last executing test programs: 11m7.143943116s ago: executing program 3 (id=98): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000640)=@ieee802154={0x24, @long={0xa}}, 0x80, 0x0}, 0x0) 11m6.99670182s ago: executing program 3 (id=101): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 11m6.823630851s ago: executing program 3 (id=105): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x7e, &(0x7f00000000c0)=""/126, 0x0, 0x9}, 0x94) 11m6.700605941s ago: executing program 3 (id=106): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 11m6.41947262s ago: executing program 3 (id=111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000090000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 11m5.389512801s ago: executing program 32 (id=120): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 11m5.222121989s ago: executing program 3 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x9c, 0x0, 0x1, 0x505, 0x4000000, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4010}, 0x2404005c) 11m4.653451061s ago: executing program 33 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x9c, 0x0, 0x1, 0x505, 0x4000000, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4010}, 0x2404005c) 9m14.880451154s ago: executing program 0 (id=1628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/145}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, 0x0, &(0x7f0000000340)=""/55}, 0x20) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$sock_attach_bpf(r1, 0x84, 0x23, &(0x7f0000000000), 0x8) 9m14.655336914s ago: executing program 0 (id=1632): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, r0, 0x4}, 0x10) 9m14.423533083s ago: executing program 0 (id=1634): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#'], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 9m14.117940817s ago: executing program 0 (id=1643): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 9m13.975482142s ago: executing program 0 (id=1647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000040000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9m13.860478144s ago: executing program 4 (id=1650): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x6, 0x1, 0x0, r3}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m13.759443027s ago: executing program 4 (id=1652): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x5}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000008700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015005c07350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 9m13.62524186s ago: executing program 4 (id=1655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0xfffffffa, {0x0, 0x0, 0x12, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xf0, 0x5, 0x1, 0x7}, 0x3, 0x1, 0xf0a, 0x8, 0x1000006, 0x17, 0x1a, 0x15, 0x6, 0x7, {0x2, 0xa, 0x40, 0xffff862d, 0x7, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) 9m13.157541437s ago: executing program 4 (id=1659): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 9m12.957756798s ago: executing program 0 (id=1662): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, r0, 0x4}, 0x10) 9m12.956334474s ago: executing program 4 (id=1663): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x6, 0x1, 0x0, r2}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m12.485400822s ago: executing program 34 (id=1662): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, r0, 0x4}, 0x10) 9m11.611294749s ago: executing program 4 (id=1674): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0xfffffffa, {0x0, 0x0, 0x12, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xf0, 0x5, 0x1, 0x7}, 0x3, 0x1, 0xf0a, 0x8, 0x1000006, 0x17, 0x1a, 0x15, 0x6, 0x7, {0x2, 0xa, 0x40, 0xffff862d, 0x7, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) 9m11.267456722s ago: executing program 35 (id=1674): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0xfffffffa, {0x0, 0x0, 0x12, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xf0, 0x5, 0x1, 0x7}, 0x3, 0x1, 0xf0a, 0x8, 0x1000006, 0x17, 0x1a, 0x15, 0x6, 0x7, {0x2, 0xa, 0x40, 0xffff862d, 0x7, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) 9m9.157947442s ago: executing program 5 (id=1692): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x5}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015005c07350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 9m9.013112174s ago: executing program 5 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c0500000000000000007f51010049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 9m8.832498133s ago: executing program 5 (id=1694): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x53, 0x3, "ed02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277f1839749"}]}], {0x14}}, 0xbc}}, 0x0) 9m8.646751412s ago: executing program 5 (id=1696): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 9m8.53439579s ago: executing program 5 (id=1698): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 9m8.294766234s ago: executing program 2 (id=1702): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e20, 0xd, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x80, 0x0}, 0x40040) 9m8.147959681s ago: executing program 2 (id=1704): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x6, 0x1, 0x0, r3}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m8.133343784s ago: executing program 2 (id=1705): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x53, 0x3, "ed02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277f1839749"}]}], {0x14}}, 0xbc}}, 0x0) 9m8.028623699s ago: executing program 2 (id=1706): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 9m7.988297139s ago: executing program 2 (id=1707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000040000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9m6.78212438s ago: executing program 5 (id=1708): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#'], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 9m6.641874939s ago: executing program 36 (id=1708): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#'], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 9m6.435452886s ago: executing program 2 (id=1710): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xff00) sendmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)="1400", 0x2}, {&(0x7f00000001c0)="8539cb4b34f6ded66a9df5b0491189ec6d0a529effc9ab649e0708f0bb8ed6db7b2d805cd13d272a51b60e946b2ae25585654a8e55e1c4a1d3861cdc93a533a4f8030cc3406707b9fc5c1e92f80401a0cf9c12dae03acde62ca5dcd04ebf5619b5f0fdbecb323995983d3ca82c9354f12b9457db26c3ac8c22da413fddb10d059cd9dfc1f23407d9e6e3db997547cd7fa810e2f55a0f86f2dfe132d78283aee2401facf80f61bf0c49f302351c4d3ee30b5ace3f5d698e3b0a83157199d4d270d25ff366ce73048ccd4d97c6d6c1fdf8b68075fe531b8b849017878a826f5a2674c701b5d93aedea", 0xe8}], 0x2}, 0x20000000) 9m6.138802827s ago: executing program 37 (id=1710): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xff00) sendmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)="1400", 0x2}, {&(0x7f00000001c0)="8539cb4b34f6ded66a9df5b0491189ec6d0a529effc9ab649e0708f0bb8ed6db7b2d805cd13d272a51b60e946b2ae25585654a8e55e1c4a1d3861cdc93a533a4f8030cc3406707b9fc5c1e92f80401a0cf9c12dae03acde62ca5dcd04ebf5619b5f0fdbecb323995983d3ca82c9354f12b9457db26c3ac8c22da413fddb10d059cd9dfc1f23407d9e6e3db997547cd7fa810e2f55a0f86f2dfe132d78283aee2401facf80f61bf0c49f302351c4d3ee30b5ace3f5d698e3b0a83157199d4d270d25ff366ce73048ccd4d97c6d6c1fdf8b68075fe531b8b849017878a826f5a2674c701b5d93aedea", 0xe8}], 0x2}, 0x20000000) 19.411891663s ago: executing program 8 (id=3642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.773922497s ago: executing program 9 (id=3646): syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c36e8240ac051c92fb9d0000000109023600010000000009040000040341000009050a0000000000000905ffff"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$sndctrl(&(0x7f0000000140), 0x8, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x800) getpid() close(0x3) 16.732042474s ago: executing program 1 (id=3647): r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)=0x12, 0x800) connect$x25(r0, &(0x7f00000000c0), 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000240)=0x4800, 0x4) socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfd}, 0xa) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x4, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000180)={0x1f, @any, 0xff}, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002780), 0xaa500, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000380)={0xa, 0x4e24, 0x7, @empty, 0x3}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x24040040) ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f00000003c0)={0x2001, "160415600000191700000000000100", 0x2, 0x8, 0x1, 0xc6, 0x10, 0x0, 0x8001, 0x5}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) read(r8, 0x0, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) execve(0x0, 0x0, 0x0) 16.720409206s ago: executing program 6 (id=3648): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000001040)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000270000000000000000000040"], 0x0) socket(0xf, 0x3, 0x400) read$dsp(r2, &(0x7f00000001c0)=""/62, 0x3e) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) syz_usb_connect$uac2(0x5, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003000000209904541040000102030109028d00030104007f080b0101010a20020904000000010120000924010700060200b20c24030500040a25007f008009040100000102200009040100000002200008240201e60304061024010505000400000005050000004409050109000206998008250101181e00000904020000010220000904020101010220000905820900020e045208250104ce"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) mkdir(&(0x7f0000000000)='my_proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_proc/asound/cards\x00', 0x0, 0x0) read(r5, &(0x7f0000000500), 0x400) r6 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@mcast1, 0x4e23, 0x8, 0x4e20, 0x5e, 0x2, 0x20, 0x120, 0x3b, r4, r6}, {0x1ff, 0x230, 0x9ff, 0x0, 0x8, 0x2, 0xd, 0x8}, {0x5, 0x6, 0x8, 0x401}, 0x7, 0x0, 0x2, 0x0, 0x2}, {{@in6=@loopback, 0x4d6, 0x32}, 0xa, @in6=@remote, 0x3504, 0x3, 0x3, 0x6, 0x8e7, 0x0, 0x6}}, 0xe8) 16.363284727s ago: executing program 7 (id=3649): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000385000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.84618835s ago: executing program 1 (id=3650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x17fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) 14.660390999s ago: executing program 8 (id=3651): syz_io_uring_setup(0xcac, &(0x7f0000000540)={0x0, 0x469ea, 0xc00, 0x2, 0x12}, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2, 0x3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 14.608035627s ago: executing program 8 (id=3652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 13.429180999s ago: executing program 8 (id=3653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x40106183, &(0x7f00000000c0)={@none, 0x1}) 13.293206929s ago: executing program 9 (id=3654): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x2001) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 13.279288998s ago: executing program 6 (id=3655): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x17d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x80c019, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) 11.683401194s ago: executing program 6 (id=3656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019440)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r2) setgroups(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e", @ANYBLOB], 0x16) 10.113612159s ago: executing program 6 (id=3658): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "001e5d00", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) 10.088407527s ago: executing program 9 (id=3659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040), 0x4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 9.872863333s ago: executing program 1 (id=3660): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) modify_ldt$read(0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_TRANSMIT(r6, 0xc0386105, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$read(0x0, &(0x7f0000019200)=""/129, 0x81) 8.653556262s ago: executing program 7 (id=3661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000040000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100000000001400000011"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 6.262577289s ago: executing program 7 (id=3662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.249490792s