last executing test programs: 20.161819483s ago: executing program 1 (id=1557): socket$inet(0x2, 0x1, 0x0) syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 18.29854607s ago: executing program 1 (id=1563): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x21, &(0x7f0000000100)={0x0, 0x3, 0x0, {[0x89]}}, 0x0, 0x8, &(0x7f0000000600)) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000200)=@other={'decodes', ' ', 'io+mem'}, 0xf) dup(r5) write$vga_arbiter(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="6c03c555fe76984e92"], 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 16.929676377s ago: executing program 0 (id=1568): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) 15.908004016s ago: executing program 5 (id=1570): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 13.660469616s ago: executing program 1 (id=1576): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 13.460279374s ago: executing program 5 (id=1577): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, "89"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x20000) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000080)=0x3) pselect6(0x40, &(0x7f0000000000)={0x10}, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 13.250090036s ago: executing program 1 (id=1578): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12.314273559s ago: executing program 0 (id=1581): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x0) 11.904341291s ago: executing program 1 (id=1583): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) socket$kcm(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0xc0044dff, &(0x7f0000004000)) r5 = fcntl$dupfd(r3, 0x0, r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f60e3418410fe17f95bdb8090c4adb3636ea342fb8589cf4944e42579da1d2aa919fa78d9e27565fc30d2513293f3cc7d6c7d2d1fb756b0d7b352efd07bd38bedcabb8d856610db17155de5bb0409e3713b2c73464055345b98fe30949e7ee8cddc663f3d5d50881520df8da5115d6d8d81bc62e8dde2460f128365ca184efc5e1b14ff3f4ad1c1f7bad98a9435c0d757ddb9dcd577f5ae33ef675676ba7b44be538aeec0e6ec4973865dc2bb0f0847ded0a131f3b01ac48e070783564cd9031b3b9fcbeafb69dd253e8cbc2c12307f03154573a27f6f00073aae7c4c1701a3f745744c254ddd3b43988c7bbdec9c1e158fda3cdffc887206b78fb1fc943810dc473894738286878513d06aa7f074a11983261f5be648b4b76893a5f733bdafcf42427743534de2bfcf27f014923488c6476dd417344045c747c68c69e3eb5357e69d97a2cfafa44e2547aa21548dfc0739e49321684120c8bdb64448689a3412eebaca2e4b2a2ecf96690f9fec7d569087bc8561cff6012cf5cb14775230226b95a9ded9cccfedafe61c550376adf0b1b59abf9f92da6247e1061afe2eaa9d8f5a28d63db50fca875020da59426501eab6602beb74de33df143ccb60c70f950f5f53f1d5aca6371dfc8dd68cbe7ccfbe0f52e1ff238105dd93d8a3a72da45ce79824d6b091d9c91509cb290afd01f1945b118f2c1c58f17c0b59fbd872412d7d291dcecad019af039375aeee7ddcf36ede82914f64bb41281962c9b10216907c37d06aa5a5b33afe0547c6726ee169779ad6d5cfc5f373f75b234df4ac2007c6db9dc6a0fc3e7e1d2f2658e928c2a854483e6780d69908692d0166ab5334cd5ceb7a69a420803b7ca33e4609f61cfda3b631b54fb81a7473b4bbe2eabc17276f8a009668d634f332fe47fda76a1fae8fe9c3c8962f7ca7a102d5ecd1d6029abb6c422026af6ef277a4c6c21f07121cd8bcce6f1792ea6a628580b478d72b32dd50f59e893bfcf353bea1e2ddbd349c16ccc23bceb8f3b64aa16257eedabadaead30f912bd0e579c0b71e6cd86804fc39a074f94da63f0db97c5f41e38541bf441f49d2751966cc78dacd150ae0b91ffe1f5a117fe494a8b60a17ccfbc780f82f0ea96d8db842e07fb4d68edbe28119a6c2ab72ea15a5ba75ac8193dd7411d9aeece6fc23ac00370c84d7e03990ca3697a0187cc3286e4536ace023ec21389ff08cddb1e9075d1e1b3a98a95720f44e50830ad54fecd437a40f483579c7a5eb40e52e75099d9ada449ba4d0751e44de6edd5e17caa91cfb3bf88bb1e093bd76952c80669845d3cbcde8acf7415ed30ad3a0ff648968d036af2de90f2ab93b250b9386fcba42c1ba01cc951fa1f62ebbb99ad6576d803d29e81ed319350ee0a032bfab9b079ea5a29c66f665ce9ccb6b908593ae2406332c5ac7d11c9b830593576177b2af5d70c65dda56b98448862b75a54b3447534d45e0b5a52edc1a76c97f511030bd261bb1a443e1a38a78973f0781efa9910ebe207457587dbc803e68b2cb985c03c4dfbac440d58c90de66a634c07b13197b9e7d42657fb0537abe475fb56fe24cdcd771d9ac5bcea1c915a77d731d2d16a54885387e034aab6db1718521eeb07b0326d23decd5bba45b311d8617bbfd3afc10923567e8987c95260ab90ba3ff1309273a2a615174d9a33c11bfd393013c314d3df8cf4e584b752c30f54e09a38409a34cdaee74f30547b7dfdb3c48d6b4d5b7346ebcaf7fdbb91d9d45ba303e2ea2736f28301c7b8354bc6f89f58841cb844646a57153c83cd03687d8d3a6b95e93f8abd1218af123ada0de5025d18e4599c8d34cdd8ecf91af7a647c6b43d4704446a104829783ec10b68d95418ddfe8b0dc6552069bd07e4452821317131b7a76887fd792c431e6c07d770926c4e60243d198372482b911d29daac57d92f12d7f471657107a8a910d9abd67", 0x5b4, 0xfffffffffffffffb) keyctl$update(0x2, r6, &(0x7f0000000000)="11868a0fceae284c0000000100000010", 0x10) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000002c0)={0x5, 0x8000, 0x8, 0x1}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x100, 0x8, 0x36b}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) 11.64611069s ago: executing program 0 (id=1584): pipe2(0x0, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0xffffffffffffff0f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) r5 = socket$caif_stream(0x25, 0x1, 0x2) recvmmsg(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x101, 0x0) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x15389280, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f0000000000000000000000000000000200000000000"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000003090000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2f, 0x10, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r6, @ANYRES8=r1, @ANYRESHEX=r4, @ANYRESDEC=r3], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 8.178195231s ago: executing program 5 (id=1588): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x21, &(0x7f0000000100)={0x0, 0x3, 0x0, {[0x89]}}, 0x0, 0x8, &(0x7f0000000600)) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000200)=@other={'decodes', ' ', 'io+mem'}, 0xf) dup(r5) write$vga_arbiter(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="6c03c555fe76984e92"], 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.282485023s ago: executing program 3 (id=1590): socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.062260583s ago: executing program 2 (id=1592): socket$vsock_stream(0x28, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.786012172s ago: executing program 2 (id=1593): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) 6.775198496s ago: executing program 4 (id=1594): timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f0000000140)=0x0) timer_settime(r2, 0x0, &(0x7f00000010c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 5.118388943s ago: executing program 4 (id=1595): syz_usb_connect(0x0, 0x784, 0x0, 0x0) 5.093251354s ago: executing program 3 (id=1596): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) r4 = eventfd2(0x58, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r4, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 4.508426858s ago: executing program 3 (id=1597): socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=']) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') 4.424817626s ago: executing program 0 (id=1598): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000016004d0000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001500add427323b472545b4560a117ffff4ff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000df29be7c1169ca4b1124fe94dfa30227dbf6b831475380bb58261919df63e91589a8eab13056276378bfcada16d7ce69f18c9d029dadae9f0e663aac9a5f2d726ceacc60ab40205640d8e468c80f75307b4eaed2fadd811450533a1279d92d4764035697d82575824287dd9bd241215d", 0xbc}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x598, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x4c8, 0x22b, 0x258, 0x4c8, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x34}, {}, {0x2000}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x0, 0xfc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], [], 'team_slave_1\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) 4.226595094s ago: executing program 5 (id=1599): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000b80), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00faffffff4000000000f2000020000000000000", @ANYRES32, @ANYBLOB="00000000000000000100000000f0ffffffffffff", @ANYRES32, @ANYBLOB="0000000000000000010000000080000000000000"]) ioperm(0x284, 0x7f, 0xe3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x198, 0x4) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'ipvlan0\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0xffff, 0x0, [0xecd, 0xfffffffe, 0x3, 0xff, 0x8, 0x2, 0x6]}}) 4.177866751s ago: executing program 1 (id=1600): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x1, "89"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x20000) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000080)=0x3) pselect6(0x40, &(0x7f0000000000)={0x10}, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 3.864914601s ago: executing program 0 (id=1601): ioprio_set$pid(0x1, 0x0, 0x0) 3.863938973s ago: executing program 3 (id=1602): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x989a5ce49c891e3b, 0x0) msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="4eaa39f7efb17d79"], 0x8, 0x0) 3.863630985s ago: executing program 4 (id=1603): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 3.106155835s ago: executing program 0 (id=1604): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cgroup\x00') r1 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_open_dev$loop(0x0, 0xd79, 0x0) r6 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r7, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socket(0x2, 0xa, 0xffff) syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) 3.080586377s ago: executing program 5 (id=1605): socket$vsock_stream(0x28, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.894845507s ago: executing program 4 (id=1606): socket$inet(0x2, 0x1, 0x0) syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 2.872398852s ago: executing program 5 (id=1607): socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x1f, 0x93e8147f690a27dc, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB="000023000001040019001ce1fd00f04496d41ca58b142c6fd93419ea7a0a9b0b224f1884694461a9c18591c58260b61d74c9597a56489a74f581b677eb9ee98ffa780bbc259b98774673c1c28cdf0eee27197b144f77c099870dcb507cb35a9ea163b02884aaf555b4f4c925a62ed833a63d95edbba09246abafeac7cde5d8551e575b6a15f03305ffd7d507186624093a8e0377f8c592b6e3db5a6ee79d2a5e5517", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff0500"/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, r2}, 0x38) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0) 2.598055728s ago: executing program 3 (id=1608): socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.59651577s ago: executing program 4 (id=1609): r0 = socket$inet(0x2, 0x1, 0x0) ioctl(r0, 0xe6, &(0x7f0000000180)) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0f, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @broadcast, @remote}, &(0x7f0000000080)=0xc) sendto$inet(r0, &(0x7f0000000480)="810995c1287bed6a6070a3ab6f3e17822a0628ba34b1d1a004e2d994fab14e741003684ba950cc5a35c34222ebab151da6e16648d4378b8c338f3a415f110100", 0x40, 0x41, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffffffffffffeb, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfd, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xc4}}]}, 0xac}}, 0x20000000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, 0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x20000) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000140)=0x7f, 0x4) 2.432357414s ago: executing program 2 (id=1610): pipe2(0x0, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0xffffffffffffff0f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x2) recvmmsg(r3, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x101, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x15389280, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f0000000000000000000000000000000200000000000"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000003090000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2f, 0x10, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYRES8, @ANYRESHEX=r2, @ANYRESDEC=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 1.894590882s ago: executing program 2 (id=1611): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0xc0846, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x2) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x40a0019) 429.62493ms ago: executing program 2 (id=1612): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 395.21268ms ago: executing program 4 (id=1613): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x10000, 0x1, 0x4000000}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0xa8}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x5e) 723.205µs ago: executing program 2 (id=1614): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000016004d0000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001500add427323b472545b4560a117ffff4ff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000df29be7c1169ca4b1124fe94dfa30227dbf6b831475380bb58261919df63e91589a8eab13056276378bfcada16d7ce69f18c9d029dadae9f0e663aac9a5f2d726ceacc60ab40205640d8e468c80f75307b4eaed2fadd811450533a1279d92d4764035697d82575824287dd9bd241215d", 0xbc}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x598, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x4c8, 0x22b, 0x258, 0x4c8, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x34}, {}, {0x2000}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x0, 0xfc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], [], 'team_slave_1\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) 0s ago: executing program 3 (id=1615): socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=']) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') kernel console output (not intermixed with test programs): :50 [ 97.690689][ T5836] veth0_macvtap: entered promiscuous mode [ 97.787274][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.792080][ T5836] veth1_macvtap: entered promiscuous mode [ 97.814360][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.887985][ T5849] veth1_vlan: entered promiscuous mode [ 97.978714][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.089372][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.189699][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.219400][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.242098][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.288048][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.308519][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.639713][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.656781][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.670196][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.688241][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.743081][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.789000][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.836423][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.857819][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.878946][ T5837] IPVS: starting estimator thread 0... [ 98.885244][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.919692][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.947998][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.979933][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.989945][ T5956] IPVS: using max 23 ests per chain, 55200 per kthread [ 99.037097][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.211446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.518614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.621151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.629944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.973871][ T5895] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.983657][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.012257][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.119108][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.129952][ T5895] usb 2-1: device descriptor read/64, error -71 [ 100.224031][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.440076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.455677][ T5895] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.476392][ T5849] veth0_macvtap: entered promiscuous mode [ 100.514107][ T5849] veth1_macvtap: entered promiscuous mode [ 100.551303][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.571461][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.609990][ T5895] usb 2-1: device descriptor read/64, error -71 [ 100.728365][ T5895] usb usb2-port1: attempt power cycle [ 100.849746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.921629][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.156974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.159854][ T5895] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.244849][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.287950][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.336740][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.346850][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.357333][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.368238][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.378872][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.388786][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.399777][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.412158][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.593616][ T5895] usb 2-1: device not accepting address 4, error -71 [ 101.622321][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.655851][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.349426][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.359985][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.370183][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.380862][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.392744][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.404380][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.415572][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.426046][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.437493][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.594996][ T5849] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.679896][ T5849] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.688915][ T5849] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.840024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 102.905704][ T5849] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.950450][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.970023][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.269944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.630678][ T5999] netlink: 'syz.2.18': attribute type 8 has an invalid length. [ 104.657992][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 104.721056][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.728921][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.772835][ T6024] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.958225][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.014063][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.561138][ T5848] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 109.372156][ T6038] veth0_vlan: entered allmulticast mode [ 109.594374][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.636556][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.396582][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 110.471768][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29'. [ 110.519031][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29'. [ 110.790430][ T5938] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 111.090110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.799634][ T5938] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.846522][ T5938] usb 1-1: config 0 has no interface number 0 [ 111.864246][ T5938] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 111.878413][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.058621][ T5938] usb 1-1: config 0 descriptor?? [ 112.117529][ T5938] usb 1-1: selecting invalid altsetting 1 [ 112.175862][ T5938] dvb_ttusb_budget: ttusb_init_controller: error [ 112.213230][ T5938] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 113.024152][ T5938] DVB: Unable to find symbol cx22700_attach() [ 114.236450][ T5938] DVB: Unable to find symbol tda10046_attach() [ 114.259312][ T5938] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 114.317148][ T5938] usb 1-1: USB disconnect, device number 2 [ 114.397584][ T6069] syz_tun: entered allmulticast mode [ 114.409245][ T6069] lo: entered allmulticast mode [ 116.518605][ T6069] syz_tun: left allmulticast mode [ 116.568389][ T6069] lo: left allmulticast mode [ 116.911917][ T6089] sock: sock_timestamping_bind_phc: sock not bind to device [ 119.474941][ T6107] syz.5.45 uses obsolete (PF_INET,SOCK_PACKET) [ 128.007154][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'. [ 128.291312][ T6169] netlink: 1 bytes leftover after parsing attributes in process `syz.3.63'. [ 134.021210][ T5901] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 134.353083][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.77'. [ 134.542568][ T5901] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.553248][ T5901] usb 6-1: config 0 has no interface number 0 [ 134.570967][ T5938] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.789146][ T5901] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 135.143147][ T5901] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 135.168086][ T5901] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.214609][ T6224] Zero length message leads to an empty skb [ 135.242199][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.276733][ T5901] usb 6-1: config 0 descriptor?? [ 135.690218][ T6198] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 135.816815][ T6228] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.825377][ T6228] IPv6: Can't replace route, no match found [ 137.153872][ T5901] usb 6-1: can't set config #0, error -71 [ 137.182042][ T5901] usb 6-1: USB disconnect, device number 2 [ 137.274938][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.284242][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.377176][ T6240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.710450][ T5938] usb 4-1: device descriptor read/all, error -110 [ 141.099816][ T5938] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.329901][ T5938] usb 4-1: device descriptor read/64, error -32 [ 141.441751][ T5938] usb usb4-port1: attempt power cycle [ 141.751951][ T6261] fuse: Bad value for 'fd' [ 141.909799][ T5938] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 141.973749][ T5938] usb 4-1: device descriptor read/8, error -32 [ 143.120024][ T5938] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.671612][ T5938] usb 4-1: device descriptor read/8, error -32 [ 143.768323][ T6269] sctp: [Deprecated]: syz.5.92 (pid 6269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.768323][ T6269] Use struct sctp_sack_info instead [ 143.784861][ T5938] usb usb4-port1: unable to enumerate USB device [ 144.321204][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.93'. [ 144.562321][ T6279] overlayfs: overlapping lowerdir path [ 145.174449][ T6206] raw-gadget.1 gadget.3: failed to queue disconnect event [ 148.270867][ T6303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.799859][ T30] audit: type=1800 audit(1744559658.382:2): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.102" name="bus" dev="overlay" ino=10 res=0 errno=0 [ 150.199781][ T5908] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.535669][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 150.610924][ T6327] process 'syz.4.108' launched './file2' with NULL argv: empty string added [ 151.270308][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 151.289714][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 151.310022][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 151.403232][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 151.728139][ T5908] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 151.758798][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.809991][ T5908] usb 2-1: Product: syz [ 151.872819][ T5908] usb 2-1: Manufacturer: syz [ 151.936746][ T5908] usb 2-1: SerialNumber: syz [ 152.127816][ T5908] usb 2-1: config 0 descriptor?? [ 152.192245][ T6319] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.270323][ T5908] radioshark 2-1:0.0: Invalid radioSHARK device [ 152.359759][ T5908] radioshark 2-1:0.0: probe with driver radioshark failed with error -22 [ 152.670509][ T5908] usb 2-1: USB disconnect, device number 6 [ 157.780405][ T6359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.805397][ T6366] overlayfs: overlapping lowerdir path [ 157.840552][ T6366] ======================================================= [ 157.840552][ T6366] WARNING: The mand mount option has been deprecated and [ 157.840552][ T6366] and is ignored by this kernel. Remove the mand [ 157.840552][ T6366] option from the mount to silence this warning. [ 157.840552][ T6366] ======================================================= [ 159.139196][ T47] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 159.197627][ T6382] syz.3.123: attempt to access beyond end of device [ 159.197627][ T6382] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 159.210877][ T6382] qnx6: unable to read the first superblock [ 159.217009][ T6382] syz.3.123: attempt to access beyond end of device [ 159.217009][ T6382] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 159.230811][ T6382] qnx6: unable to read the first superblock [ 159.236716][ T6382] qnx6: unable to read the first superblock [ 159.345709][ T47] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 159.379404][ T47] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 159.464184][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.979026][ T47] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 160.287356][ T6390] tipc: Can't bind to reserved service type 0 [ 161.158586][ T5938] usb 6-1: USB disconnect, device number 3 [ 161.406371][ T6397] netlink: 1 bytes leftover after parsing attributes in process `syz.0.130'. [ 163.973210][ T6417] Dead loop on virtual device ip6_vti0, fix it urgently! [ 164.013971][ T6417] Dead loop on virtual device ip6_vti0, fix it urgently! [ 164.083460][ T6417] Dead loop on virtual device ip6_vti0, fix it urgently! [ 164.297859][ T6410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.322424][ T6417] Dead loop on virtual device ip6_vti0, fix it urgently! [ 164.329841][ T6417] Dead loop on virtual device ip6_vti0, fix it urgently! [ 164.372647][ T6411] netlink: 60 bytes leftover after parsing attributes in process `syz.2.133'. [ 164.383818][ T6411] unsupported nlmsg_type 40 [ 165.608288][ T6427] syz.1.138: attempt to access beyond end of device [ 165.608288][ T6427] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 165.625148][ T6427] qnx6: unable to read the first superblock [ 165.635235][ T6427] syz.1.138: attempt to access beyond end of device [ 165.635235][ T6427] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 165.649988][ T6427] qnx6: unable to read the first superblock [ 165.655885][ T6427] qnx6: unable to read the first superblock [ 166.040598][ T6431] syz.2.139: attempt to access beyond end of device [ 166.040598][ T6431] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 166.400636][ T6431] syz.2.139: attempt to access beyond end of device [ 166.400636][ T6431] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 166.667114][ T6431] Mount JFS Failure: -5 [ 167.740006][ T5938] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 168.203227][ T5938] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 168.246682][ T5938] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 168.276195][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.529807][ T5938] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 168.613079][ T6446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.144'. [ 170.076144][ T5938] usb 5-1: USB disconnect, device number 2 [ 170.854242][ T6465] IPv6: Can't replace route, no match found [ 172.469103][ T6473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.124216][ T6487] tipc: Started in network mode [ 175.129397][ T6487] tipc: Node identity 080211000001, cluster identity 4711 [ 175.138960][ T6487] tipc: Enabled bearer , priority 10 [ 176.584036][ T47] tipc: Node number set to 134418688 [ 178.293554][ T6502] syz.0.155: attempt to access beyond end of device [ 178.293554][ T6502] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 178.306428][ T6502] qnx6: unable to read the first superblock [ 178.312858][ T6502] syz.0.155: attempt to access beyond end of device [ 178.312858][ T6502] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 178.325567][ T6502] qnx6: unable to read the first superblock [ 178.331547][ T6502] qnx6: unable to read the first superblock [ 181.830138][ T6520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.229942][ T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 182.448402][ T47] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 182.471224][ T6522] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.486239][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.529806][ T47] usb 6-1: Product: syz [ 182.550648][ T47] usb 6-1: Manufacturer: syz [ 182.557644][ T47] usb 6-1: SerialNumber: syz [ 182.580846][ T47] usb 6-1: config 0 descriptor?? [ 183.445639][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.501874][ T47] comedi comedi0: Wrong number of endpoints [ 183.968376][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.976495][ T47] dt9812 6-1:0.0: driver 'dt9812' failed to auto-configure device. [ 186.159566][ T5901] usb 6-1: USB disconnect, device number 4 [ 186.696590][ T6543] syz.2.169: attempt to access beyond end of device [ 186.696590][ T6543] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 186.762058][ T6543] syz.2.169: attempt to access beyond end of device [ 186.762058][ T6543] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 187.016743][ T6543] Mount JFS Failure: -5 [ 187.477247][ T6554] syz.1.173: attempt to access beyond end of device [ 187.477247][ T6554] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 187.491893][ T6554] qnx6: unable to read the first superblock [ 187.498379][ T6554] syz.1.173: attempt to access beyond end of device [ 187.498379][ T6554] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 187.511199][ T6554] qnx6: unable to read the first superblock [ 187.524777][ T6554] qnx6: unable to read the first superblock [ 188.119929][ T5837] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 188.341838][ T5837] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 188.399366][ T5837] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 189.446936][ T5837] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.457375][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.865010][ T5895] usb 6-1: USB disconnect, device number 5 [ 190.954884][ T6580] overlayfs: overlapping lowerdir path [ 195.474522][ T6610] syz.4.190: attempt to access beyond end of device [ 195.474522][ T6610] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 195.487549][ T6610] qnx6: unable to read the first superblock [ 195.493919][ T6610] syz.4.190: attempt to access beyond end of device [ 195.493919][ T6610] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 195.506617][ T6610] qnx6: unable to read the first superblock [ 195.512797][ T6610] qnx6: unable to read the first superblock [ 198.088820][ T6636] overlayfs: overlapping lowerdir path [ 198.714168][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.720632][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.840396][ T6645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.214212][ T6663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.207'. [ 203.746368][ T6663] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 203.747563][ T6663] block (null): Could not allocate knbd recv work queue. [ 203.766964][ T6663] nbd: failed to add new device [ 205.629901][ T6682] overlayfs: overlapping lowerdir path [ 205.854880][ T6690] overlayfs: overlapping lowerdir path [ 210.092043][ T6710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.222'. [ 210.621587][ T6710] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 210.621693][ T6710] block (null): Could not allocate knbd recv work queue. [ 210.639994][ T6710] nbd: failed to add new device [ 212.163762][ T6732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.554406][ T6733] overlayfs: overlapping lowerdir path [ 213.613649][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 213.794462][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 213.837011][ T24] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.878476][ T24] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.946906][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.061621][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.145188][ T6755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.190393][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 216.197112][ T5854] Bluetooth: hci5: command 0x0406 tx timeout [ 216.206513][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 216.209811][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 216.212816][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 216.218886][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 216.268862][ T24] usb 2-1: can't set config #27, error -71 [ 216.647788][ T24] usb 2-1: USB disconnect, device number 7 [ 221.208499][ T6794] overlayfs: overlapping lowerdir path [ 221.370073][ T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 221.860102][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 222.142141][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 222.379834][ T5895] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 222.470364][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 222.559612][ T47] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 222.723537][ T6808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.730694][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.140926][ T5895] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 223.161548][ T47] usb 5-1: Product: syz [ 223.169759][ T47] usb 5-1: Manufacturer: syz [ 223.174924][ T5895] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.199438][ T47] usb 5-1: SerialNumber: syz [ 223.212732][ T47] usb 5-1: config 0 descriptor?? [ 223.229621][ T5895] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.281456][ T5895] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.307051][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.441759][ T5895] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.838693][ T47] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 223.898046][ T47] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 224.502584][ T47] usb 5-1: USB disconnect, device number 3 [ 224.592700][ T5895] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 224.682026][ T5895] usb 4-1: USB disconnect, device number 6 [ 224.979557][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.142256][ T6874] overlayfs: failed to resolve './file0': -2 [ 233.330399][ T6877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.312572][ T6889] veth0_vlan: entered allmulticast mode [ 234.361368][ T6889] veth0_vlan: left promiscuous mode [ 234.374822][ T6889] veth0_vlan: entered promiscuous mode [ 235.721798][ T6901] overlayfs: overlapping lowerdir path [ 238.829697][ T6915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.446927][ T6932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.736495][ T6948] overlayfs: failed to resolve './file0': -2 [ 246.002538][ T6958] overlayfs: overlapping lowerdir path [ 249.970227][ T6989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.589563][ T6997] veth0_vlan: entered allmulticast mode [ 250.637812][ T6997] veth0_vlan: left promiscuous mode [ 250.650615][ T6997] veth0_vlan: entered promiscuous mode [ 253.231118][ T7015] overlayfs: failed to resolve './file0': -2 [ 255.891390][ T7035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.156593][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.162996][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.967854][ T7073] overlayfs: failed to resolve './file1': -2 [ 265.469921][ T1209] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 265.693196][ T1209] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 265.843887][ T1209] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 265.945730][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.091687][ T1209] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 271.998455][ T1209] usb 2-1: USB disconnect, device number 8 [ 272.412990][ T7148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.741390][ T7172] overlayfs: overlapping lowerdir path [ 285.662936][ T7233] overlayfs: overlapping lowerdir path [ 289.331106][ T7259] syz.3.376: attempt to access beyond end of device [ 289.331106][ T7259] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 289.345203][ T7259] syz.3.376: attempt to access beyond end of device [ 289.345203][ T7259] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 289.358685][ T7259] Mount JFS Failure: -5 [ 291.693052][ T7273] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 294.050737][ T7292] overlayfs: overlapping lowerdir path [ 302.898215][ T7302] tipc: Resetting bearer [ 304.309497][ T7371] overlayfs: overlapping lowerdir path [ 310.119728][ T7422] veth0_vlan: left promiscuous mode [ 310.129538][ T7422] veth0_vlan: entered promiscuous mode [ 311.624091][ T7434] overlayfs: overlapping lowerdir path [ 314.947554][ T7457] infiniband syz0: set active [ 314.952430][ T7457] infiniband syz0: added bond0 [ 315.000898][ T7457] RDS/IB: syz0: added [ 315.005230][ T7457] smc: adding ib device syz0 with port count 1 [ 315.011547][ T7457] smc: ib device syz0 port 1 has pnetid [ 321.252534][ T7504] overlayfs: overlapping lowerdir path [ 321.950369][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.956865][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.541947][ T7530] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 330.073154][ T7578] overlayfs: overlapping lowerdir path [ 332.353676][ T7603] veth0_vlan: left promiscuous mode [ 332.367785][ T7603] veth0_vlan: entered promiscuous mode [ 333.625280][ T7613] overlayfs: overlapping lowerdir path [ 333.946713][ T7614] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 334.469629][ T7618] sock: sock_timestamping_bind_phc: sock not bind to device [ 334.488499][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 335.471055][ T7630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.455'. [ 337.613809][ T7650] overlayfs: overlapping lowerdir path [ 340.809586][ T7687] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 341.148795][ T7686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.555129][ T7693] program syz.2.473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.666670][ T7693] vlan2: entered promiscuous mode [ 341.723426][ T7693] vlan2: entered allmulticast mode [ 341.890006][ T7693] hsr_slave_1: entered allmulticast mode [ 343.292102][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 345.145723][ T5938] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 345.273399][ T7737] IPv6: NLM_F_CREATE should be specified when creating new route [ 345.282125][ T7737] IPv6: Can't replace route, no match found [ 345.342705][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 345.410532][ T5938] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 345.612861][ T5938] usb 3-1: config 0 has no interface number 0 [ 345.708323][ T5938] usb 3-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 345.849630][ T5938] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 345.884815][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.979792][ T5938] usb 3-1: Product: syz [ 345.983988][ T5938] usb 3-1: Manufacturer: syz [ 346.008983][ T5938] usb 3-1: SerialNumber: syz [ 346.037709][ T5938] usb 3-1: config 0 descriptor?? [ 346.050293][ T7723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 346.087296][ T5938] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 347.120411][ T5990] usb 3-1: Failed to submit usb control message: -110 [ 347.481302][ T7750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.503627][ T5990] usb 3-1: unable to send the bmi data to the device: -110 [ 347.535658][ T5990] usb 3-1: unable to get target info from device [ 347.554442][ T5899] usb 3-1: USB disconnect, device number 2 [ 347.585410][ T5990] usb 3-1: could not get target info (-110) [ 347.626229][ T5990] usb 3-1: could not probe fw (-110) [ 351.620396][ T7783] IPv6: Can't replace route, no match found [ 352.684487][ T7787] netlink: 1 bytes leftover after parsing attributes in process `syz.1.499'. [ 354.033958][ T7798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.806860][ T7811] syz.3.505: attempt to access beyond end of device [ 356.806860][ T7811] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 356.929089][ T7811] syz.3.505: attempt to access beyond end of device [ 356.929089][ T7811] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 357.169927][ T7811] Mount JFS Failure: -5 [ 359.210048][ T7824] IPv6: Can't replace route, no match found [ 360.737993][ T7835] netlink: 1 bytes leftover after parsing attributes in process `syz.1.515'. [ 361.304618][ T7845] IPv6: NLM_F_CREATE should be specified when creating new route [ 361.313464][ T7845] IPv6: Can't replace route, no match found [ 369.104219][ T7896] netlink: 1 bytes leftover after parsing attributes in process `syz.4.530'. [ 370.630200][ T7903] syz.3.529: attempt to access beyond end of device [ 370.630200][ T7903] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 370.643174][ T7903] syz.3.529: attempt to access beyond end of device [ 370.643174][ T7903] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 370.656105][ T7903] Mount JFS Failure: -5 [ 373.439958][ T5938] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 374.551362][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 374.581219][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.596236][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.739749][ T5938] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 374.769768][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.886533][ T5938] usb 5-1: config 0 descriptor?? [ 375.831208][ T5938] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 376.190200][ T5938] usb 5-1: USB disconnect, device number 4 [ 380.417921][ T7978] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 383.118319][ T7995] overlayfs: overlapping lowerdir path [ 383.546853][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.660070][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.816591][ T8051] futex_wake_op: syz.2.573 tries to shift op by -1; fix this program [ 390.059888][ T5938] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 390.418245][ T5938] usb 5-1: config 0 has no interfaces? [ 390.503239][ T5938] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 390.513566][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.515541][ T8060] overlayfs: failed to resolve './file1': -2 [ 390.543313][ T5938] usb 5-1: Product: syz [ 390.568046][ T5938] usb 5-1: Manufacturer: syz [ 390.637310][ T5938] usb 5-1: SerialNumber: syz [ 390.697184][ T5938] usb 5-1: config 0 descriptor?? [ 391.009956][ T8065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.022383][ T8065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.008083][ T5938] usb 5-1: USB disconnect, device number 5 [ 405.953785][ T8161] veth0_vlan: left promiscuous mode [ 405.966814][ T8161] veth0_vlan: entered promiscuous mode [ 412.450834][ T8206] syz.1.613: attempt to access beyond end of device [ 412.450834][ T8206] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 412.499940][ T8206] qnx6: unable to read the first superblock [ 412.612048][ T8206] syz.1.613: attempt to access beyond end of device [ 412.612048][ T8206] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 413.460709][ T8206] qnx6: unable to read the first superblock [ 413.476802][ T8206] qnx6: unable to read the first superblock [ 416.638721][ T8237] mmap: syz.4.627 (8237) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 416.651902][ T30] audit: type=1800 audit(1744559925.222:3): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.627" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 417.473034][ T8242] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 419.484453][ T8260] syz.5.633: attempt to access beyond end of device [ 419.484453][ T8260] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 419.499439][ T8260] syz.5.633: attempt to access beyond end of device [ 419.499439][ T8260] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 419.512849][ T8260] Mount JFS Failure: -5 [ 421.314765][ T1209] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 421.333518][ T8273] overlayfs: failed to resolve './file0': -2 [ 421.481771][ T1209] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 421.763109][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.772320][ T1209] usb 6-1: Product: syz [ 421.776574][ T1209] usb 6-1: Manufacturer: syz [ 421.782332][ T1209] usb 6-1: SerialNumber: syz [ 421.831045][ T1209] usb 6-1: config 0 descriptor?? [ 421.896700][ T1209] comedi comedi0: Wrong number of endpoints [ 421.989495][ T1209] dt9812 6-1:0.0: driver 'dt9812' failed to auto-configure device. [ 422.059605][ T8264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.130186][ T8264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.224928][ T5899] usb 6-1: USB disconnect, device number 6 [ 424.618002][ T8307] overlayfs: failed to resolve './file0': -2 [ 425.066904][ T8313] overlayfs: overlapping lowerdir path [ 426.639750][ T5938] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 427.335251][ T5938] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 427.353424][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.483636][ T5938] usb 4-1: Product: syz [ 427.487827][ T5938] usb 4-1: Manufacturer: syz [ 427.529332][ T5938] usb 4-1: SerialNumber: syz [ 427.583204][ T5938] usb 4-1: config 0 descriptor?? [ 427.740137][ T5938] comedi comedi0: Wrong number of endpoints [ 427.746084][ T5938] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device. [ 427.770484][ T1209] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 427.796511][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.846020][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.102036][ T1209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.115133][ T5899] usb 4-1: USB disconnect, device number 7 [ 428.123572][ T1209] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 428.133338][ T1209] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 428.142669][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.161111][ T1209] usb 2-1: config 0 descriptor?? [ 428.181026][ T1209] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 428.208237][ T1209] dvb-usb: bulk message failed: -22 (3/0) [ 428.229988][ T1209] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 428.259621][ T1209] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 428.288803][ T1209] usb 2-1: media controller created [ 428.301166][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.344596][ T1209] dvb-usb: bulk message failed: -22 (6/0) [ 428.369839][ T1209] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 428.464540][ T1209] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 428.599858][ T1209] dvb-usb: schedule remote query interval to 150 msecs. [ 428.606893][ T1209] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 429.143225][ T5938] dvb-usb: bulk message failed: -22 (1/0) [ 429.149119][ T5938] dvb-usb: error while querying for an remote control event. [ 429.255993][ T8353] overlayfs: failed to resolve './file0': -2 [ 429.380817][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 429.386949][ T1209] dvb-usb: error while querying for an remote control event. [ 429.609741][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 429.615553][ T1209] dvb-usb: error while querying for an remote control event. [ 429.750365][ T5901] usb 2-1: USB disconnect, device number 9 [ 429.865746][ T5901] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 430.349802][ T5899] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 431.150129][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 