919][T20548] ? __pfx_panic+0x10/0x10 [ 1559.315957][T20548] __warn+0x317/0x4b0 [ 1559.315987][T20548] __report_bug+0x288/0x500 [ 1559.316019][T20548] ? __pfx___report_bug+0x10/0x10 [ 1559.316047][T20548] ? check_cond_jmp_op+0x1840/0x2e20 [ 1559.316069][T20548] ? do_check+0x58f5/0xeba0 [ 1559.316090][T20548] ? do_check_common+0x19cc/0x25b0 [ 1559.316106][T20548] ? bpf_check+0x5e87/0x1c300 [ 1559.316128][T20548] ? bpf_prog_load+0x13ba/0x1a10 [ 1559.316144][T20548] ? __sys_bpf+0x507/0x860 [ 1559.316158][T20548] ? __x64_sys_bpf+0x7c/0x90 [ 1559.316171][T20548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.316193][T20548] report_bug_entry+0x16a/0x220 [ 1559.316216][T20548] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 1559.316238][T20548] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 1559.316259][T20548] handle_bug+0xca/0x200 [ 1559.316278][T20548] exc_invalid_op+0x1a/0x50 [ 1559.316295][T20548] asm_exc_invalid_op+0x1a/0x20 [ 1559.316313][T20548] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 1559.316335][T20548] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 1559.316351][T20548] RSP: 0018:ffffc90004c2eed0 EFLAGS: 00010246 [ 1559.316368][T20548] RAX: dffffc0000000000 RBX: 1ffff11006f6f858 RCX: 0000000004000000 [ 1559.316382][T20548] RDX: ffffffff8af1cb80 RSI: ffffffff8af253c0 RDI: ffffffff8eddf6d0 [ 1559.316396][T20548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000004000000 [ 1559.316409][T20548] R10: 0000000000000100 R11: 00000000000000d0 R12: ffff888037b7c2c0 [ 1559.316422][T20548] R13: 0000000004000000 R14: 1ffff11006f6f857 R15: 0000000000000000 [ 1559.316482][T20548] reg_set_min_max+0x2b4/0x340 [ 1559.316514][T20548] check_cond_jmp_op+0x19c6/0x2e20 [ 1559.316563][T20548] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1559.316593][T20548] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 1559.316624][T20548] do_check+0x58f5/0xeba0 [ 1559.316646][T20548] ? __pfx_stack_trace_save+0x10/0x10 [ 1559.316729][T20548] ? __pfx_do_check+0x10/0x10 [ 1559.316749][T20548] ? init_func_state+0x1ab2/0x28d0 [ 1559.316780][T20548] do_check_common+0x19cc/0x25b0 [ 1559.316818][T20548] bpf_check+0x5e87/0x1c300 [ 1559.316856][T20548] ? __lock_acquire+0x6b6/0x2cf0 [ 1559.316883][T20548] ? __lock_acquire+0x6b6/0x2cf0 [ 1559.316918][T20548] ? __lock_acquire+0x6b6/0x2cf0 [ 1559.316955][T20548] ? __lock_acquire+0x6b6/0x2cf0 [ 1559.316983][T20548] ? css_rstat_updated+0x23a/0x4f0 [ 1559.317009][T20548] ? __lock_acquire+0x6b6/0x2cf0 [ 1559.317035][T20548] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1559.317073][T20548] ? __pfx_bpf_check+0x10/0x10 [ 1559.317102][T20548] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 1559.317124][T20548] ? lockdep_hardirqs_on+0x98/0x140 [ 1559.317149][T20548] ? ktime_get_with_offset+0x93/0x2a0 [ 1559.317169][T20548] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 1559.317191][T20548] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1559.317224][T20548] ? __asan_memset+0x22/0x50 [ 1559.317244][T20548] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1559.317260][T20548] ? security_bpf_prog_load+0x125/0x3f0 [ 1559.317288][T20548] bpf_prog_load+0x13ba/0x1a10 [ 1559.317321][T20548] ? __pfx_bpf_prog_load+0x10/0x10 [ 1559.317363][T20548] ? bpf_lsm_bpf+0x9/0x20 [ 1559.317385][T20548] ? security_bpf+0x7e/0x300 [ 1559.317410][T20548] __sys_bpf+0x507/0x860 [ 1559.317432][T20548] ? __pfx___sys_bpf+0x10/0x10 [ 1559.317470][T20548] ? __pfx___se_sys_futex+0x10/0x10 [ 1559.317504][T20548] __x64_sys_bpf+0x7c/0x90 [ 1559.317528][T20548] do_syscall_64+0xfa/0xf80 [ 1559.317555][T20548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.317574][T20548] ? clear_bhb_loop+0x60/0xb0 [ 1559.317597][T20548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.317614][T20548] RIP: 0033:0x7fe7ff5cf749 [ 1559.317631][T20548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1559.317648][T20548] RSP: 002b:00007fe7fd836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1559.317668][T20548] RAX: ffffffffffffffda RBX: 00007fe7ff825fa0 RCX: 00007fe7ff5cf749 [ 1559.317683][T20548] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1559.317696][T20548] RBP: 00007fe7ff653f91 R08: 0000000000000000 R09: 0000000000000000 [ 1559.317709][T20548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.317721][T20548] R13: 00007fe7ff826038 R14: 00007fe7ff825fa0 R15: 00007fffcf29b2b8 [ 1559.317753][T20548] [ 1559.318152][T20548] Kernel Offset: disabled