ago: executing program 1 (id=3663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 6.167414481s ago: executing program 8 (id=3664): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(0xffffffffffffffff, &(0x7f0000002080), 0x0, 0x12002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.00129102s ago: executing program 1 (id=3665): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vud', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr', 0x6) 4.902139545s ago: executing program 7 (id=3666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8", 0x3}, {0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202", 0x42}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d", 0x2d}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.900611456s ago: executing program 9 (id=3667): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_ENDIAN(0x14, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f00000041c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000"], 0x0, 0x4e}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="04000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010800000100"/28], 0x50) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5}) syz_open_dev$mtd(&(0x7f0000000040), 0xffffffff, 0x40) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) 4.003108984s ago: executing program 6 (id=3668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019440)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r2) setgroups(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0xfffe}]}, 0x1, 0x0, 0x2}, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0x0, "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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x5, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xc) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f00000003c0), &(0x7f0000000540)=0x8) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r10 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f00000000c0)='workdir', 0x0, r11) write$dsp(r11, &(0x7f0000000440)="0d8eba769e7ab8f77ef822e29fb4b3a0ecc24040ce926c23300bb3b4ac16715f8bf075667cdb8189e766c96f9cc19f28948e12c1cd0692a4601f88baa86d989d248bec0332c6fb3bf3d28e51997a0a405d068c54ae2503c2cf2a14edf7564e5bb5ede705c0550e700519d2efe81444ce9ebb1a0babdac9cceef253e7f4b0167d269ed5d85de81215bbdf81faeaa66976af83d53dc2aa60f8eb2911cb0c1e1c2c0e037feda0547c35ab6747855d1d32e395c036164e2cd947d9e2ce9884a6e38322b0775b4331d28e8a35f7d379209877b1de796839593d669743571dd64ab580fb46", 0xe2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x112, 0x2, 0x0, &(0x7f0000000080)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000080)='\x00') r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r12, 0xffffffffffffffff, 0x0) 2.311905734s ago: executing program 8 (id=3670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x17fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) 2.185044298s ago: executing program 7 (id=3671): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x54f554893171c338, 0x11, 0xa2, {0xa2, 0x7, "fbce8571fe062660047d3d38a221bf2e1a004d1676f52bb687bdfa04ac2de9e59306befe919b48e2310291eddf5a09089b24ad7bf0b3d51e4d79e6f0ff2fd64e6b3d8c7d0d74b36cf32e1c3c580b5bf67e8247caa96d5c1f2e5c82b301b5bcf9ccfa785866f53b8226e0808dfd04bae36ee72c0026a1128c67f21c7526614650752e8201a248dddf992dbfe7e71e645ced49745aef117194f4f6076b2381f6db"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0x1, 0xf1, "ceb535338cd6495fbb7584974a0af91bffaedd388d5c161a21f3fc0cedc6dc3ab94a68e37f9808f26d0567ee70467634624f4672ffbcaf0cfd4a9df20af75db612f1aa4ec6da4be2929676e454b6e3b73d9ce6632ad09cf5fae9a9cf7fde6515eaed3ec98f2f41f72d5ca37cf7bbdb0e4281df83e3728c60fd7d7a5d85591cf88d579854a80db2dd4770f526feafc305e02b9f6f48b817dc1d740a6b90bcf21cea121d96918e8e58e5fe088081cb6c811ec0dde7ddcf9c4d4f3618575ec981294e00823921c344e01cc9a12cefc90891544ca0bec6f3b392026f23327ef67efc80ff228c040bc5582b4117f5b8c78e7eb4"}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0xc0, 0x5, 0x5, "3bdbd420a8"}, 0x0}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0xfffe}]}, 0x1, 0x0, 0x2}, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0x0, "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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x5, 0x0, 0x0) listen(r0, 0xc) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f00000003c0), &(0x7f0000000540)=0x8) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r10 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f00000000c0)='workdir', 0x0, r11) write$dsp(r11, &(0x7f0000000440)="0d8eba769e7ab8f77ef822e29fb4b3a0ecc24040ce926c23300bb3b4ac16715f8bf075667cdb8189e766c96f9cc19f28948e12c1cd0692a4601f88baa86d989d248bec0332c6fb3bf3d28e51997a0a405d068c54ae2503c2cf2a14edf7564e5bb5ede705c0550e700519d2efe81444ce9ebb1a0babdac9cceef253e7f4b0167d269ed5d85de81215bbdf81faeaa66976af83d53dc2aa60f8eb2911cb0c1e1c2c0e037feda0547c35ab6747855d1d32e395c036164e2cd947d9e2ce9884a6e38322b0775b4331d28e8a35f7d379209877b1de796839593d669743571dd64ab580fb46", 0xe2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x112, 0x2, 0x0, &(0x7f0000000080)) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r12, 0xffffffffffffffff, 0x0) 1.806249793s ago: executing program 1 (id=3672): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x805, 0x0) mount(0x0, &(0x7f0000000100)='./gadget\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e", @ANYBLOB], 0x16) 574.70686ms ago: executing program 9 (id=3673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000040000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 0s ago: executing program 9 (id=3674): syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0b86dd1b872430bec47f540000000000004e279451ffffac1e0101ff02200000000000000001860090780100fcfff9ff1fff06000000ddaba82efe09a510bc"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000350000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x5a, 0x36, 0x20}) gettid() ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "001e5d00", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc00000008000500"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000001c0)={0x1, 0xfffffffffffffff7, 0xc9, &(0x7f0000000040)=""/201}) kernel console output (not intermixed with test programs): 0 [ 307.368642][ T5732] usb 2-1: config 0 has no interface number 0 [ 307.368688][ T5732] usb 2-1: config 0 interface 12 has no altsetting 0 [ 307.475981][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.476011][ T5732] usb 2-1: Product: syz [ 307.476026][ T5732] usb 2-1: Manufacturer: syz [ 307.476041][ T5732] usb 2-1: SerialNumber: syz [ 307.628473][ T5732] usb 2-1: config 0 descriptor?? [ 308.093780][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2324'. [ 308.126269][ T5732] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 308.126324][ T5732] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 308.126341][ T5732] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 308.126435][ T5732] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 308.251370][ T5732] usb 2-1: USB disconnect, device number 2 [ 308.716077][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2328'. [ 309.079430][T11878] 9p: Bad value for 'rfdno' [ 309.347369][ T5694] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 309.503027][ T5694] usb 2-1: Using ep0 maxpacket: 16 [ 309.505978][ T5694] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 309.535542][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.535566][ T5694] usb 2-1: Product: syz [ 309.535579][ T5694] usb 2-1: Manufacturer: syz [ 309.535592][ T5694] usb 2-1: SerialNumber: syz [ 309.590455][ T5694] usb 2-1: config 0 descriptor?? [ 309.861968][ T3377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.967026][ T3377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.023188][ T5694] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 310.025975][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2340'. [ 310.071249][ T5694] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 310.074610][ T5694] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 310.074664][ T5694] usb 2-1: media controller created [ 310.091908][ T3377] bond0 (unregistering): Released all slaves [ 310.121141][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.264235][ T5694] zl10353_read_register: readreg error (reg=127, ret==0) [ 310.264286][ T5694] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 310.264298][ T5694] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 310.356574][ T5694] usb 2-1: USB disconnect, device number 3 [ 310.364844][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 310.724702][ T5694] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 311.319492][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2352'. [ 311.477528][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2355'. [ 313.047586][ T5248] 8021q: adding VLAN 0 to HW filter on device eth19 [ 313.096573][T11966] Bluetooth: MGMT ver 1.23 [ 313.096608][T11966] Bluetooth: hci0: unsupported parameter 255 [ 313.096624][T11966] Bluetooth: hci0: unsupported parameter 255 [ 315.448900][T12006] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2376'. [ 315.762602][ T3377] hsr_slave_0: left promiscuous mode [ 315.802830][ T3377] hsr_slave_1: left promiscuous mode [ 315.803826][ T3377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.803850][ T3377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.854982][ T3377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.855010][ T3377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.896902][T12014] Bluetooth: hci0: unsupported parameter 255 [ 315.896923][T12014] Bluetooth: hci0: unsupported parameter 255 [ 316.172367][ T3377] veth1_macvtap: left promiscuous mode [ 316.172471][ T3377] veth0_macvtap: left promiscuous mode [ 316.172740][ T3377] veth1_vlan: left promiscuous mode [ 316.172925][ T3377] veth0_vlan: left promiscuous mode [ 317.176661][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.176730][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.563804][ T3377] team0 (unregistering): Port device team_slave_1 removed [ 319.721211][ T3377] team0 (unregistering): Port device team_slave_0 removed [ 320.777521][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2398'. [ 322.867760][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2415'. [ 324.579968][ T5713] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 324.736244][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 324.737070][ T5713] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 324.757504][ T5713] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 324.757529][ T5713] usb 2-1: config 0 has no interface number 0 [ 324.757572][ T5713] usb 2-1: config 0 interface 12 has no altsetting 0 [ 324.788710][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.788738][ T5713] usb 2-1: Product: syz [ 324.788752][ T5713] usb 2-1: Manufacturer: syz [ 324.788766][ T5713] usb 2-1: SerialNumber: syz [ 324.864019][ T5713] usb 2-1: config 0 descriptor?? [ 324.912956][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 325.260051][ T5596] Bluetooth: hci3: connection err: -111 [ 325.623225][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 325.692717][T12123] kAFS: No cell specified [ 325.723131][ T5713] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 325.723181][ T5713] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 325.723196][ T5713] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 325.723266][ T5713] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 325.801182][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 325.802779][ T10] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 325.819597][ T10] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 325.819716][ T10] usb 8-1: config 0 has no interface number 0 [ 325.819763][ T10] usb 8-1: config 0 interface 12 has no altsetting 0 [ 325.924781][ T5713] usb 2-1: USB disconnect, device number 4 [ 325.938710][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.938735][ T10] usb 8-1: Product: syz [ 325.938748][ T10] usb 8-1: Manufacturer: syz [ 325.938762][ T10] usb 8-1: SerialNumber: syz [ 326.266998][ T10] usb 8-1: config 0 descriptor?? [ 326.890735][ T10] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 326.890788][ T10] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 326.890805][ T10] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 326.890895][ T10] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 326.944940][T12211] trusted_key: encrypted_key: insufficient parameters specified [ 326.946088][ T10] usb 8-1: USB disconnect, device number 4 [ 327.118919][T12222] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2443'. [ 327.269281][T12228] netlink: 3084 bytes leftover after parsing attributes in process `syz.6.2443'. [ 331.958799][T12239] netlink: zone id is out of range [ 331.958813][T12239] netlink: zone id is out of range [ 331.958820][T12239] netlink: zone id is out of range [ 331.958828][T12239] netlink: get zone limit has 8 unknown bytes [ 332.081087][ T5248] 8021q: adding VLAN 0 to HW filter on device eth20 [ 335.305443][ T5725] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 335.451530][ T5725] usb 8-1: Using ep0 maxpacket: 32 [ 335.457243][ T5725] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 335.475230][ T5725] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 335.475258][ T5725] usb 8-1: config 0 has no interface number 0 [ 335.475305][ T5725] usb 8-1: config 0 interface 12 has no altsetting 0 [ 335.528615][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2463'. [ 335.545541][ T5725] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.545567][ T5725] usb 8-1: Product: syz [ 335.545580][ T5725] usb 8-1: Manufacturer: syz [ 335.545592][ T5725] usb 8-1: SerialNumber: syz [ 335.595726][ T5725] usb 8-1: config 0 descriptor?? [ 337.954631][ T5725] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 337.954684][ T5725] f81534 8-1:0.12: f81534_find_config_idx: read failed: -32 [ 337.954701][ T5725] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 337.954789][ T5725] f81534 8-1:0.12: probe with driver f81534 failed with error -32 [ 338.147426][T12275] option changes via remount are deprecated (pid=12273 comm=syz.7.2460) [ 338.374295][ T5732] usb 8-1: USB disconnect, device number 5 [ 339.671803][ T5589] Bluetooth: hci1: command 0x0406 tx timeout [ 340.410380][T12325] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd7": -EINTR [ 341.661233][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2483'. [ 344.350166][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 345.214786][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 345.282788][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 345.282828][ T5604] Bluetooth: hci0: command 0x0406 tx timeout [ 345.383434][ T10] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 345.408008][ T10] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 345.408036][ T10] usb 7-1: config 0 has no interface number 0 [ 345.408106][ T10] usb 7-1: config 0 interface 12 has no altsetting 0 [ 345.465166][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.465194][ T10] usb 7-1: Product: syz [ 345.465209][ T10] usb 7-1: Manufacturer: syz [ 345.465223][ T10] usb 7-1: SerialNumber: syz [ 345.572100][ T10] usb 7-1: config 0 descriptor?? [ 346.435028][T12379] kAFS: No cell specified [ 346.486297][ T10] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 346.486352][ T10] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 346.486369][ T10] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 346.486451][ T10] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 346.561585][ T10] usb 7-1: USB disconnect, device number 2 [ 347.824816][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2497'. [ 348.106427][T12419] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.107493][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.382756][T12419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.391459][T12419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.230021][ T13] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.231292][ T13] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.231334][ T13] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.231368][ T13] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.534688][T12459] trusted_key: encrypted_key: insufficient parameters specified [ 349.597316][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2508'. [ 350.006448][ T5596] Bluetooth: hci0: connection err: -111 [ 350.028492][T12478] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2510'. [ 351.642484][T12518] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2520'. [ 352.063429][ T5596] Bluetooth: hci3: connection err: -111 [ 356.056629][T12581] trusted_key: encrypted_key: insufficient parameters specified [ 362.313127][T12673] input: syz1 as /devices/virtual/input/input5 [ 362.756842][T10725] udevd[10725]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 366.814931][ T4953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 366.814951][ T4953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 366.815016][ T4953] loop0: [ 370.950268][ T4953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 370.950288][ T4953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 370.950343][ T4953] loop0: [ 371.561317][T12768] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 371.566210][T12768] CIFS: Attempting to mount //127.0.0.1/share [ 372.835895][T12768] CIFS: VFS: Error connecting to socket. Aborting operation. [ 372.836066][T12768] CIFS: VFS: cifs_mount failed w/return code = -4 [ 377.265194][T12800] jffs2: notice: (12800) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 377.490066][ T4953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 377.490086][ T4953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 377.490145][ T4953] loop0: [ 378.618010][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.645304][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.860815][T12891] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd8": -EINTR [ 385.290893][T12892] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd7": -EINTR [ 388.851492][ T997] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 389.049982][ T997] usb 9-1: Using ep0 maxpacket: 32 [ 389.051783][ T997] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 389.112060][ T997] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 389.112088][ T997] usb 9-1: config 0 has no interface number 0 [ 389.112137][ T997] usb 9-1: config 0 interface 12 has no altsetting 0 [ 389.222876][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2626'. [ 389.883612][ T997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.883639][ T997] usb 9-1: Product: syz [ 389.883653][ T997] usb 9-1: Manufacturer: syz [ 389.883667][ T997] usb 9-1: SerialNumber: syz [ 389.926206][ T997] usb 9-1: config 0 descriptor?? [ 390.395756][T12954] option changes via remount are deprecated (pid=12953 comm=syz.8.2624) [ 390.406634][ T997] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 390.406687][ T997] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 390.406703][ T997] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 390.406864][ T997] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 390.526095][ T997] usb 9-1: USB disconnect, device number 2 [ 390.679659][T12970] bond1 (unregistering): Released all slaves [ 394.150015][ T5718] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 396.319895][ T5718] usb 7-1: Using ep0 maxpacket: 32 [ 396.320726][ T5718] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 396.322165][ T5718] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 396.322188][ T5718] usb 7-1: config 0 has no interface number 0 [ 396.322234][ T5718] usb 7-1: config 0 interface 12 has no altsetting 0 [ 396.325174][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.325197][ T5718] usb 7-1: Product: syz [ 396.325211][ T5718] usb 7-1: Manufacturer: syz [ 396.325225][ T5718] usb 7-1: SerialNumber: syz [ 396.337397][ T5718] usb 7-1: config 0 descriptor?? [ 396.823347][T13028] option changes via remount are deprecated (pid=13027 comm=syz.6.2640) [ 396.874134][ T5718] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 396.874735][ T5718] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 396.874746][ T5718] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 396.874797][ T5718] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 396.991288][ T5718] usb 7-1: USB disconnect, device number 3 [ 399.549994][ T1235] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 400.553499][ T1235] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 400.555297][ T1235] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.555349][ T1235] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 400.555371][ T1235] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 400.555394][ T1235] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.555436][ T1235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.989963][ T997] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 401.219919][ T997] usb 10-1: Using ep0 maxpacket: 16 [ 401.220826][ T997] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 401.227318][ T997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.227342][ T997] usb 10-1: Product: syz [ 401.227355][ T997] usb 10-1: Manufacturer: syz [ 401.227369][ T997] usb 10-1: SerialNumber: syz [ 401.254190][ T997] usb 10-1: config 0 descriptor?? [ 401.269978][ T5718] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 401.284331][ T1235] gud 8-1:1.0: Failed to add properties (error=-121) [ 401.284371][ T1235] gud 8-1:1.0: probe with driver gud failed with error -121 [ 401.430283][ T5718] usb 7-1: Using ep0 maxpacket: 32 [ 401.432009][ T5718] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 401.452975][ T5718] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 401.453001][ T5718] usb 7-1: config 0 has no interface number 0 [ 401.453102][ T5718] usb 7-1: config 0 interface 12 has no altsetting 0 [ 401.468083][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.468108][ T5718] usb 7-1: Product: syz [ 401.468122][ T5718] usb 7-1: Manufacturer: syz [ 401.468829][ T5718] usb 7-1: SerialNumber: syz [ 401.555144][ T1235] usb 8-1: USB disconnect, device number 6 [ 401.638173][ T5718] usb 7-1: config 0 descriptor?? [ 401.681951][ T997] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 401.935082][ T997] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.941822][ T997] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 401.942006][ T997] usb 10-1: media controller created [ 402.023106][ T997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.065425][T13120] option changes via remount are deprecated (pid=13119 comm=syz.6.2662) [ 402.125517][ T5718] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 402.125571][ T5718] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 402.125587][ T5718] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 402.125677][ T5718] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 402.296528][ T5718] usb 7-1: USB disconnect, device number 4 [ 402.355634][ T997] zl10353_read_register: readreg error (reg=127, ret==0) [ 402.355794][ T997] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 402.355858][ T997] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 402.632610][ T997] usb 10-1: USB disconnect, device number 2 [ 403.838121][T13174] trusted_key: encrypted_key: insufficient parameters specified [ 404.018523][ T5596] Bluetooth: hci4: connection err: -111 [ 404.070863][ T997] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 404.959985][ T1235] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 405.076006][T13221] trusted_key: encrypted_key: insufficient parameters specified [ 405.079981][ T5695] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 405.132968][ T1235] usb 9-1: Using ep0 maxpacket: 16 [ 405.133781][ T1235] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 405.138932][ T1235] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.138957][ T1235] usb 9-1: Product: syz [ 405.138970][ T1235] usb 9-1: Manufacturer: syz [ 405.138984][ T1235] usb 9-1: SerialNumber: syz [ 405.188704][ T1235] usb 9-1: config 0 descriptor?? [ 405.268129][ T5596] Bluetooth: hci2: connection err: -111 [ 405.310950][ T5695] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 405.312844][ T5695] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.312896][ T5695] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 405.313135][ T5695] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 405.313159][ T5695] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.313201][ T5695] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.683281][ T1235] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 406.139546][ T5695] gud 8-1:1.0: Failed to add properties (error=-121) [ 406.139589][ T5695] gud 8-1:1.0: probe with driver gud failed with error -121 [ 