431.188992][ T5899] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 431.225071][ T5899] usb 6-1: config 0 has no interface number 0 [ 431.251270][ T5899] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 431.268860][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.317569][ T5899] usb 6-1: Product: syz [ 431.325564][ T5899] usb 6-1: Manufacturer: syz [ 431.342314][ T5899] usb 6-1: SerialNumber: syz [ 431.367261][ T5899] usb 6-1: config 0 descriptor?? [ 431.417419][ T5899] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 431.590927][ T1209] usb 6-1: USB disconnect, device number 7 [ 431.596861][ T5989] usb 6-1: Failed to submit usb control message: -71 [ 431.629786][ T5989] usb 6-1: unable to send the bmi data to the device: -71 [ 431.660152][ T5989] usb 6-1: unable to get target info from device [ 431.704228][ T5989] usb 6-1: could not get target info (-71) [ 431.719029][ T5989] usb 6-1: could not probe fw (-71) [ 432.885359][ T8392] netlink: 'syz.3.677': attribute type 5 has an invalid length. [ 438.972959][ T8438] xt_l2tp: missing protocol rule (udp|l2tpip) [ 441.412013][ T8453] program syz.4.693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 441.543275][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 441.590005][ T8453] vlan2: entered promiscuous mode [ 441.595266][ T8453] vlan2: entered allmulticast mode [ 441.659841][ T8453] hsr_slave_1: entered allmulticast mode [ 444.990321][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.996747][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.730819][ T8503] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 450.763397][ T47] IPVS: starting estimator thread 0... [ 450.879956][ T8504] IPVS: using max 23 ests per chain, 55200 per kthread [ 453.759752][ T5898] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 454.284522][ T5898] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 454.460337][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.468403][ T5898] usb 6-1: Product: syz [ 454.534948][ T5898] usb 6-1: Manufacturer: syz [ 454.539573][ T5898] usb 6-1: SerialNumber: syz [ 454.560371][ T5898] usb 6-1: config 0 descriptor?? [ 454.586642][ T5898] comedi comedi0: Wrong number of endpoints [ 454.649850][ T5898] dt9812 6-1:0.0: driver 'dt9812' failed to auto-configure device. [ 454.790699][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.825197][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.120137][ T5898] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 455.590200][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 455.601213][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.629117][ T5898] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 455.713962][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.821179][ T5898] usb 3-1: config 0 descriptor?? [ 456.268334][ T1209] usb 6-1: USB disconnect, device number 8 [ 457.675998][ T5898] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 458.317370][ T5898] usb 3-1: USB disconnect, device number 3 [ 458.849851][ T5898] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 459.049881][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 459.833388][ T5898] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.890964][ T5898] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 459.963806][ T5898] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 459.979747][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.987926][ T5898] usb 6-1: Product: syz [ 459.992655][ T5898] usb 6-1: Manufacturer: syz [ 459.997335][ T5898] usb 6-1: SerialNumber: syz [ 460.006461][ T5898] usb 6-1: config 0 descriptor?? [ 460.223480][ T5898] usb 6-1: USB disconnect, device number 9 [ 460.639763][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 462.970157][ T5899] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 463.173928][ T5899] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 463.221151][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.265224][ T5899] usb 3-1: Product: syz [ 463.284499][ T5899] usb 3-1: Manufacturer: syz [ 464.258969][ T5899] usb 3-1: SerialNumber: syz [ 464.264433][ T5938] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 465.092050][ T5899] usb 3-1: config 0 descriptor?? [ 465.120172][ T5899] comedi comedi0: Wrong number of endpoints [ 465.126097][ T5899] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device. [ 465.181635][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 465.204940][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.267284][ T5938] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 465.306916][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.348942][ T5938] usb 2-1: config 0 descriptor?? [ 465.358417][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.387350][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.285429][ T5938] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 466.366705][ T8629] sock: sock_timestamping_bind_phc: sock not bind to device [ 466.754487][ T5938] usb 2-1: USB disconnect, device number 10 [ 466.866699][ T5899] usb 3-1: USB disconnect, device number 4 [ 467.289591][ T8634] overlayfs: overlapping lowerdir path [ 468.542440][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 469.901530][ T8651] syz.1.748: attempt to access beyond end of device [ 469.901530][ T8651] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 469.914385][ T8651] qnx6: unable to read the first superblock [ 469.920568][ T8651] syz.1.748: attempt to access beyond end of device [ 469.920568][ T8651] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 469.933263][ T8651] qnx6: unable to read the first superblock [ 469.939157][ T8651] qnx6: unable to read the first superblock [ 473.045405][ T8627] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 473.060722][ T8676] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 473.205451][ T8627] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 473.214858][ T8627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.234581][ T8627] usb 4-1: Product: syz [ 473.248963][ T8627] usb 4-1: Manufacturer: syz [ 473.265131][ T8627] usb 4-1: SerialNumber: syz [ 473.301093][ T8627] usb 4-1: config 0 descriptor?? [ 473.334657][ T8627] comedi comedi0: Wrong number of endpoints [ 473.348613][ T8627] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device. [ 473.540002][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.559831][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.931881][ T8706] syz.5.763: attempt to access beyond end of device [ 474.931881][ T8706] nbd5: rw=0, sector=16, nr_sectors = 1 limit=0 [ 474.945103][ T8706] qnx6: unable to read the first superblock [ 474.953513][ T8706] syz.5.763: attempt to access beyond end of device [ 474.953513][ T8706] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 474.966692][ T8706] qnx6: unable to read the first superblock [ 474.972711][ T8706] qnx6: unable to read the first superblock [ 477.924742][ T8723] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 480.170050][ T5938] usb 4-1: USB disconnect, device number 8 [ 481.604189][ T8751] netlink: 'syz.0.777': attribute type 5 has an invalid length. [ 482.609814][ T24] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 482.621127][ T8753] team0: entered promiscuous mode [ 482.639400][ T8753] team_slave_0: entered promiscuous mode [ 482.649984][ T8753] team_slave_1: entered promiscuous mode [ 482.659590][ T8753] team0: left promiscuous mode [ 482.712454][ T8753] team_slave_0: left promiscuous mode [ 482.733514][ T8753] team_slave_1: left promiscuous mode [ 482.745035][ T8757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.530626][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.579985][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 483.590003][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 483.599595][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.660785][ T24] usb 4-1: config 0 descriptor?? [ 483.702561][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 483.739605][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 483.787240][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 483.844358][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 483.854823][ T24] usb 4-1: media controller created [ 483.901495][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 483.960878][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 484.001916][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 484.035067][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 484.087655][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 484.108833][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 484.179601][ T8767] ip6t_srh: unknown srh match flags 5040 [ 484.279851][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 484.307024][ T24] dvb-usb: error while querying for an remote control event. [ 485.579798][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 485.598940][ T24] dvb-usb: error while querying for an remote control event. [ 485.797716][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 486.020879][ T24] dvb-usb: error while querying for an remote control event. [ 486.196785][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 486.281472][ T24] dvb-usb: error while querying for an remote control event. [ 486.349482][ T24] usb 4-1: USB disconnect, device number 9 [ 486.439763][ T8627] dvb-usb: bulk message failed: -22 (1/0) [ 486.547378][ T8627] dvb-usb: error while querying for an remote control event. [ 486.914849][ T8788] syz.1.790: attempt to access beyond end of device [ 486.914849][ T8788] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 486.927684][ T8788] syz.1.790: attempt to access beyond end of device [ 486.927684][ T8788] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 486.940539][ T8788] Mount JFS Failure: -5 [ 487.103473][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 489.109324][ T8803] warning: `syz.1.795' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 494.552928][ T8847] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 495.107373][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 499.484514][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 500.344209][ T8903] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 502.054779][ T8909] overlayfs: overlapping lowerdir path [ 505.270987][ T8939] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 506.094024][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.100463][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.896573][ T5898] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 507.245582][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 507.261564][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 507.289941][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 507.318222][ T5898] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 507.319019][ T8967] fuse: Bad value for 'group_id' [ 507.328706][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.365902][ T8967] fuse: Bad value for 'group_id' [ 507.375341][ T5898] usb 3-1: Product: syz [ 507.384618][ T5898] usb 3-1: Manufacturer: syz [ 507.403667][ T5898] usb 3-1: SerialNumber: syz [ 507.421256][ T5898] usb 3-1: config 0 descriptor?? [ 507.438018][ T5898] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 507.464350][ T5898] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 507.469886][ T8627] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 507.659836][ T8627] usb 2-1: Using ep0 maxpacket: 16 [ 507.694743][ T8627] usb 2-1: config 0 has no interfaces? [ 507.712067][ T8627] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.739970][ T8627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.749803][ T8627] usb 2-1: Product: syz [ 507.758363][ T8627] usb 2-1: Manufacturer: syz [ 507.826327][ T8627] usb 2-1: SerialNumber: syz [ 507.872869][ T8627] usb 2-1: config 0 descriptor?? [ 508.559732][ T5898] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 508.620711][ T5898] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 509.136105][ T8983] fuse: Bad value for 'fd' [ 509.424555][ T5898] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 509.460603][ T5898] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 509.519292][ T5908] usb 2-1: USB disconnect, device number 11 [ 509.916689][ T8989] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 510.541630][ T5898] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 511.198003][ T5898] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 511.205370][ T5898] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 511.237600][ T5898] usb 3-1: USB disconnect, device number 5 [ 511.431675][ T9000] sg_write: process 433 (syz.0.862) changed security contexts after opening file descriptor, this is not allowed. [ 511.528040][ T9000] netlink: 'syz.0.862': attribute type 3 has an invalid length. [ 511.556861][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 512.704324][ T9029] input: syz1 as /devices/virtual/input/input10 [ 512.803642][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 512.813866][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 512.989022][ T9029] geneve2: entered promiscuous mode [ 512.995329][ T9029] geneve2: entered allmulticast mode [ 513.406706][ T9037] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 515.023531][ T9049] overlayfs: overlapping lowerdir path [ 515.091617][ T9050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.449773][ T5908] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 515.642484][ T5908] usb 2-1: config 0 has no interfaces? [ 515.669779][ T5908] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 515.688987][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.729505][ T5908] usb 2-1: Product: syz [ 515.749836][ T5908] usb 2-1: Manufacturer: syz [ 515.774452][ T5908] usb 2-1: SerialNumber: syz [ 515.797708][ T5908] usb 2-1: config 0 descriptor?? [ 515.926180][ T9061] netlink: 'syz.2.880': attribute type 3 has an invalid length. [ 515.949831][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 518.204232][ T5908] usb 2-1: USB disconnect, device number 12 [ 519.569799][ T8627] IPVS: starting estimator thread 0... [ 519.689777][ T9100] IPVS: using max 23 ests per chain, 55200 per kthread [ 519.704286][ T9103] netlink: 'syz.5.895': attribute type 3 has an invalid length. [ 519.730286][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.895'. [ 519.863536][ T9109] sock: sock_timestamping_bind_phc: sock not bind to device [ 521.098361][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 523.283800][ T5901] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 524.059788][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 524.105951][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'. [ 524.222871][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 524.249351][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.331429][ T5901] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 524.533598][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.542908][ T5901] usb 2-1: Product: syz [ 524.547082][ T5901] usb 2-1: Manufacturer: syz [ 524.553584][ T5901] usb 2-1: SerialNumber: syz [ 524.580234][ T5901] usb 2-1: config 0 descriptor?? [ 524.591340][ T5901] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 524.618341][ T5901] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 524.684850][ T9159] overlayfs: overlapping lowerdir path [ 525.277587][ T5901] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 525.287346][ T5901] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 525.405207][ T9166] sock: sock_timestamping_bind_phc: sock not bind to device [ 525.894293][ T9171] fuse: Bad value for 'group_id' [ 525.925819][ T9171] fuse: Bad value for 'group_id' [ 526.037567][ T5901] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 526.077395][ T5901] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 526.281082][ T9175] loop2: detected capacity change from 0 to 7 [ 526.333017][ T9175] loop2: [POWERTEC] p1 p2 p3 p4 [ 526.378733][ T9175] loop2: p1 start 1600481121 is beyond EOD, truncated [ 526.386727][ T9175] loop2: p2 start 1986290036 is beyond EOD, truncated [ 526.399067][ T9175] loop2: p3 size 134676480 extends beyond EOD, truncated [ 526.483237][ T9175] loop2: p4 start 4294967295 is beyond EOD, truncated [ 526.636177][ T8354] udevd[8354]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 526.718487][ T5901] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 526.744311][ T5901] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 526.770373][ T5901] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 526.848077][ T5901] usb 2-1: USB disconnect, device number 13 [ 528.218727][ T9195] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 528.259952][ T47] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 528.458657][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 528.952535][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.978119][ T47] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 528.995656][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.006872][ T47] usb 2-1: config 0 descriptor?? [ 529.584197][ T9207] sock: sock_timestamping_bind_phc: sock not bind to device [ 529.704358][ T47] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 529.763298][ T9210] fuse: Bad value for 'group_id' [ 529.768435][ T9210] fuse: Bad value for 'group_id' [ 530.082786][ T5901] usb 2-1: USB disconnect, device number 14 [ 530.397644][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.935'. [ 532.611383][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 533.126716][ T9243] overlayfs: overlapping lowerdir path [ 533.953131][ T5898] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 534.148455][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.181726][ T5898] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 534.221022][ T5898] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 534.265640][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.314536][ T5898] usb 1-1: config 0 descriptor?? [ 534.343994][ T5898] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 534.371923][ T5898] dvb-usb: bulk message failed: -22 (3/0) [ 534.398098][ T5898] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 534.449541][ T5898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 534.709939][ T5898] usb 1-1: media controller created [ 535.432787][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 535.517789][ T5898] dvb-usb: bulk message failed: -22 (6/0) [ 535.584375][ T5898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 535.644510][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 535.694992][ T5898] dvb-usb: schedule remote query interval to 150 msecs. [ 536.247360][ T5898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 536.350535][ T9260] fuse: Bad value for 'group_id' [ 536.376448][ T9260] fuse: Bad value for 'group_id' [ 536.400884][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 536.420348][ T5898] dvb-usb: error while querying for an remote control event. [ 536.609759][ T9262] sock: sock_timestamping_bind_phc: sock not bind to device [ 536.652979][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 536.658843][ T5898] dvb-usb: error while querying for an remote control event. [ 536.766174][ T5898] usb 1-1: USB disconnect, device number 3 [ 537.042156][ T9269] overlayfs: overlapping lowerdir path [ 538.136439][ T5898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 540.345049][ T9290] Process accounting resumed [ 540.396682][ T9288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.965938][ T9304] netlink: 68 bytes leftover after parsing attributes in process `syz.4.957'. [ 541.975189][ T9304] nbd: must specify at least one socket [ 543.079782][ T5908] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 543.271883][ T5908] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 543.306713][ T5908] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 543.321723][ T9314] sock: sock_timestamping_bind_phc: sock not bind to device [ 543.326096][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.385813][ T5908] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 543.846157][ T9320] syz.2.965: attempt to access beyond end of device [ 543.846157][ T9320] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 543.859923][ T9320] syz.2.965: attempt to access beyond end of device [ 543.859923][ T9320] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 543.875734][ T9320] Mount JFS Failure: -5 [ 543.905714][ T5908] usb 4-1: USB disconnect, device number 10 [ 543.929049][ T9323] overlayfs: overlapping lowerdir path [ 545.710339][ T47] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 547.910443][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 548.051860][ T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 548.118058][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 548.213518][ T47] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 548.229886][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.248147][ T47] usb 3-1: Product: syz [ 548.258335][ T47] usb 3-1: Manufacturer: syz [ 548.267495][ T47] usb 3-1: SerialNumber: syz [ 548.300502][ T47] usb 3-1: config 0 descriptor?? [ 548.321608][ T47] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 548.349637][ T47] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 548.378805][ T9352] batadv0: entered promiscuous mode [ 548.419141][ T9352] vlan2: entered promiscuous mode [ 548.584197][ T9358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.779456][ T47] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 548.814066][ T47] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 548.899967][ T5901] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 549.609550][ T47] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 549.647771][ T47] em28xx 3-1:0.0: No AC97 audio processor [ 549.738781][ T47] usb 3-1: USB disconnect, device number 6 [ 549.764681][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.790403][ T47] em28xx 3-1:0.0: Disconnecting em28xx [ 549.795101][ T5901] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 549.863592][ T5901] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 549.870661][ T47] em28xx 3-1:0.0: Freeing device [ 549.913456][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.175793][ T5901] usb 4-1: config 0 descriptor?? [ 550.371991][ T5901] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 550.378778][ T5901] dvb-usb: bulk message failed: -22 (3/0) [ 550.461716][ T5901] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 550.496589][ T9376] overlayfs: overlapping lowerdir path [ 550.660393][ T5901] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 551.230982][ T5901] usb 4-1: media controller created [ 551.492411][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 551.507937][ T5901] dvb-usb: bulk message failed: -22 (6/0) [ 551.513826][ T5901] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 551.670568][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 551.735254][ T5901] dvb-usb: schedule remote query interval to 150 msecs. [ 551.962650][ T5901] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 552.119785][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 552.472496][ T5899] dvb-usb: error while querying for an remote control event. [ 552.587184][ T5899] usb 4-1: USB disconnect, device number 11 [ 553.183718][ T5899] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 554.954033][ T9414] netlink: 68 bytes leftover after parsing attributes in process `syz.3.992'. [ 554.963057][ T9414] nbd: must specify at least one socket [ 555.291327][ T5899] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 555.979776][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 555.998098][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 556.017298][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 556.064972][ T5899] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 556.106464][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.135611][ T5899] usb 6-1: Product: syz [ 556.147614][ T5899] usb 6-1: Manufacturer: syz [ 556.167291][ T5899] usb 6-1: SerialNumber: syz [ 556.187407][ T9419] 8021q: VLANs not supported on gre0 [ 556.255404][ T5899] usb 6-1: config 0 descriptor?? [ 556.293372][ T5899] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 556.577949][ T5899] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 557.134006][ T5899] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 557.362370][ T5899] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 558.657402][ T9440] tipc: Started in network mode [ 558.662653][ T9440] tipc: Node identity 080211000001, cluster identity 4711 [ 558.671504][ T9440] tipc: Enabled bearer , priority 10 [ 559.504911][ T5899] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 559.529778][ T5899] em28xx 6-1:0.0: No AC97 audio processor [ 559.732509][ T24] usb 6-1: USB disconnect, device number 10 [ 559.750459][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 559.801392][ T8627] tipc: Node number set to 134418688 [ 559.888103][ T24] em28xx 6-1:0.0: Freeing device [ 561.499039][ T8627] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 561.664360][ T8627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.716324][ T8627] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 561.756905][ T8627] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 561.790589][ T8627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.833932][ T8627] usb 3-1: config 0 descriptor?? [ 561.852858][ T8627] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 561.906239][ T8627] dvb-usb: bulk message failed: -22 (3/0) [ 561.932758][ T8627] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 561.970629][ T8627] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 561.977720][ T8627] usb 3-1: media controller created [ 562.001461][ T8627] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.041193][ T8627] dvb-usb: bulk message failed: -22 (6/0) [ 562.085848][ T8627] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 562.133850][ T8627] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 562.229175][ T8627] dvb-usb: schedule remote query interval to 150 msecs. [ 562.289905][ T8627] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 562.824411][ T47] dvb-usb: bulk message failed: -22 (1/0) [ 562.891725][ T47] dvb-usb: error while querying for an remote control event. [ 563.049815][ T8627] dvb-usb: bulk message failed: -22 (1/0) [ 563.092355][ T8627] dvb-usb: error while querying for an remote control event. [ 563.205184][ T5908] usb 3-1: USB disconnect, device number 7 [ 563.486181][ T5908] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 563.829963][ T5908] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 564.014401][ T5908] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3 [ 564.048936][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.094454][ T5908] usb 3-1: Product: syz [ 564.123345][ T5908] usb 3-1: Manufacturer: syz [ 564.148013][ T5908] usb 3-1: SerialNumber: syz [ 564.183981][ T5908] usb 3-1: config 0 descriptor?? [ 564.220421][ T5908] comedi comedi0: Wrong number of endpoints [ 564.238064][ T5908] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device. [ 564.402424][ T9489] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 564.433762][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.458784][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.880189][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.886488][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.780613][ T9516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.551356][ T9544] overlayfs: overlapping lowerdir path [ 571.656056][ T8627] usb 3-1: USB disconnect, device number 8 [ 572.896836][ T9561] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 575.389205][ T9585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.531406][ T9623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.595828][ T9626] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1056'. [ 581.125779][ T9635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.453633][ T9640] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 583.119920][ T9653] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 587.491011][ T9677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.183592][ T9692] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 588.337746][ T30] audit: type=1326 audit(1744560096.922:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3db8d169 code=0x7ffc0000 [ 588.539812][ T30] audit: type=1326 audit(1744560096.962:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3db8d169 code=0x7ffc0000 [ 588.662553][ T30] audit: type=1326 audit(1744560096.962:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1f3db8d169 code=0x7ffc0000 [ 588.727459][ T30] audit: type=1326 audit(1744560096.962:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3db8d169 code=0x7ffc0000 [ 588.816701][ T30] audit: type=1326 audit(1744560096.962:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3db8d169 code=0x7ffc0000 [ 589.113295][ T30] audit: type=1326 audit(1744560096.962:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1f3db8d169 code=0x7ffc0000 [ 589.211061][ T30] audit: type=1326 audit(1744560096.972:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3db29359 code=0x7ffc0000 [ 589.338422][ T30] audit: type=1326 audit(1744560096.972:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3db29359 code=0x7ffc0000 [ 589.476356][ T30] audit: type=1326 audit(1744560096.972:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3db29359 code=0x7ffc0000 [ 589.617360][ T30] audit: type=1326 audit(1744560096.972:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.2.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f3db29359 code=0x7ffc0000 [ 591.690256][ T9723] sock: sock_timestamping_bind_phc: sock not bind to device [ 592.087026][ T9728] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 592.255066][ T9730] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 593.398347][ T9743] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1087'. [ 593.407708][ T9743] nbd: must specify at least one socket [ 594.548798][ T9749] sctp: [Deprecated]: syz.5.1090 (pid 9749) Use of int in maxseg socket option. [ 594.548798][ T9749] Use struct sctp_assoc_value instead [ 596.819868][ T9770] sock: sock_timestamping_bind_phc: sock not bind to device [ 596.912672][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1096'. [ 597.854962][ T30] kauditd_printk_skb: 696 callbacks suppressed [ 597.854985][ T30] audit: type=1800 audit(1744560106.442:710): pid=9780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1098" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 599.516180][ T9781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.997171][ T9838] overlayfs: overlapping lowerdir path [ 607.365891][ T9843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.455868][ T9848] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 609.176965][ T9866] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 611.553032][ T9878] syzkaller0: entered promiscuous mode [ 611.558534][ T9878] syzkaller0: entered allmulticast mode [ 618.911438][ T9931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.980193][ T5908] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 619.149923][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 619.167873][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.187399][ T5908] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 619.203478][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.244280][ T5908] usb 3-1: config 0 descriptor?? [ 619.813707][ T5908] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 621.164396][ T47] usb 3-1: USB disconnect, device number 9 [ 624.289802][ T5908] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 624.465545][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 624.487566][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.534155][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.357186][ T5908] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 625.366796][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.387880][ T5908] usb 3-1: Product: syz [ 625.398064][ T5908] usb 3-1: Manufacturer: syz [ 625.403013][ T5908] usb 3-1: SerialNumber: syz [ 625.427294][ T5908] usb 3-1: config 0 descriptor?? [ 625.474558][ T5908] appledisplay 3-1:0.0: Could not find int-in endpoint [ 625.503363][ T5908] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 625.523959][ T9960] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1152'. [ 625.702796][ T5899] usb 3-1: USB disconnect, device number 10 [ 627.594418][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 628.800373][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.807214][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.947389][ T9996] tipc: Enabling of bearer rejected, already enabled [ 632.126075][T10010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.594416][ T5899] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 633.759844][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 633.834598][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 634.146895][ T5899] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 634.249961][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.292580][ T5899] usb 1-1: Product: syz [ 634.296791][ T5899] usb 1-1: Manufacturer: syz [ 634.370873][ T5899] usb 1-1: SerialNumber: syz [ 634.451046][ T5899] usb 1-1: config 0 descriptor?? [ 634.483200][ T5899] appledisplay 1-1:0.0: Could not find int-in endpoint [ 634.515851][ T5899] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 634.691449][ T5899] usb 1-1: USB disconnect, device number 4 [ 634.925650][T10035] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1168'. [ 636.138241][ T30] audit: type=1800 audit(1744560144.722:711): pid=10053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1178" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 638.223870][T10063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.850123][T10086] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 643.218045][T10108] overlayfs: overlapping lowerdir path [ 645.566341][T10126] overlayfs: overlapping lowerdir path [ 648.417960][T10148] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 648.430586][T10147] fuse: Bad value for 'user_id' [ 648.435450][T10147] fuse: Bad value for 'user_id' [ 648.779114][ T30] audit: type=1800 audit(1744560157.352:712): pid=10152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1198" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 651.102154][T10163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.089950][ T5908] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 656.239773][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 656.258408][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 656.287852][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 656.344116][ T5908] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 656.367733][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.409735][ T5908] usb 5-1: Product: syz [ 656.422916][ T5908] usb 5-1: Manufacturer: syz [ 656.439383][ T5908] usb 5-1: SerialNumber: syz [ 656.475510][ T5908] usb 5-1: config 0 descriptor?? [ 656.498913][ T5908] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 656.529801][ T5908] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 656.636855][T10196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.868101][T10199] fuse: Bad value for 'user_id' [ 656.891088][T10199] fuse: Bad value for 'user_id' [ 657.869826][ T5908] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 657.905367][ T5908] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 659.261174][ T5908] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 659.312154][ T5908] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 659.381392][ T5908] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 659.431692][ T5908] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 660.057069][ T5908] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 660.076542][ T5908] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 660.091870][ T5908] usb 5-1: USB disconnect, device number 6 [ 663.091181][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1232'. [ 663.132978][T10234] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1233'. [ 663.605600][T10241] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 664.529956][ T5908] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 664.886697][T10257] overlayfs: overlapping lowerdir path [ 665.792301][ T5908] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 665.802630][ T5908] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 665.811700][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.831782][ T5908] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 667.614261][ T5899] usb 6-1: USB disconnect, device number 11 [ 669.412087][T10277] loop2: detected capacity change from 0 to 7 [ 669.709932][T10277] Dev loop2: unable to read RDB block 7 [ 670.040222][T10277] loop2: AHDI p2 [ 670.043941][T10277] loop2: partition table partially beyond EOD, truncated [ 670.317553][T10293] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 670.546613][T10296] syz.2.1247: attempt to access beyond end of device [ 670.546613][T10296] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 670.559748][T10296] qnx6: unable to read the first superblock [ 670.567236][T10296] syz.2.1247: attempt to access beyond end of device [ 670.567236][T10296] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 670.580407][T10296] qnx6: unable to read the first superblock [ 670.586359][T10296] qnx6: unable to read the first superblock [ 672.257327][T10308] tipc: Enabling of bearer rejected, already enabled [ 677.042589][T10349] fuse: Invalid rootmode [ 677.412817][T10358] syz.1.1265: attempt to access beyond end of device [ 677.412817][T10358] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 677.426453][T10358] qnx6: unable to read the first superblock [ 677.434581][T10358] syz.1.1265: attempt to access beyond end of device [ 677.434581][T10358] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 677.447996][T10358] qnx6: unable to read the first superblock [ 677.453992][T10358] qnx6: unable to read the first superblock [ 678.044022][T10351] macsec1: entered promiscuous mode [ 678.069246][T10351] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 678.108846][T10351] macsec1: entered allmulticast mode [ 678.270703][T10351] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 679.659097][T10372] overlayfs: failed to resolve './file0': -2 [ 681.322659][T10399] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 681.374057][T10399] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 681.468923][T10393] ip6t_srh: unknown srh invflags 7D00 [ 681.977900][ T5837] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 683.070405][ T5837] usb 1-1: config index 0 descriptor too short (expected 21700, got 77) [ 683.099132][ T5837] usb 1-1: config 128 has too many interfaces: 190, using maximum allowed: 32 [ 683.113226][ T5837] usb 1-1: config 128 has an invalid descriptor of length 97, skipping remainder of the config [ 683.124006][ T5837] usb 1-1: config 128 has 0 interfaces, different from the descriptor's value: 190 [ 683.146498][ T5837] usb 1-1: New USB device found, idVendor=011e, idProduct=0000, bcdDevice= 0.00 [ 683.162359][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 683.195126][ T5837] usb 1-1: SerialNumber: syz [ 683.667752][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'. [ 684.445310][T10415] vlan2: entered promiscuous mode [ 684.504292][T10415] batadv0: entered promiscuous mode [ 685.661533][ T5837] usb 1-1: USB disconnect, device number 5 [ 687.334881][ T30] audit: type=1326 audit(1744560195.912:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41e78d169 code=0x7ffc0000 [ 687.445413][ T30] audit: type=1326 audit(1744560195.922:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff41e78d169 code=0x7ffc0000 [ 687.564490][ T30] audit: type=1326 audit(1744560195.922:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41e78d169 code=0x7ffc0000 [ 688.491088][ T30] audit: type=1326 audit(1744560195.922:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff41e78d169 code=0x7ffc0000 [ 688.584433][ T30] audit: type=1326 audit(1744560195.922:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff41e78d169 code=0x7ffc0000 [ 688.607197][ T30] audit: type=1326 audit(1744560195.922:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff41e729359 code=0x7ffc0000 [ 688.779248][ T30] audit: type=1326 audit(1744560195.922:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff41e729359 code=0x7ffc0000 [ 688.822391][ T30] audit: type=1326 audit(1744560195.922:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff41e729359 code=0x7ffc0000 [ 689.648472][ T30] audit: type=1326 audit(1744560195.922:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff41e729359 code=0x7ffc0000 [ 690.359487][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.369540][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.544546][ T30] audit: type=1326 audit(1744560195.922:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff41e729359 code=0x7ffc0000 [ 696.750626][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 698.551615][T10541] fuse: Bad value for 'rootmode' [ 699.690054][ T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 700.209852][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 700.256558][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 700.277699][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 700.449777][ T5898] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 700.454152][ T47] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 701.383990][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.429347][ T47] usb 1-1: Product: syz [ 701.475355][ T47] usb 1-1: Manufacturer: syz [ 701.494493][ T47] usb 1-1: SerialNumber: syz [ 701.531402][ T47] usb 1-1: config 0 descriptor?? [ 701.756003][ T47] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 701.793232][ T47] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 701.870236][T10570] overlayfs: overlapping lowerdir path [ 702.565224][ T47] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 702.579843][ T47] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 702.745225][ T47] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 702.776391][ T47] em28xx 1-1:0.0: No AC97 audio processor [ 702.859815][ T47] usb 1-1: USB disconnect, device number 6 [ 702.873370][ T47] em28xx 1-1:0.0: Disconnecting em28xx [ 703.123830][ T47] em28xx 1-1:0.0: Freeing device [ 704.639770][ T5895] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 705.739854][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 705.777323][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.859301][ T5895] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 705.912250][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.977164][ T5895] usb 3-1: config 0 descriptor?? [ 706.001170][ T5895] usb 3-1: can't set config #0, error -71 [ 706.040152][ T5895] usb 3-1: USB disconnect, device number 11 [ 706.584811][ T5898] usb 2-1: device descriptor read/all, error -110 [ 706.740399][ T5898] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 706.882152][T10603] xt_CT: No such helper "pptp" [ 706.901317][ T5898] usb 2-1: device descriptor read/64, error -32 [ 707.057500][ T5898] usb usb2-port1: attempt power cycle [ 707.429767][ T5898] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 707.513037][ T5898] usb 2-1: device descriptor read/8, error -32 [ 707.972856][ T1209] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 708.120068][ T5898] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 708.149975][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 708.157366][ T1209] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 708.179108][ T5898] usb 2-1: device descriptor read/8, error -32 [ 708.357640][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 708.371217][ T1209] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 708.399795][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.407800][ T1209] usb 3-1: Product: syz [ 708.413840][ T1209] usb 3-1: Manufacturer: syz [ 708.423615][ T1209] usb 3-1: SerialNumber: syz [ 708.614981][ T5898] raw-gadget.1 gadget.1: failed to queue suspend event [ 708.624721][ T5898] usb usb2-port1: unable to enumerate USB device [ 708.655448][T10553] raw-gadget.1 gadget.1: failed to queue disconnect event [ 708.668915][ T1209] usb 3-1: config 0 descriptor?? [ 708.682613][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1344'. [ 708.748144][T10627] overlayfs: overlapping lowerdir path [ 709.648054][ T1209] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 709.657427][ T1209] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 710.382359][ T1209] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 710.393117][ T1209] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 710.949905][ T5898] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 711.028162][ T1209] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 711.118970][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 711.138227][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.178990][ T5898] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 711.214348][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.235324][ T5898] usb 4-1: config 0 descriptor?? [ 711.725891][ T5898] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 712.006099][ T1209] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 712.013462][ T1209] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 712.030516][ T1209] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 712.043331][ T1209] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 712.064087][ T1209] usb 3-1: USB disconnect, device number 12 [ 712.935797][ T5895] usb 4-1: USB disconnect, device number 12 [ 714.335504][T10682] input: syz1 as /devices/virtual/input/input16 [ 714.407211][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 714.416310][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 714.527840][T10682] geneve2: entered promiscuous mode [ 714.534471][T10682] geneve2: entered allmulticast mode [ 715.407039][T10684] syz.0.1362: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 715.477461][T10684] CPU: 1 UID: 0 PID: 10684 Comm: syz.0.1362 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 715.477495][T10684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 715.477511][T10684] Call Trace: [ 715.477520][T10684] [ 715.477527][T10684] dump_stack_lvl+0x241/0x360 [ 715.477568][T10684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.477595][T10684] ? __pfx__printk+0x10/0x10 [ 715.477621][T10684] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 715.477651][T10684] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 715.477678][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 715.477699][T10684] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 715.477729][T10684] warn_alloc+0x27c/0x410 [ 715.477747][T10684] ? is_mmconf_reserved+0x3a1/0x3f0 [ 715.477769][T10684] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 715.477788][T10684] ? __pfx_warn_alloc+0x10/0x10 [ 715.477808][T10684] ? kasan_save_track+0x3f/0x80 [ 715.477828][T10684] ? __kasan_kmalloc+0x9d/0xb0 [ 715.477851][T10684] ? xsk_setsockopt+0x449/0x840 [ 715.477868][T10684] ? do_sock_setsockopt+0x3b3/0x710 [ 715.477886][T10684] ? __x64_sys_setsockopt+0x1ee/0x280 [ 715.477903][T10684] ? do_syscall_64+0xf3/0x230 [ 715.477926][T10684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.477952][T10684] __vmalloc_node_range_noprof+0x128/0x1390 [ 715.477996][T10684] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 715.478018][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 715.478039][T10684] ? __kasan_kmalloc+0x9d/0xb0 [ 715.478066][T10684] vmalloc_user_noprof+0x74/0x80 [ 715.478084][T10684] ? xskq_create+0xb6/0x170 [ 715.478103][T10684] xskq_create+0xb6/0x170 [ 715.478125][T10684] xsk_init_queue+0xa1/0x100 [ 715.478147][T10684] xsk_setsockopt+0x449/0x840 [ 715.478169][T10684] ? __pfx_xsk_setsockopt+0x10/0x10 [ 715.478186][T10684] ? __lock_acquire+0xad5/0xd80 [ 715.478205][T10684] ? __pfx_aa_sk_perm+0x10/0x10 [ 715.478231][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 715.478254][T10684] ? aa_sock_opt_perm+0x79/0x120 [ 715.478282][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 715.478305][T10684] ? __pfx_xsk_setsockopt+0x10/0x10 [ 715.478323][T10684] do_sock_setsockopt+0x3b3/0x710 [ 