406.168102][ T1235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 406.169676][ T1235] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 406.169719][ T1235] usb 9-1: media controller created [ 406.272858][ T1235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.320356][ T1235] zl10353_read_register: readreg error (reg=127, ret==0) [ 406.320406][ T1235] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 406.320417][ T1235] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 406.430297][ T1235] usb 9-1: USB disconnect, device number 3 [ 406.469427][ T31] usb 8-1: USB disconnect, device number 7 [ 406.516750][ T1235] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 406.945510][T13267] trusted_key: encrypted_key: insufficient parameters specified [ 407.082516][ T5596] Bluetooth: hci4: connection err: -111 [ 409.369414][ T5596] Bluetooth: hci2: connection err: -111 [ 409.539981][ T5718] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 409.690824][ T5718] usb 10-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 409.694806][ T5718] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 409.694935][ T5718] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 409.698879][ T5718] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.698904][ T5718] usb 10-1: Product: syz [ 409.698917][ T5718] usb 10-1: Manufacturer: syz [ 409.698931][ T5718] usb 10-1: SerialNumber: syz [ 411.274173][T13353] CIFS: Attempting to mount //127.0.0.1/share [ 411.380147][ T1235] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 411.847969][ T1235] usb 2-1: Using ep0 maxpacket: 32 [ 411.865199][ T1235] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 411.886461][ T1235] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 411.886488][ T1235] usb 2-1: config 0 has no interface number 0 [ 411.886534][ T1235] usb 2-1: config 0 interface 12 has no altsetting 0 [ 411.893038][ T1235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.893062][ T1235] usb 2-1: Product: syz [ 411.893076][ T1235] usb 2-1: Manufacturer: syz [ 411.893099][ T1235] usb 2-1: SerialNumber: syz [ 411.899443][T13343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.927910][T13343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.992812][ T1235] usb 2-1: config 0 descriptor?? [ 412.424437][T13349] option changes via remount are deprecated (pid=13348 comm=syz.1.2724) [ 412.463968][ T1235] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 412.464018][ T1235] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 412.464028][ T1235] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 412.464089][ T1235] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 412.538774][ T1235] usb 2-1: USB disconnect, device number 5 [ 412.668419][T13353] CIFS: VFS: Error connecting to socket. Aborting operation. [ 412.668520][T13353] CIFS: VFS: cifs_mount failed w/return code = -4 [ 412.996164][ T5718] usb 10-1: Unsupported UAC3 BADD profile [ 413.214792][T13371] input: syz0 as /devices/virtual/input/input6 [ 415.130012][ T1235] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 415.271955][T13406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2745'. [ 415.302275][ T1235] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 415.314272][ T1235] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.314299][ T1235] usb 7-1: Product: syz [ 415.314313][ T1235] usb 7-1: Manufacturer: syz [ 415.314326][ T1235] usb 7-1: SerialNumber: syz [ 415.494783][ T5718] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 415.651236][ T5718] usb 10-1: USB disconnect, device number 3 [ 415.841002][T10725] udevd[10725]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.051330][ T5702] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 416.241577][ T5702] usb 9-1: Using ep0 maxpacket: 32 [ 416.244305][ T5702] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 416.245330][ T5702] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 416.245344][ T5702] usb 9-1: config 0 has no interface number 0 [ 416.245369][ T5702] usb 9-1: config 0 interface 12 has no altsetting 0 [ 416.251801][ T5702] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.251815][ T5702] usb 9-1: Product: syz [ 416.251823][ T5702] usb 9-1: Manufacturer: syz [ 416.251830][ T5702] usb 9-1: SerialNumber: syz [ 416.506510][ T5702] usb 9-1: config 0 descriptor?? [ 416.990132][T13412] option changes via remount are deprecated (pid=13411 comm=syz.8.2747) [ 417.041975][ T5702] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 417.042127][ T5702] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 417.042145][ T5702] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 417.042334][ T5702] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 417.107370][ T1235] rtl8150 7-1:1.0: couldn't reset the device [ 417.107868][ T1235] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 417.172807][ T5702] usb 9-1: USB disconnect, device number 4 [ 417.241758][ T1235] usb 7-1: USB disconnect, device number 5 [ 426.079999][ T997] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 426.229936][ T997] usb 10-1: Using ep0 maxpacket: 32 [ 426.230880][ T997] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 426.232371][ T997] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 426.232394][ T997] usb 10-1: config 0 has no interface number 0 [ 426.232437][ T997] usb 10-1: config 0 interface 12 has no altsetting 0 [ 426.235349][ T997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.235373][ T997] usb 10-1: Product: syz [ 426.235387][ T997] usb 10-1: Manufacturer: syz [ 426.235401][ T997] usb 10-1: SerialNumber: syz [ 426.274192][ T997] usb 10-1: config 0 descriptor?? [ 427.577342][T13490] option changes via remount are deprecated (pid=13486 comm=syz.9.2770) [ 427.584416][ T997] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 427.584470][ T997] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 427.584487][ T997] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 427.584578][ T997] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 427.825476][ T997] usb 10-1: USB disconnect, device number 4 [ 428.298651][T13514] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 430.335991][T13556] input: syz0 as /devices/virtual/input/input7 [ 430.621213][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2789'. [ 430.621240][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2789'. [ 431.549962][ T5694] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 433.031715][ T5694] usb 8-1: Using ep0 maxpacket: 32 [ 433.033990][ T5694] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 433.035987][ T5694] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 433.036010][ T5694] usb 8-1: config 0 has no interface number 0 [ 433.036054][ T5694] usb 8-1: config 0 interface 12 has no altsetting 0 [ 433.080026][ T5694] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.080053][ T5694] usb 8-1: Product: syz [ 433.080067][ T5694] usb 8-1: Manufacturer: syz [ 433.080081][ T5694] usb 8-1: SerialNumber: syz [ 433.126665][ T5694] usb 8-1: config 0 descriptor?? [ 433.583635][T13578] option changes via remount are deprecated (pid=13573 comm=syz.7.2791) [ 433.612616][ T5694] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 433.612667][ T5694] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 433.612684][ T5694] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 433.612774][ T5694] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 433.647308][ T5694] usb 8-1: USB disconnect, device number 8 [ 433.985987][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2801'. [ 433.986013][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2801'. [ 436.077238][T13614] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 436.185633][T13631] CIFS: Attempting to mount //127.0.0.1/share [ 436.457996][T13631] CIFS: VFS: Error connecting to socket. Aborting operation. [ 436.458307][T13631] CIFS: VFS: cifs_mount failed w/return code = -111 [ 437.929039][T13650] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2794'. [ 438.049124][T13654] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.2794'. [ 438.330261][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2814'. [ 438.330321][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2814'. [ 439.600086][ T5718] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 439.770838][ T5718] usb 10-1: Using ep0 maxpacket: 32 [ 439.788907][ T5718] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 439.802229][ T5718] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 439.802246][ T5718] usb 10-1: config 0 has no interface number 0 [ 439.802272][ T5718] usb 10-1: config 0 interface 12 has no altsetting 0 [ 439.804658][ T5718] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.804672][ T5718] usb 10-1: Product: syz [ 439.804680][ T5718] usb 10-1: Manufacturer: syz [ 439.804687][ T5718] usb 10-1: SerialNumber: syz [ 440.548646][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.548714][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.573364][ T5718] usb 10-1: config 0 descriptor?? [ 441.422960][T13659] kAFS: No cell specified [ 441.433629][ T5718] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 441.433682][ T5718] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 441.433699][ T5718] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 441.433785][ T5718] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 441.663714][ T5718] usb 10-1: USB disconnect, device number 5 [ 442.351135][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2828'. [ 442.351152][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2828'. [ 446.939981][ T5702] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 447.092951][ T5702] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 447.098527][ T5702] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.098554][ T5702] usb 10-1: Product: syz [ 447.098563][ T5702] usb 10-1: Manufacturer: syz [ 447.098570][ T5702] usb 10-1: SerialNumber: syz [ 447.883138][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2844'. [ 447.883168][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2844'. [ 448.191395][ T5702] (unnamed net_device) (uninitialized): Assigned a random MAC address: 6a:74:49:33:a6:b4 [ 450.126994][ T5702] rtl8150 10-1:1.0: eth21: rtl8150 is detected [ 450.169477][ T5702] usb 10-1: USB disconnect, device number 6 [ 451.889650][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2858'. [ 451.889677][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2858'. [ 454.451716][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2873'. [ 454.451742][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2873'. [ 456.047691][ T4953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 456.047713][ T4953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 456.047775][ T4953] loop0: [ 456.906493][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2885'. [ 456.906521][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2885'. [ 458.768531][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2898'. [ 458.768558][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2898'. [ 459.778251][T13997] jffs2: notice: (13997) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 460.203318][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2919'. [ 460.252643][T14014] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 460.305342][T14014] bond1 (unregistering): Released all slaves [ 460.358046][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2923'. [ 460.358070][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2923'. [ 460.474244][ T5718] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 460.500079][ T31] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 460.629937][ T5718] usb 8-1: Using ep0 maxpacket: 32 [ 460.630967][ T5718] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 460.634629][ T5718] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 460.634653][ T5718] usb 8-1: config 0 has no interface number 0 [ 460.634713][ T5718] usb 8-1: config 0 interface 12 has no altsetting 0 [ 460.647576][ T5718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.647601][ T5718] usb 8-1: Product: syz [ 460.647616][ T5718] usb 8-1: Manufacturer: syz [ 460.647630][ T5718] usb 8-1: SerialNumber: syz [ 460.653297][ T31] usb 9-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 460.660630][ T31] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 460.660679][ T31] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 460.702016][ T5718] usb 