715.478348][T10684] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 715.478365][T10684] ? __fget_files+0x2a/0x420 [ 715.478385][T10684] ? srso_alias_return_thunk+0x5/0xfbef5 [ 715.478405][T10684] ? __fget_files+0x39d/0x420 [ 715.478421][T10684] ? __fget_files+0x2a/0x420 [ 715.478445][T10684] __x64_sys_setsockopt+0x1ee/0x280 [ 715.478471][T10684] do_syscall_64+0xf3/0x230 [ 715.478499][T10684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.478517][T10684] RIP: 0033:0x7f26b478d169 [ 715.478532][T10684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.478550][T10684] RSP: 002b:00007f26b5531038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 715.478569][T10684] RAX: ffffffffffffffda RBX: 00007f26b49a5fa0 RCX: 00007f26b478d169 [ 715.478583][T10684] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 715.478595][T10684] RBP: 00007f26b480e990 R08: 0000000000000004 R09: 0000000000000000 [ 715.478606][T10684] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.478618][T10684] R13: 0000000000000000 R14: 00007f26b49a5fa0 R15: 00007ffde5d80c98 [ 715.478646][T10684] [ 715.478654][T10684] Mem-Info: [ 716.143907][T10684] active_anon:16847 inactive_anon:0 isolated_anon:0 [ 716.143907][T10684] active_file:21429 inactive_file:38538 isolated_file:0 [ 716.143907][T10684] unevictable:1155 dirty:208 writeback:0 [ 716.143907][T10684] slab_reclaimable:10210 slab_unreclaimable:105610 [ 716.143907][T10684] mapped:44605 shmem:11783 pagetables:993 [ 716.143907][T10684] sec_pagetables:0 bounce:0 [ 716.143907][T10684] kernel_misc_reclaimable:0 [ 716.143907][T10684] free:1289202 free_pcp:409 free_cma:0 [ 716.144016][T10684] Node 0 active_anon:67388kB inactive_anon:0kB active_file:85380kB inactive_file:154076kB unevictable:3084kB isolated(anon):0kB isolated(file):0kB mapped:177944kB dirty:820kB writeback:0kB shmem:45596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10976kB pagetables:3972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 716.144089][T10684] Node 1 active_anon:0kB inactive_anon:0kB active_file:336kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:276kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 716.144158][T10684] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 716.144233][T10684] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 716.144302][T10684] Node 0 DMA32 free:1231072kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:67380kB inactive_anon:0kB active_file:85380kB inactive_file:153984kB unevictable:3084kB writepending:820kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:1628kB local_pcp:1044kB free_cma:0kB [ 716.144379][T10684] lowmem_reserve[]: 0 0 0 0 0 [ 716.144439][T10684] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 716.144510][T10684] lowmem_reserve[]: 0 0 0 0 0 [ 716.144570][T10684] Node 1 Normal free:3910376kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:336kB inactive_file:76kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 716.144645][T10684] lowmem_reserve[]: 0 0 0 0 0 [ 716.144704][T10684] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 716.144913][T10684] Node 0 DMA32: 2*4kB (ME) 265*8kB (UME) 30*16kB (ME) 207*32kB (UME) 459*64kB (UME) 103*128kB (UME) 52*256kB (UM) 37*512kB (UM) 24*1024kB (UM) 12*2048kB (UME) 268*4096kB (UM) = 1230928kB [ 716.145174][T10684] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 716.145340][T10684] Node 1 Normal: 220*4kB (UME) 57*8kB (UME) 53*16kB (UME) 193*32kB (UME) 83*64kB (UME) 29*128kB (UE) 15*256kB (UME) 12*512kB (UME) 6*1024kB (UME) 5*2048kB (UE) 944*4096kB (M) = 3910376kB [ 716.145600][T10684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 716.145624][T10684] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 716.145647][T10684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 716.145671][T10684] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 716.145694][T10684] 71750 total pagecache pages [ 716.145706][T10684] 0 pages in swap cache [ 716.145717][T10684] Free swap = 124996kB [ 716.145729][T10684] Total swap = 124996kB [ 716.145742][T10684] 2097051 pages RAM [ 716.145753][T10684] 0 pages HighMem/MovableOnly [ 716.145764][T10684] 428585 pages reserved [ 716.145776][T10684] 0 pages cma reserved [ 720.877251][T10724] 8021q: VLANs not supported on caif0 [ 723.869946][ T5898] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 724.050142][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 724.071823][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 724.103742][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 724.175205][ T5898] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 724.194878][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.229876][ T5898] usb 4-1: Product: syz [ 724.234070][ T5898] usb 4-1: Manufacturer: syz [ 724.279237][ T5898] usb 4-1: SerialNumber: syz [ 724.311476][ T5898] usb 4-1: config 0 descriptor?? [ 724.359169][ T5898] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 724.391278][ T5898] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 724.945409][ T5898] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 724.952625][ T5898] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 726.674094][ T5898] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 727.933626][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'. [ 728.262031][ T5898] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 728.286453][ T5898] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 728.300590][ T5898] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 728.329837][ T5898] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 728.344369][T10791] overlayfs: failed to resolve './file1': -2 [ 728.366162][ T5898] usb 4-1: USB disconnect, device number 13 [ 729.834244][T10807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.259949][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 730.685348][ T24] usb 4-1: config 0 has no interfaces? [ 730.697127][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 730.706512][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.736949][ T24] usb 4-1: Product: syz [ 730.753525][ T24] usb 4-1: Manufacturer: syz [ 730.758134][ T24] usb 4-1: SerialNumber: syz [ 732.574733][ T24] usb 4-1: config 0 descriptor?? [ 733.782117][ T5901] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 734.000003][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 734.010840][ T5901] usb 1-1: config 0 has an invalid interface number: 84 but max is 1 [ 734.083843][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.137320][ T5901] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 734.419828][ T5901] usb 1-1: config 0 has no interface number 0 [ 734.468492][ T5901] usb 1-1: config 0 interface 84 altsetting 127 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 734.565905][ T5901] usb 1-1: config 0 interface 84 altsetting 127 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 735.110024][ T5901] usb 1-1: config 0 interface 84 has no altsetting 0 [ 735.142885][ T5901] usb 1-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice=db.55 [ 735.159646][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.180819][ T5901] usb 1-1: Product: syz [ 735.185008][ T5901] usb 1-1: Manufacturer: syz [ 735.189620][ T5901] usb 1-1: SerialNumber: syz [ 735.250777][ T5901] usb 1-1: config 0 descriptor?? [ 736.510998][ T5901] appletouch 1-1:0.84: Could not find int-in endpoint [ 736.518380][ T5901] appletouch 1-1:0.84: probe with driver appletouch failed with error -5 [ 736.615971][ T5901] usbhid 1-1:0.84: couldn't find an input interrupt endpoint [ 736.733896][ T5901] usb 1-1: USB disconnect, device number 7 [ 736.889753][ T5895] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 737.318151][ T5837] usb 4-1: USB disconnect, device number 14 [ 737.389879][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 737.435565][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 737.506967][T10861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.543014][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 737.642268][ T5895] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 737.775046][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.819985][ T5895] usb 5-1: Product: syz [ 737.839896][ T5895] usb 5-1: Manufacturer: syz [ 739.077005][ T5895] usb 5-1: SerialNumber: syz [ 739.095198][ T5895] usb 5-1: config 0 descriptor?? [ 739.113562][ T5895] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 739.554591][ T5895] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 740.566535][ T5895] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 741.324022][ T5895] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 741.810649][ T5837] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 742.430258][ T5895] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 742.454788][ T5895] em28xx 5-1:0.0: No AC97 audio processor [ 742.482995][ T5837] usb 6-1: device descriptor read/64, error -71 [ 742.744327][ T5895] usb 5-1: USB disconnect, device number 7 [ 742.755518][ T5895] em28xx 5-1:0.0: Disconnecting em28xx [ 742.790487][ T5837] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 742.963952][ T5895] em28xx 5-1:0.0: Freeing device [ 743.143165][ T5837] usb 6-1: device descriptor read/64, error -71 [ 743.251264][ T5837] usb usb6-port1: attempt power cycle [ 743.319815][ T5895] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 744.429810][ T5837] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 744.610230][ T5837] usb 6-1: device descriptor read/8, error -71 [ 744.641471][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.679740][ T5895] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 744.688748][ T5895] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 744.718614][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.777536][ T5895] usb 3-1: config 0 descriptor?? [ 745.068715][ T5895] usb 3-1: string descriptor 0 read error: -71 [ 745.115512][ T5895] usb 3-1: USB disconnect, device number 13 [ 747.418553][T10937] batman_adv: batadv0: Adding interface: dummy0 [ 747.475027][T10937] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.594835][T10937] batman_adv: batadv0: Interface activated: dummy0 [ 747.903512][T10946] overlayfs: overlapping lowerdir path [ 748.596062][T10938] batadv0: mtu less than device minimum [ 748.711621][T10938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.723972][T10938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.735978][T10938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.747957][T10938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.759973][T10938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.771952][T10938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.783934][T10938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.795912][T10938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.807901][T10938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 749.359890][T10953] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 749.422630][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 751.685519][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.692111][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.779869][ T47] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 753.023454][ T47] usb 2-1: device descriptor read/64, error -71 [ 754.222921][ T47] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 754.515995][T10982] xt_CT: No such helper "pptp" [ 754.803842][ T47] usb usb2-port1: attempt power cycle [ 755.510885][ T47] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 755.542915][ T47] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 755.644013][T10999] overlayfs: overlapping lowerdir path [ 756.277598][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 756.299406][ T47] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 756.449020][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.492025][ T47] usb 2-1: config 0 descriptor?? [ 756.542414][ T47] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 759.002340][ T47] usb 2-1: USB disconnect, device number 21 [ 760.345849][T11030] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1468'. [ 760.363158][T11041] input: syz1 as /devices/virtual/input/input17 [ 760.579502][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1464'. [ 760.598898][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1464'. [ 760.934519][T11056] overlayfs: overlapping lowerdir path [ 761.540299][T11041] geneve2: entered promiscuous mode [ 761.545552][T11041] geneve2: entered allmulticast mode [ 761.682522][T11044] xt_CT: No such helper "pptp" [ 763.150006][ T5899] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 765.371083][ T5837] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 765.764106][ T5837] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 765.801868][ T5837] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 765.869768][ T5837] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 765.878887][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.939911][ T47] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 766.042093][ T5837] usb 1-1: config 0 descriptor?? [ 766.189488][ T47] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 766.198169][ T47] usb 3-1: config 7 has no interface number 0 [ 766.211951][ T47] usb 3-1: config 7 interface 252 has no altsetting 0 [ 766.262421][ T47] usb 3-1: string descriptor 0 read error: -22 [ 766.440290][ T47] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 766.459918][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.471924][ T5837] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 766.799963][ T8627] usb 3-1: USB disconnect, device number 14 [ 766.893250][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 766.893272][ T30] audit: type=1800 audit(1744560275.482:781): pid=11108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1485" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 767.988517][ T24] usb 1-1: USB disconnect, device number 8 [ 768.480310][T11116] overlayfs: overlapping lowerdir path [ 769.653064][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 769.670059][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -110 [ 769.687206][T11123] net_ratelimit: 10 callbacks suppressed [ 769.687221][T11123] openvswitch: netlink: Flow key attr not present in new flow. [ 769.731449][ T5899] usb 4-1: can't read configurations, error -110 [ 770.019758][ T5899] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 770.856097][T11143] xt_hashlimit: max too large, truncated to 1048576 [ 770.931259][ T5899] usb 4-1: device descriptor read/64, error -32 [ 771.045086][ T5899] usb usb4-port1: attempt power cycle [ 773.366760][ T47] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 773.885332][ T47] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 773.993504][ T47] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 774.295741][ T47] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 774.305549][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.328242][ T47] usb 6-1: config 0 descriptor?? [ 774.343803][ T47] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 774.431885][T11178] overlayfs: overlapping lowerdir path [ 775.260726][T11191] input: syz1 as /devices/virtual/input/input18 [ 775.383074][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'. [ 775.392112][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'. [ 775.416302][T11191] geneve2: entered promiscuous mode [ 775.421676][T11191] geneve2: entered allmulticast mode [ 775.664386][ T47] usb 6-1: USB disconnect, device number 16 [ 777.119796][ T5837] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 777.374239][ T5837] usb 3-1: config 0 has no interfaces? [ 777.387059][ T5837] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 777.399238][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.429214][ T5837] usb 3-1: Product: syz [ 777.463456][ T5837] usb 3-1: Manufacturer: syz [ 777.484867][ T5837] usb 3-1: SerialNumber: syz [ 777.541499][ T5837] usb 3-1: config 0 descriptor?? [ 778.289154][T11229] syz.1.1519: attempt to access beyond end of device [ 778.289154][T11229] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 778.302106][T11229] qnx6: unable to read the first superblock [ 778.308246][T11229] syz.1.1519: attempt to