8-1: config 0 descriptor?? [ 460.747543][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.747570][ T31] usb 9-1: Product: syz [ 460.747637][ T31] usb 9-1: Manufacturer: syz [ 460.747653][ T31] usb 9-1: SerialNumber: syz [ 461.141436][T14037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.142053][T14037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.237959][T14010] option changes via remount are deprecated (pid=14008 comm=syz.7.2917) [ 461.269576][ T5718] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 461.269688][ T5718] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 461.269706][ T5718] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 461.270686][ T5718] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 461.286104][T14019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.530557][ T5718] usb 8-1: USB disconnect, device number 9 [ 461.669008][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2936'. [ 461.669029][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2936'. [ 461.744666][ T31] usb 9-1: Unsupported UAC3 BADD profile [ 464.765619][ T31] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 465.055651][ T31] usb 9-1: USB disconnect, device number 5 [ 465.172822][T14087] 9p: Bad value for 'wfdno' [ 465.284729][T10725] udevd[10725]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.430922][ T5586] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 465.588889][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2950'. [ 465.588913][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2950'. [ 465.659948][ T5586] usb 7-1: Using ep0 maxpacket: 16 [ 465.660709][ T5586] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 465.663883][ T5586] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.663911][ T5586] usb 7-1: Product: syz [ 465.663925][ T5586] usb 7-1: Manufacturer: syz [ 465.663932][ T5586] usb 7-1: SerialNumber: syz [ 465.677286][ T5586] usb 7-1: config 0 descriptor?? [ 465.709934][ T31] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 465.880016][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 465.883175][ T31] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 465.885082][ T31] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 465.885108][ T31] usb 10-1: config 0 has no interface number 0 [ 465.885167][ T31] usb 10-1: config 0 interface 12 has no altsetting 0 [ 465.930238][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.930265][ T31] usb 10-1: Product: syz [ 465.930278][ T31] usb 10-1: Manufacturer: syz [ 465.930292][ T31] usb 10-1: SerialNumber: syz [ 465.974984][ T31] usb 10-1: config 0 descriptor?? [ 467.017579][ T5586] dvb_usb_dtv5100 7-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 467.331534][T14095] option changes via remount are deprecated (pid=14093 comm=syz.9.2947) [ 467.355483][ T31] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 467.355539][ T31] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 467.355556][ T31] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 467.355644][ T31] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 467.446388][ T31] usb 10-1: USB disconnect, device number 7 [ 467.492859][ T5596] Bluetooth: hci1: connection err: -111 [ 468.682003][ T5586] usb 7-1: USB disconnect, device number 6 [ 468.991859][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'. [ 468.991887][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'. [ 469.568247][ T5596] Bluetooth: hci2: connection err: -111 [ 471.104188][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2978'. [ 471.104214][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2978'. [ 471.766134][ T5596] Bluetooth: hci4: connection err: -111 [ 474.071685][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2991'. [ 474.071710][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2991'. [ 474.507476][ T5596] Bluetooth: hci0: connection err: -111 [ 476.953250][ T4953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 476.953272][ T4953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 476.953335][ T4953] loop0: [ 477.133318][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3005'. [ 477.133344][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3005'. [ 480.813809][ T1235] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 480.976059][ T4953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 480.976081][ T4953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 480.976143][ T4953] loop0: [ 480.983357][ T1235] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 480.993867][ T1235] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.993921][ T1235] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 480.993944][ T1235] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 480.993967][ T1235] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.996959][ T1235] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.996982][ T1235] usb 9-1: Product: syz [ 480.996996][ T1235] usb 9-1: Manufacturer: syz [ 480.997010][ T1235] usb 9-1: SerialNumber: syz [ 481.223021][ T1235] usb 9-1: Cannot retrieve CPort count: -71 [ 481.223071][ T1235] usb 9-1: Cannot retrieve CPort count: -71 [ 481.223104][ T1235] es2_ap_driver 9-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 481.281818][ T1235] usb 9-1: USB disconnect, device number 6 [ 481.315658][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3020'. [ 481.315686][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3020'. [ 483.092073][ T5589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 483.139636][ T5589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 483.182813][ T5589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 483.186265][ T5589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 483.189040][ T5589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.350660][ T5596] Bluetooth: hci5: command tx timeout [ 485.511277][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3032'. [ 485.511304][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3032'. [ 485.725528][ T4953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 485.725550][ T4953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 485.725609][ T4953] loop0: [ 487.430060][ T5596] Bluetooth: hci5: command tx timeout [ 489.527478][ T5596] Bluetooth: hci5: command tx timeout [ 489.850767][ T176] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.604070][ T5596] Bluetooth: hci5: command tx timeout [ 491.785848][T14417] trusted_key: encrypted_key: insufficient parameters specified [ 492.223053][ T176] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.762526][T14439] jffs2: notice: (14439) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 493.877140][ T176] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.213571][T14454] 9p: Bad value for 'wfdno' [ 494.321492][T14456] trusted_key: encrypted_key: insufficient parameters specified [ 494.349960][ T5718] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 494.645830][ T5718] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 494.675103][ T5718] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.675127][ T5718] usb 9-1: Product: syz [ 494.675140][ T5718] usb 9-1: Manufacturer: syz [ 494.675160][ T5718] usb 9-1: SerialNumber: syz [ 494.677001][ T176] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.487609][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3057'. [ 496.326243][T14352] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.326433][T14352] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.326649][T14352] bridge_slave_0: entered allmulticast mode [ 496.357042][T14352] bridge_slave_0: entered promiscuous mode [ 496.390170][T14352] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.390352][T14352] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.390746][T14352] bridge_slave_1: entered allmulticast mode [ 496.395946][T14352] bridge_slave_1: entered promiscuous mode [ 496.609066][ T5718] (unnamed net_device) (uninitialized): Assigned a random MAC address: 82:df:f3:1d:fa:aa [ 496.927692][ T5718] rtl8150 9-1:1.0: eth21: rtl8150 is detected [ 496.956344][T14352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.972661][ T5718] usb 9-1: USB disconnect, device number 7 [ 497.142339][T14352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.841211][T14352] team0: Port device team_slave_0 added [ 497.845851][T14352] team0: Port device team_slave_1 added [ 499.110002][T14352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.110018][T14352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.110043][T14352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.358704][T14500] 9p: Bad value for 'wfdno' [ 499.414572][T14352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.414588][T14352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.414614][T14352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.472655][T14501] trusted_key: encrypted_key: insufficient parameters specified [ 499.619943][ T1235] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 499.625487][ T176] bridge_slave_1: left allmulticast mode [ 499.625521][ T176] bridge_slave_1: left promiscuous mode [ 499.625781][ T176] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.765617][ T1235] usb 2-1: device descriptor read/64, error -71 [ 500.037208][ T176] bridge_slave_0: left allmulticast mode [ 500.037279][ T176] bridge_slave_0: left promiscuous mode [ 500.220644][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.620130][ T1235] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 500.754938][ T1235] usb 2-1: device descriptor read/64, error -71 [ 501.111024][ T1235] usb usb2-port1: attempt power cycle [ 501.503446][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.516909][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.220180][ T1235] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 502.240747][ T1235] usb 2-1: device descriptor read/8, error -71 [ 503.206821][ T1235] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 503.260498][ T1235] usb 2-1: device descriptor read/8, error -71 [ 503.378656][ T1235] usb usb2-port1: unable to enumerate USB device [ 503.595852][T14543] trusted_key: encrypted_key: insufficient parameters specified [ 503.941503][ T1235] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 504.093203][ T1235] usb 9-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 504.095517][ T1235] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 504.095563][ T1235] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 504.144271][ T1235] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.144288][ T1235] usb 9-1: Product: syz [ 504.144296][ T1235] usb 9-1: Manufacturer: syz [ 504.144303][ T1235] usb 9-1: SerialNumber: syz [ 504.517174][ T176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.703214][T14559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.708324][T14559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.871832][ T176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.931428][ T176] bond0 (unregistering): Released all slaves [ 506.186144][T14569] 9p: Bad value for 'wfdno' [ 506.260045][T14549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.398846][T14352] hsr_slave_0: entered promiscuous mode [ 506.427219][T14352] hsr_slave_1: entered promiscuous mode [ 506.485450][ T31] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 506.620495][ T1235] usb 9-1: Unsupported UAC3 BADD profile [ 506.622169][ T31] usb 10-1: device descriptor read/64, error -71 [ 507.713929][ T31] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 507.840085][ T31] usb 10-1: device descriptor read/64, error -71 [ 507.950323][ T31] usb usb10-port1: attempt power cycle [ 508.225193][T14582] trusted_key: encrypted_key: insufficient parameters specified [ 508.298183][ T1235] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 508.322241][ T31] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 508.350738][ T31] usb 10-1: device descriptor read/8, error -71 [ 508.472107][ T1235] usb 9-1: USB disconnect, device number 8 [ 508.577368][T14418] udevd[14418]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.595797][ T31] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 508.610764][ T31] usb 10-1: device descriptor read/8, error -71 [ 508.744966][ T31] usb usb10-port1: unable to enumerate USB device [ 513.809981][ T176] hsr_slave_0: left promiscuous mode [ 513.854961][ T176] hsr_slave_1: left promiscuous mode [ 513.855906][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.855930][ T176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.916468][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.916497][ T176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.936968][T14641] 9p: Bad value for 'wfdno' [ 514.000090][T14635] trusted_key: encrypted_key: insufficient parameters specified [ 514.052981][ T176] veth1_macvtap: left promiscuous mode [ 514.053960][ T176] veth0_macvtap: left promiscuous mode [ 514.054215][ T176] veth1_vlan: left promiscuous mode [ 514.057226][ T176] veth0_vlan: left promiscuous mode [ 514.240171][ T5702] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 515.403518][ T5702] usb 10-1: device descriptor read/64, error -71 [ 516.369985][ T5702] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 516.500012][ T5702] usb 10-1: device descriptor read/64, error -71 [ 516.760879][ T5702] usb usb10-port1: attempt power cycle [ 517.690068][ T5702] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 517.890000][ T1235] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 517.902961][ T5702] usb 10-1: device not accepting address 14, error -71 [ 518.043272][ T1235] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 518.828728][ T1235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.828754][ T1235] usb 2-1: Product: syz [ 518.828768][ T1235] usb 2-1: Manufacturer: syz [ 518.828782][ T1235] usb 2-1: SerialNumber: syz [ 518.936118][ T1235] usb 2-1: config 0 descriptor?? [ 518.971118][T14666] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 518.995558][ T1235] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 010 [ 520.582410][ T176] team0 (unregistering): Port device team_slave_1 removed [ 521.052105][ T1235] i2c i2c-1: failure reading functionality [ 521.151141][ T1235] i2c i2c-1: connected i2c-tiny-usb device [ 521.590753][ T1235] usb 2-1: USB disconnect, device number 10 [ 523.176047][ T176] team0 (unregistering): Port device team_slave_0 removed [ 524.027216][ T5248] 8021q: adding VLAN 0 to HW filter on device eth22 [ 524.262445][ T4953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 524.262470][ T4953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 524.262530][ T4953] loop0: [ 524.447721][T14695] 9p: Bad value for 'wfdno' [ 524.749981][ T5702] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 524.901442][ T5702] usb 8-1: Using ep0 maxpacket: 16 [ 524.902428][ T5702] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 524.985991][ T5702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.986022][ T5702] usb 8-1: Product: syz [ 524.986037][ T5702] usb 8-1: Manufacturer: syz [ 524.986051][ T5702] usb 8-1: SerialNumber: syz [ 525.028925][ T5702] usb 8-1: config 0 descriptor?? [ 525.476636][ T5702] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 525.525512][ T5702] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 525.527691][ T5702] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 525.527735][ T5702] usb 8-1: media controller created [ 525.531486][ T50] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 525.642755][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.680866][ T50] usb 9-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 525.682313][ T50] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 525.682359][ T50] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 525.688598][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.688623][ T50] usb 9-1: Product: syz [ 525.688637][ T50] usb 9-1: Manufacturer: syz [ 525.688651][ T50] usb 9-1: SerialNumber: syz [ 526.290804][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.296757][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.390369][ T5702] zl10353_read_register: readreg error (reg=127, ret==0) [ 526.390423][ T5702] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 526.390437][ T5702] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 526.396057][ T5702] usb 8-1: USB disconnect, device number 10 [ 526.531196][T14709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.607732][ T5702] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 526.838461][ T50] usb 9-1: Unsupported UAC3 BADD profile [ 527.084950][ T5248] 8021q: adding VLAN 0 to HW filter on device eth21 [ 527.202294][ T50] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 527.586695][ T50] usb 9-1: USB disconnect, device number 9 [ 527.681451][T14728] udevd[14728]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.370044][ T31] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 530.371462][ T31] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 530.408834][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.408863][ T31] usb 8-1: Product: syz [ 530.408878][ T31] usb 8-1: Manufacturer: syz [ 530.408893][ T31] usb 8-1: SerialNumber: syz [ 532.068395][ T31] (unnamed net_device) (uninitialized): Assigned a random MAC address: 16:cf:5d:3c:dc:30 [ 532.426233][ T31] rtl8150 8-1:1.0: eth21: rtl8150 is detected [ 532.458863][ T31] usb 8-1: USB disconnect, device number 11 [ 532.931989][T14790] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3141'. [ 533.087440][ T4953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 533.087462][ T4953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 533.087520][ T4953] loop0: [ 537.865095][T14848] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3150'. [ 538.855427][T14352] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 538.946562][T14352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.948858][T14352] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 539.949330][T14352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.011742][T14352] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 540.084371][T14352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.099466][T14352] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 540.147807][T14352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.789529][ T1235] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 541.140027][ T1235] usb 2-1: Using ep0 maxpacket: 32 [ 541.145868][ T1235] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 541.247092][ T1235] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 541.247129][ T1235] usb 2-1: config 0 has no interface number 0 [ 541.328864][ T1235] usb 2-1: config 0 interface 12 has no altsetting 0 [ 541.368037][ T1235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.368065][ T1235] usb 2-1: Product: syz [ 541.368080][ T1235] usb 2-1: Manufacturer: syz [ 541.368095][ T1235] usb 2-1: SerialNumber: syz [ 541.415859][ T1235] usb 2-1: config 0 descriptor?? [ 541.438070][T14352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.605352][T14352] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.674676][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.674864][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.721126][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.721269][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.240055][T14891] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3155'. [ 542.366700][T14865] kAFS: No cell specified [ 542.379523][ T1235] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 542.379576][ T1235] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 542.379592][ T1235] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 542.379702][ T1235] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 542.486086][ T1235] usb 2-1: USB disconnect, device number 11 [ 542.748910][ T5589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 542.785425][ T5589] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 542.813430][ T5589] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 542.831988][ T5589] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 542.832736][ T5589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 544.545407][T14925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3165'. [ 544.951899][T14923] binder_alloc: 14920: binder_alloc_buf, no vma [ 544.960037][ T5596] Bluetooth: hci3: command tx timeout [ 545.473624][T14922] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.473860][T14922] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.780240][T14922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.817552][T14922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.854635][T14947] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3173'. [ 546.958978][T14951] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3175'. [ 547.030342][ T5596] Bluetooth: hci3: command tx timeout [ 548.380926][T12898] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.395784][ T42] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.395866][ T42] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.395901][ T42] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.814791][ T5596] Bluetooth: hci3: command tx timeout [ 550.150124][ T5596] Bluetooth: hci2: command 0x0406 tx timeout [ 552.620238][ T5589] Bluetooth: hci3: command tx timeout [ 552.943672][T15013] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3188'. [ 555.786987][T15056] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3201'. [ 556.346115][ T31] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 556.670344][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 556.671156][ T31] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 556.672463][ T31] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 556.672488][ T31] usb 10-1: config 0 has no interface number 0 [ 556.672534][ T31] usb 10-1: config 0 interface 12 has no altsetting 0 [ 556.676984][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.677006][ T31] usb 10-1: Product: syz [ 556.677021][ T31] usb 10-1: Manufacturer: syz [ 556.677035][ T31] usb 10-1: SerialNumber: syz [ 556.732181][ T31] usb 10-1: config 0 descriptor?? [ 557.887601][T15066] option changes via remount are deprecated (pid=15065 comm=syz.9.3191) [ 557.913838][ T31] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 557.913870][ T31] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 557.913879][ T31] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 557.913930][ T31] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 557.939768][ T31] usb 10-1: USB disconnect, device number 16 [ 559.245495][T14897] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.245619][T14897] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.245854][T14897] bridge_slave_0: entered allmulticast mode [ 559.275998][T14897] bridge_slave_0: entered promiscuous mode [ 559.296751][T14897] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.296958][T14897] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.297274][T14897] bridge_slave_1: entered allmulticast mode [ 559.361308][T14897] bridge_slave_1: entered promiscuous mode [ 559.749510][T14897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.781746][T14897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.073274][T14897] team0: Port device team_slave_0 added [ 561.076771][T14897] team0: Port device team_slave_1 added [ 561.254206][ T1423] bridge_slave_1: left allmulticast mode [ 561.254239][ T1423] bridge_slave_1: left promiscuous mode [ 561.254513][ T1423] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.403551][ T1423] bridge_slave_0: left allmulticast mode [ 561.403607][ T1423] bridge_slave_0: left promiscuous mode [ 561.403861][ T1423] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.450692][ T1235] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 561.603262][ T1235] usb 9-1: Using ep0 maxpacket: 32 [ 561.605231][ T1235] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 561.607291][ T1235] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 561.607315][ T1235] usb 9-1: config 0 has no interface number 0 [ 561.607362][ T1235] usb 9-1: config 0 interface 12 has no altsetting 0 [ 561.632353][ T1235] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.632380][ T1235] usb 9-1: Product: syz [ 561.632394][ T1235] usb 9-1: Manufacturer: syz [ 561.632408][ T1235] usb 9-1: SerialNumber: syz [ 561.658253][ T1235] usb 9-1: config 0 descriptor?? [ 562.071188][T15122] option changes via remount are deprecated (pid=15121 comm=syz.8.3217) [ 562.082120][ T1235] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 562.082170][ T1235] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 562.082188][ T1235] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 562.082276][ T1235] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 562.228375][ T1235] usb 9-1: USB disconnect, device number 10 [ 562.873662][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.873730][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.751375][ T1423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.173432][ T1423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.239379][ T1423] bond0 (unregistering): Released all slaves [ 564.653000][T14897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.653018][T14897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.653044][T14897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.658490][T14897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.658505][T14897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.658532][T14897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.073707][T14897] hsr_slave_0: entered promiscuous mode [ 565.074539][T14897] hsr_slave_1: entered promiscuous mode [ 565.075033][T14897] debugfs: 'hsr0' already exists in 'hsr' [ 565.075047][T14897] Cannot create hsr debugfs directory [ 567.357095][ T1423] hsr_slave_0: left promiscuous mode [ 567.393683][ T1423] hsr_slave_1: left promiscuous mode [ 567.394838][ T1423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.092881][ T1423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.400801][ T1423] team0 (unregistering): Port device team_slave_1 removed [ 569.470933][ T1423] team0 (unregistering): Port device team_slave_0 removed [ 570.638089][ T5248] 8021q: adding VLAN 0 to HW filter on device eth21 [ 575.967393][ T4953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 575.967414][ T4953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 575.967473][ T4953] loop0: [ 578.709684][ T5248] 8021q: adding VLAN 0 to HW filter on device eth22 [ 578.922247][T15312] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 582.350022][ T31] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 582.530885][ T31] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 582.532471][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 582.532520][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 582.535270][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.535292][ T31] usb 2-1: Product: syz [ 582.535307][ T31] usb 2-1: Manufacturer: syz [ 582.535321][ T31] usb 2-1: SerialNumber: syz [ 582.914111][T15356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.954787][T15356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.116530][T15359] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 585.358666][ T31] usb 2-1: Unsupported UAC3 BADD profile [ 588.088081][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 588.158499][ T31] usb 2-1: USB disconnect, device number 12 [ 588.538619][T15144] udevd[15144]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.214835][T14897] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 590.276378][T14897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 590.287713][T14897] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 590.487170][T14897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 590.488818][T14897] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 590.546232][T14897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 590.563706][T14897] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 590.654430][T14897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.336896][T14897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.393385][T14897] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.478352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.478582][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.524562][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.524737][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.910012][ T31] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 597.080010][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 597.083822][ T31] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 597.085335][ T31] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 597.085361][ T31] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 597.085384][ T31] usb 9-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 597.085409][ T31] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 597.085435][ T31] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 597.085458][ T31] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.085501][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.550809][ T31] usb 9-1: usb_control_msg returned -71 [ 597.550857][ T31] usbtmc 9-1:16.0: can't read capabilities [ 597.704137][ T31] usb 9-1: USB disconnect, device number 11 [ 597.884078][T14897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.141732][ T5702] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 599.294038][ T5702] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 599.299394][ T5702] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.299421][ T5702] usb 10-1: Product: syz [ 599.299435][ T5702] usb 10-1: Manufacturer: syz [ 599.299449][ T5702] usb 10-1: SerialNumber: syz [ 599.614587][T14897] veth0_vlan: entered promiscuous mode [ 599.628072][ T5732] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 600.290549][ T5732] usb 8-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 600.404712][ T5732] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 600.404763][ T5732] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 600.538335][ T5732] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.538370][ T5732] usb 8-1: Product: syz [ 600.538384][ T5732] usb 8-1: Manufacturer: syz [ 600.538398][ T5732] usb 8-1: SerialNumber: syz [ 600.864882][ T5702] (unnamed net_device) (uninitialized): Assigned a random MAC address: a2:26:b5:5e:10:31 [ 600.875409][T15557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.881548][T15557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.225849][ T5702] rtl8150 10-1:1.0: eth21: rtl8150 is detected [ 601.295141][ T5702] usb 10-1: USB disconnect, device number 17 [ 601.347412][T15536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.392062][T14897] veth1_vlan: entered promiscuous mode [ 603.322683][ T5732] usb 8-1: Unsupported UAC3 BADD profile [ 603.808010][ T5589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 603.875614][ T5589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 603.897387][ T5589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 603.898922][ T5589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 603.909572][ T5589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 603.943090][ T5732] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 604.181345][ T5732] usb 8-1: USB disconnect, device number 12 [ 604.365751][T15144] udevd[15144]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.150858][T15619] trusted_key: encrypted_key: insufficient parameters specified [ 606.152214][ T5596] Bluetooth: hci5: command tx timeout [ 608.230397][ T5596] Bluetooth: hci5: command tx timeout [ 610.310546][ T5596] Bluetooth: hci5: command tx timeout [ 613.170673][ T5596] Bluetooth: hci5: command tx timeout [ 613.564881][T15684] 9p: Bad value for 'wfdno' [ 614.095951][ T997] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 614.359896][ T997] usb 10-1: Using ep0 maxpacket: 16 [ 614.360716][ T997] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 614.364739][ T997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.364763][ T997] usb 10-1: Product: syz [ 614.364777][ T997] usb 10-1: Manufacturer: syz [ 614.364791][ T997] usb 10-1: SerialNumber: syz [ 614.376201][ T997] usb 10-1: config 0 descriptor?? [ 615.049872][ T997] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 615.637762][ T997] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 615.640212][ T997] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 615.640265][ T997] usb 10-1: media controller created [ 615.675580][ T997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 615.722224][ T997] zl10353_read_register: readreg error (reg=127, ret==0) [ 615.722275][ T997] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 615.722288][ T997] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 615.736770][ T997] usb 10-1: USB disconnect, device number 18 [ 615.866303][T15710] trusted_key: encrypted_key: insufficient parameters specified [ 616.183257][ T997] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 617.788962][T15735] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3368'. [ 620.795641][T15755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3374'. [ 620.914381][T15581] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.914578][T15581] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.914810][T15581] bridge_slave_0: entered allmulticast mode [ 620.950333][T15581] bridge_slave_0: entered promiscuous mode [ 620.969865][T15581] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.970829][T15581] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.971052][T15581] bridge_slave_1: entered allmulticast mode [ 620.974276][T15581] bridge_slave_1: entered promiscuous mode [ 621.242597][ T5732] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 621.393054][ T5732] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 621.395999][ T5732] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 621.396037][ T5732] usb 10-1: config 0 has no interface number 0 [ 621.728556][ T5732] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.728852][ T5732] usb 10-1: Product: syz [ 621.728988][ T5732] usb 10-1: Manufacturer: syz [ 621.729124][ T5732] usb 10-1: SerialNumber: syz [ 622.585172][ T5732] usb 10-1: config 0 descriptor?? [ 622.710146][ T1235] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 622.823439][ T5732] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 622.852921][ T5732] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 622.853375][ T5732] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 622.853427][ T5732] usb 10-1: media controller created [ 622.861315][ T1235] usb 2-1: Using ep0 maxpacket: 8 [ 622.862278][ T1235] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 622.885802][T15581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.897395][T15775] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3381'. [ 622.916064][ T1235] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 622.916237][ T1235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 622.916262][ T1235] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 622.916287][ T1235] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 622.916338][ T1235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 622.916361][ T1235] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.916403][ T1235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.959747][T15581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.027498][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 623.145151][ T5732] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 623.213482][ T1235] usb 2-1: usb_control_msg returned -71 [ 623.213510][ T1235] usbtmc 2-1:16.0: can't read capabilities [ 623.328862][ T5732] usb 10-1: USB disconnect, device number 19 [ 624.704361][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.704429][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.794942][ T1235] usb 2-1: USB disconnect, device number 13 [ 625.700181][ T5589] Bluetooth: hci1: connection err: -111 [ 625.707590][T15581] team0: Port device team_slave_0 added [ 625.732530][T15581] team0: Port device team_slave_1 added [ 625.943043][ T55] bridge_slave_1: left allmulticast mode [ 625.943077][ T55] bridge_slave_1: left promiscuous mode [ 625.943340][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.199984][ T5586] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 626.451550][ T55] bridge_slave_0: left allmulticast mode [ 626.451585][ T55] bridge_slave_0: left promiscuous mode [ 626.451845][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.478832][ T5586] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 626.522222][ T5586] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.522249][ T5586] usb 10-1: Product: syz [ 626.522263][ T5586] usb 10-1: Manufacturer: syz [ 626.522277][ T5586] usb 10-1: SerialNumber: syz [ 626.951591][T15812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3391'. [ 628.754035][ T5586] rtl8150 10-1:1.0: couldn't reset the device [ 628.758428][ T5586] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 628.792110][ T5586] usb 10-1: USB disconnect, device number 20 [ 629.930361][ T997] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 631.539996][ T997] usb 2-1: Using ep0 maxpacket: 32 [ 