access beyond end of device [ 778.308246][T11229] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 778.321071][T11229] qnx6: unable to read the first superblock [ 778.326963][T11229] qnx6: unable to read the first superblock [ 779.779842][ T47] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 779.953422][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.978309][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 780.031508][ T47] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 780.040690][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.056499][ T47] usb 1-1: config 0 descriptor?? [ 780.073398][ T47] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 781.510546][ T5837] usb 3-1: USB disconnect, device number 15 [ 782.866779][T11279] 8021q: VLANs not supported on caif0 [ 783.039890][ T47] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 783.224682][ T47] usb 4-1: config 0 has no interfaces? [ 783.258430][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 783.296614][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.339071][ T8627] usb 1-1: USB disconnect, device number 9 [ 783.384133][ T47] usb 4-1: Product: syz [ 783.401347][ T47] usb 4-1: Manufacturer: syz [ 783.405971][ T47] usb 4-1: SerialNumber: syz [ 783.421812][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 783.431240][T11285] 8021q: VLANs not supported on caif0 [ 783.438335][T11287] tmpfs: Bad value for 'nr_inodes' [ 783.486903][ T47] usb 4-1: config 0 descriptor?? [ 784.852985][T11293] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 785.569814][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 785.909372][ T24] usb 6-1: config index 0 descriptor too short (expected 37691, got 77) [ 785.942154][ T24] usb 6-1: config 83 has too many interfaces: 132, using maximum allowed: 32 [ 785.989342][ T24] usb 6-1: config 83 has an invalid descriptor of length 153, skipping remainder of the config [ 786.044202][ T24] usb 6-1: config 83 has 0 interfaces, different from the descriptor's value: 132 [ 786.092264][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 786.308601][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.335858][ T24] usb 6-1: Product: syz [ 786.346953][ T24] usb 6-1: Manufacturer: syz [ 786.360840][ T24] usb 6-1: SerialNumber: syz [ 786.985916][T11314] syz.2.1548: attempt to access beyond end of device [ 786.985916][T11314] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 786.998849][T11314] qnx6: unable to read the first superblock [ 787.004985][T11314] syz.2.1548: attempt to access beyond end of device [ 787.004985][T11314] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 787.017781][T11314] qnx6: unable to read the first superblock [ 787.023739][T11314] qnx6: unable to read the first superblock [ 787.397043][ T5899] usb 4-1: USB disconnect, device number 18 [ 787.675114][T11320] 8021q: VLANs not supported on caif0 [ 788.219407][T11335] tmpfs: Bad value for 'nr_inodes' [ 788.297889][T11330] vlan2: entered promiscuous mode [ 788.319934][T11330] vlan2: entered allmulticast mode [ 788.325246][T11330] hsr_slave_1: entered allmulticast mode [ 789.117964][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 789.931659][T11340] 8021q: VLANs not supported on caif0 [ 790.819817][ T5895] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 790.991093][ T8627] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 791.365228][ T5895] usb 2-1: config 0 has no interfaces? [ 791.392658][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 791.420384][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.469629][ T8627] usb 5-1: config 0 has no interfaces? [ 791.500484][ T5895] usb 2-1: Product: syz [ 791.504975][ T5895] usb 2-1: Manufacturer: syz [ 791.516502][ T8627] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 791.534082][ T8627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.583131][ T5895] usb 2-1: SerialNumber: syz [ 791.603377][ T8627] usb 5-1: Product: syz [ 791.607566][ T8627] usb 5-1: Manufacturer: syz [ 791.621947][ T5895] usb 2-1: config 0 descriptor?? [ 791.647343][ T8627] usb 5-1: SerialNumber: syz [ 791.700653][ T8627] usb 5-1: config 0 descriptor?? [ 792.139291][T11368] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 792.610578][ T5837] usb 6-1: USB disconnect, device number 17 [ 792.690901][T11371] tmpfs: Bad value for 'nr_inodes' [ 794.900586][ T8627] usb 2-1: USB disconnect, device number 22 [ 795.121761][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 795.170002][T11392] 8021q: VLANs not supported on caif0 [ 795.519916][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 795.731137][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.791807][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 795.868810][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 795.916061][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.974037][ T24] usb 6-1: config 0 descriptor?? [ 796.037856][ T24] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 796.498165][ T5895] usb 5-1: USB disconnect, device number 8 [ 796.937205][T11400] loop7: detected capacity change from 0 to 16384 [ 798.191932][T11423] syz.0.1584: attempt to access beyond end of device [ 798.191932][T11423] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 798.204838][T11423] qnx6: unable to read the first superblock [ 798.210974][T11423] syz.0.1584: attempt to access beyond end of device [ 798.210974][T11423] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 798.223763][T11423] qnx6: unable to read the first superblock [ 798.229656][T11423] qnx6: unable to read the first superblock [ 798.329761][ T5899] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 798.924770][ T5899] usb 2-1: config 0 has no interfaces? [ 798.952985][ T5899] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 798.970682][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.978716][ T5899] usb 2-1: Product: syz [ 799.003623][ T5899] usb 2-1: Manufacturer: syz [ 799.008236][ T5899] usb 2-1: SerialNumber: syz [ 799.050442][ T5899] usb 2-1: config 0 descriptor?? [ 800.258632][ T5895] usb 6-1: USB disconnect, device number 18 [ 800.849962][ T5895] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 801.026750][ T5895] usb 6-1: config 0 has no interfaces? [ 801.041465][ T5895] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 801.050853][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.191963][ T5895] usb 6-1: Product: syz [ 801.303317][ T5895] usb 6-1: Manufacturer: syz [ 801.529744][ T5895] usb 6-1: SerialNumber: syz [ 801.610803][ T5895] usb 6-1: config 0 descriptor?? [ 801.618603][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1591'. [ 801.662656][T11444] 8021q: VLANs not supported on caif0 [ 801.931914][T11447] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 804.295442][ T5899] usb 6-1: USB disconnect, device number 19 [ 804.344482][ T24] usb 2-1: USB disconnect, device number 23 [ 804.361905][T11462] tmpfs: Bad value for 'nr_inodes' [ 804.424711][T11464] xt_bpf: check failed: parse error [ 804.861201][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 805.228302][ T24] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 805.372432][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 805.461020][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 805.519327][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.568714][ T24] usb 2-1: config 0 descriptor?? [ 805.595604][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 805.834961][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1606'. [ 805.844324][T11485] 8021q: VLANs not supported on caif0 [ 806.177957][T11491] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1609'. [ 806.189788][ T5899] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 806.475632][T11496] syz.2.1610: attempt to access beyond end of device [ 806.475632][T11496] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 806.488612][T11496] qnx6: unable to read the first superblock [ 806.494885][T11496] syz.2.1610: attempt to access beyond end of device [ 806.494885][T11496] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 806.507676][T11496] qnx6: unable to read the first superblock [ 806.513626][T11496] qnx6: unable to read the first superblock [ 806.712720][ T5899] usb 6-1: config 0 has no interfaces? [ 806.814734][ T5899] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 807.879803][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.887880][ T5899] usb 6-1: Product: syz [ 807.978880][ T5899] usb 6-1: Manufacturer: syz [ 808.002898][ T5899] usb 6-1: SerialNumber: syz [ 808.131825][ T5899] usb 6-1: config 0 descriptor?? [ 808.296009][ T5837] usb 2-1: USB disconnect, device number 24 [ 808.574488][T11487] [ 808.576851][T11487] ====================================================== [ 808.583861][T11487] WARNING: possible circular locking dependency detected [ 808.590869][T11487] 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 Not tainted [ 808.597972][T11487] ------------------------------------------------------ [ 808.604986][T11487] syz.5.1607/11487 is trying to acquire lock: [ 808.611042][T11487] ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x161/0x11f0 [ 808.620398][T11487] [ 808.620398][T11487] but task is already holding lock: [ 808.627755][T11487] ffff88807aca2d28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 808.637881][T11487] [ 808.637881][T11487] which lock already depends on the new lock. [ 808.637881][T11487] [ 808.648281][T11487] [ 808.648281][T11487] the existing dependency chain (in reverse order) is: [ 808.657291][T11487] [ 808.657291][T11487] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 808.665920][T11487] lock_acquire+0x116/0x2f0 [ 808.670952][T11487] __mutex_lock+0x1a5/0x10c0 [ 808.676068][T11487] smc_switch_to_fallback+0x35/0xda0 [ 808.681877][T11487] smc_sendmsg+0x11f/0x530 [ 808.686813][T11487] __sock_sendmsg+0x223/0x270 [ 808.692016][T11487] __sys_sendto+0x365/0x4c0 [ 808.697034][T11487] __x64_sys_sendto+0xde/0x100 [ 808.702313][T11487] do_syscall_64+0xf3/0x230 [ 808.707343][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.713758][T11487] [ 808.713758][T11487] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 808.721509][T11487] lock_acquire+0x116/0x2f0 [ 808.726531][T11487] lock_sock_nested+0x48/0x100 [ 808.731822][T11487] do_ipv6_setsockopt+0xccd/0x3680 [ 808.737463][T11487] ipv6_setsockopt+0x5d/0x170 [ 808.742676][T11487] do_sock_setsockopt+0x3b3/0x710 [ 808.748217][T11487] __x64_sys_setsockopt+0x1ee/0x280 [ 808.753933][T11487] do_syscall_64+0xf3/0x230 [ 808.758963][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.765380][T11487] [ 808.765380][T11487] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 808.772606][T11487] validate_chain+0xa69/0x24e0 [ 808.777894][T11487] __lock_acquire+0xad5/0xd80 [ 808.783088][T11487] lock_acquire+0x116/0x2f0 [ 808.788111][T11487] __mutex_lock+0x1a5/0x10c0 [ 808.793224][T11487] ip_mroute_setsockopt+0x161/0x11f0 [ 808.799036][T11487] do_ip_setsockopt+0x1114/0x39c0 [ 808.804583][T11487] ip_setsockopt+0x63/0x100 [ 808.809611][T11487] smc_setsockopt+0x25e/0xd50 [ 808.814810][T11487] do_sock_setsockopt+0x3b3/0x710 [ 808.820352][T11487] __x64_sys_setsockopt+0x1ee/0x280 [ 808.826066][T11487] do_syscall_64+0xf3/0x230 [ 808.831094][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.837502][T11487] [ 808.837502][T11487] other info that might help us debug this: [ 808.837502][T11487] [ 808.847723][T11487] Chain exists of: [ 808.847723][T11487] rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock [ 808.847723][T11487] [ 808.861398][T11487] Possible unsafe locking scenario: [ 808.861398][T11487] [ 808.868837][T11487] CPU0 CPU1 [ 808.874198][T11487] ---- ---- [ 808.879560][T11487] lock(&smc->clcsock_release_lock); [ 808.884945][T11487] lock(sk_lock-AF_INET6); [ 808.891982][T11487] lock(&smc->clcsock_release_lock); [ 808.899904][T11487] lock(rtnl_mutex); [ 808.903901][T11487] [ 808.903901][T11487] *** DEADLOCK *** [ 808.903901][T11487] [ 808.912036][T11487] 1 lock held by syz.5.1607/11487: [ 808.917137][T11487] #0: ffff88807aca2d28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 808.927723][T11487] [ 808.927723][T11487] stack backtrace: [ 808.933612][T11487] CPU: 1 UID: 0 PID: 11487 Comm: syz.5.1607 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 808.933641][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 808.933655][T11487] Call Trace: [ 808.933666][T11487] [ 808.933676][T11487] dump_stack_lvl+0x241/0x360 [ 808.933717][T11487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.933751][T11487] ? __pfx__printk+0x10/0x10 [ 808.933784][T11487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.933812][T11487] ? print_lock+0x171/0x1a0 [ 808.933841][T11487] print_circular_bug+0x2e1/0x300 [ 808.933874][T11487] check_noncircular+0x142/0x160 [ 808.933909][T11487] validate_chain+0xa69/0x24e0 [ 808.933942][T11487] ? __lock_acquire+0xad5/0xd80 [ 808.933970][T11487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.934000][T11487] __lock_acquire+0xad5/0xd80 [ 808.934028][T11487] lock_acquire+0x116/0x2f0 [ 808.934050][T11487] ? ip_mroute_setsockopt+0x161/0x11f0 [ 808.934091][T11487] __mutex_lock+0x1a5/0x10c0 [ 808.934121][T11487] ? ip_mroute_setsockopt+0x161/0x11f0 [ 808.934161][T11487] ? ip_mroute_setsockopt+0x161/0x11f0 [ 808.934194][T11487] ? __pfx___mutex_lock+0x10/0x10 [ 808.934247][T11487] ? lockdep_hardirqs_on+0x9d/0x150 [ 808.934277][T11487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.934304][T11487] ? rcu_is_watching+0x15/0xb0 [ 808.934333][T11487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.934360][T11487] ? trace_sched_exit_tp+0x3c/0x120 [ 808.934385][T11487] ip_mroute_setsockopt+0x161/0x11f0 [ 808.934426][T11487] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 808.934472][T11487] do_ip_setsockopt+0x1114/0x39c0 [ 808.934502][T11487] ? rcu_is_watching+0x15/0xb0 [ 808.934534][T11487] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 808.934566][T11487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.934593][T11487] ? lockdep_hardirqs_on+0x9d/0x150 [ 808.934621][T11487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.934650][T11487] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 808.934685][T11487] ? __pfx_ipv6_setsockopt+0x10/0x10 [ 808.934724][T11487] ip_setsockopt+0x63/0x100 [ 808.934752][T11487] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 808.934788][T11487] smc_setsockopt+0x25e/0xd50 [ 808.934818][T11487] ? __pfx_aa_sk_perm+0x10/0x10 [ 808.934848][T11487] ? __pfx_smc_setsockopt+0x10/0x10 [ 808.934875][T11487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.934903][T11487] ? aa_sock_opt_perm+0x79/0x120 [ 808.934937][T11487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.934965][T11487] ? __pfx_smc_setsockopt+0x10/0x10 [ 808.934992][T11487] do_sock_setsockopt+0x3b3/0x710 [ 808.935019][T11487] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 808.935040][T11487] ? __fget_files+0x2a/0x420 [ 808.935063][T11487] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.935090][T11487] ? __fget_files+0x39d/0x420 [ 808.935108][T11487] ? __fget_files+0x2a/0x420 [ 808.935132][T11487] __x64_sys_setsockopt+0x1ee/0x280 [ 808.935160][T11487] do_syscall_64+0xf3/0x230 [ 808.935193][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.935227][T11487] RIP: 0033:0x7f10b418d169 [ 808.935247][T11487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.935267][T11487] RSP: 002b:00007f10b1fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 808.935290][T11487] RAX: ffffffffffffffda RBX: 00007f10b43a6160 RCX: 00007f10b418d169 [ 808.935308][T11487] RDX: 00000000000000d3 RSI: 0000000000000000 RDI: 0000000000000008 [ 808.935322][T11487] RBP: 00007f10b420e990 R08: 0000000000000000 R09: 0000000000000000 [ 808.935337][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.935351][T11487] R13: 0000000000000000 R14: 00007f10b43a6160 R15: 00007ffe431dda58 [ 808.935375][T11487] [ 809.315963][T11518] tmpfs: Bad value for 'nr_inodes' [ 809.319312][T11516] xt_bpf: check failed: parse error [ 810.804224][ T8627] usb 6-1: USB disconnect, device number 20 [ 813.111624][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.117944][ T1294] ieee802154 phy1 wpan1: encryption failed: -22