631.549679][ T997] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 631.551927][ T997] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 631.551952][ T997] usb 2-1: config 0 has no interface number 0 [ 631.551996][ T997] usb 2-1: config 0 interface 12 has no altsetting 0 [ 631.587491][ T997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.587516][ T997] usb 2-1: Product: syz [ 631.587530][ T997] usb 2-1: Manufacturer: syz [ 631.587544][ T997] usb 2-1: SerialNumber: syz [ 631.677156][ T997] usb 2-1: config 0 descriptor?? [ 632.621812][T15829] kAFS: No cell specified [ 633.365410][ T997] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 633.365463][ T997] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 633.365479][ T997] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 633.365567][ T997] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 633.391875][ T997] usb 2-1: USB disconnect, device number 14 [ 634.450048][T15859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3403'. [ 634.495126][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.572697][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.285266][ T55] bond0 (unregistering): Released all slaves [ 638.336599][ T5248] 8021q: adding VLAN 0 to HW filter on device eth21 [ 638.346980][T15581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.346996][T15581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.347022][T15581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.387860][T15581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.387875][T15581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.387901][T15581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.841294][ T55] hsr_slave_0: left promiscuous mode [ 638.886651][ T55] hsr_slave_1: left promiscuous mode [ 638.887344][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.931744][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.182729][ T55] veth1_vlan: left promiscuous mode [ 639.182947][ T55] veth0_vlan: left promiscuous mode [ 641.676185][T15910] Bluetooth: hci0: unsupported parameter 255 [ 641.676207][T15910] Bluetooth: hci0: unsupported parameter 255 [ 641.733826][ T5702] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 642.111657][ T5702] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 642.175441][ T5702] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 642.175470][ T5702] usb 9-1: config 0 has no interface number 0 [ 642.667431][ T5702] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.667457][ T5702] usb 9-1: Product: syz [ 642.667471][ T5702] usb 9-1: Manufacturer: syz [ 642.667486][ T5702] usb 9-1: SerialNumber: syz [ 642.770185][ T5702] usb 9-1: config 0 descriptor?? [ 642.862843][T15921] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3416'. [ 643.000960][ T5702] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 643.046084][ T5702] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 643.046421][ T5702] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 643.046471][ T5702] usb 9-1: media controller created [ 643.100406][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 643.271965][ T5702] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 643.351822][ T5702] usb 9-1: USB disconnect, device number 12 [ 644.346437][ T55] team0 (unregistering): Port device team_slave_1 removed [ 644.488451][ T55] team0 (unregistering): Port device team_slave_0 removed [ 647.317867][ T4953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 647.317891][ T4953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 647.317950][ T4953] loop0: [ 647.530078][T15962] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3426'. [ 647.599473][ T5248] 8021q: adding VLAN 0 to HW filter on device eth22 [ 647.713229][T15581] hsr_slave_0: entered promiscuous mode [ 647.723169][T15581] hsr_slave_1: entered promiscuous mode [ 648.210673][ T5695] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 649.031021][ T5695] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 649.090468][ T5695] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 649.090497][ T5695] usb 10-1: config 0 has no interface number 0 [ 649.112307][ T5695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.112336][ T5695] usb 10-1: Product: syz [ 649.112351][ T5695] usb 10-1: Manufacturer: syz [ 649.112365][ T5695] usb 10-1: SerialNumber: syz [ 649.162071][ T5695] usb 10-1: config 0 descriptor?? [ 649.239951][ T1235] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 649.443776][ T5695] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 649.460754][ T1235] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 649.462951][ T1235] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.462997][ T1235] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 649.463018][ T1235] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 649.463059][ T1235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.647612][ T5695] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 649.647967][ T5695] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 649.648539][ T5695] usb 10-1: media controller created [ 649.778190][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 649.977062][ T5695] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 650.049057][ T5589] Bluetooth: hci4: connection err: -111 [ 650.171787][ T5695] usb 10-1: USB disconnect, device number 21 [ 650.199464][ T5589] Bluetooth: hci2: connection err: -111 [ 651.522690][ T5695] usb 8-1: USB disconnect, device number 13 [ 651.648449][T16022] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3437'. [ 651.901490][T16008] syz_tun: entered allmulticast mode [ 652.319423][ T5248] 8021q: adding VLAN 0 to HW filter on device eth23 [ 652.337254][T16008] syz_tun: left allmulticast mode [ 653.737929][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 653.919927][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 653.921387][ T31] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 653.922905][ T31] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 653.922920][ T31] usb 2-1: config 0 has no interface number 0 [ 653.922947][ T31] usb 2-1: config 0 interface 12 has no altsetting 0 [ 653.926701][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.926716][ T31] usb 2-1: Product: syz [ 653.926724][ T31] usb 2-1: Manufacturer: syz [ 653.926731][ T31] usb 2-1: SerialNumber: syz [ 653.995831][ T31] usb 2-1: config 0 descriptor?? [ 655.453188][T16053] option changes via remount are deprecated (pid=16029 comm=syz.1.3439) [ 656.740608][ T31] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 656.740664][ T31] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 656.740681][ T31] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 656.740773][ T31] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 657.182223][ T31] usb 2-1: USB disconnect, device number 15 [ 657.571381][T16039] syz_tun: entered allmulticast mode [ 658.194499][T16039] syz_tun: left allmulticast mode [ 665.365716][T16143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 665.438661][T16143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 665.464099][T16143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 665.473384][T16143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 665.477907][T16143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 666.129972][ T31] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 666.280064][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 666.280968][ T31] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 666.282581][ T31] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 666.282607][ T31] usb 9-1: config 0 has no interface number 0 [ 666.282652][ T31] usb 9-1: config 0 interface 12 has no altsetting 0 [ 666.285556][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.285579][ T31] usb 9-1: Product: syz [ 666.285593][ T31] usb 9-1: Manufacturer: syz [ 666.285607][ T31] usb 9-1: SerialNumber: syz [ 666.401876][ T31] usb 9-1: config 0 descriptor?? [ 667.525948][T16145] kAFS: No cell specified [ 667.566354][ T31] f81534 9-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 667.566409][ T31] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 667.566427][ T31] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 667.566515][ T31] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 667.647954][ T31] usb 9-1: USB disconnect, device number 13 [ 667.670359][ T5589] Bluetooth: hci3: command tx timeout [ 669.630006][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 669.648886][ T5844] bridge_slave_1: left allmulticast mode [ 669.648920][ T5844] bridge_slave_1: left promiscuous mode [ 669.649187][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.750215][ T5589] Bluetooth: hci3: command tx timeout [ 669.783260][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 669.785651][ T31] usb 2-1: New USB device found, idVendor=2c7c, idProduct=6009, bcdDevice=19.2a [ 669.801033][ T31] usb 2-1: config 3 has an invalid interface number: 225 but max is 0 [ 669.801050][ T31] usb 2-1: config 3 has no interface number 0 [ 669.801076][ T31] usb 2-1: config 3 interface 225 altsetting 254 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 669.801091][ T31] usb 2-1: config 3 interface 225 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 669.801103][ T31] usb 2-1: config 3 interface 225 altsetting 254 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 669.801116][ T31] usb 2-1: config 3 interface 225 has no altsetting 0 [ 669.869967][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.869994][ T31] usb 2-1: Product: syz [ 669.870008][ T31] usb 2-1: Manufacturer: syz [ 669.870023][ T31] usb 2-1: SerialNumber: syz [ 669.915480][ T5844] bridge_slave_0: left allmulticast mode [ 669.915513][ T5844] bridge_slave_0: left promiscuous mode [ 669.917000][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.918578][ T31] usb 2-1: Interface #225 referenced by multiple IADs [ 669.946202][T16206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 670.290690][ T31] option 2-1:3.225: GSM modem (1-port) converter detected [ 670.445453][ T31] usb 2-1: USB disconnect, device number 16 [ 670.535359][ T31] option 2-1:3.225: device disconnected [ 670.640808][ T997] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 670.821774][ T997] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 670.824535][ T997] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 670.824550][ T997] usb 10-1: config 0 has no interface number 0 [ 670.828135][ T997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.828151][ T997] usb 10-1: Product: syz [ 670.828159][ T997] usb 10-1: Manufacturer: syz [ 670.828167][ T997] usb 10-1: SerialNumber: syz [ 670.997341][ T997] usb 10-1: config 0 descriptor?? [ 671.299221][ T997] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 671.376822][ T997] usb 10-1: USB disconnect, device number 22 [ 671.845162][ T5589] Bluetooth: hci3: command tx timeout [ 672.712081][ T5844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.977549][ T5844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.883197][ T5844] bond0 (unregistering): Released all slaves [ 673.910079][ T5589] Bluetooth: hci3: command tx timeout [ 675.440175][T16278] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3484'. [ 675.616855][T16284] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3484'. [ 677.280412][ T5844] hsr_slave_0: left promiscuous mode [ 677.421167][ T5844] hsr_slave_1: left promiscuous mode [ 677.422182][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.032642][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.379993][ T5702] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 680.542396][ T5702] usb 9-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 680.544120][ T5702] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 680.544169][ T5702] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 680.585929][ T5702] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.585956][ T5702] usb 9-1: Product: syz [ 680.585972][ T5702] usb 9-1: Manufacturer: syz [ 680.585986][ T5702] usb 9-1: SerialNumber: syz [ 681.702126][ T5844] team0 (unregistering): Port device team_slave_1 removed [ 681.861860][ T5844] team0 (unregistering): Port device team_slave_0 removed [ 681.904016][T16359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.908080][T16359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.151896][T16353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.442886][ T5702] usb 9-1: Unsupported UAC3 BADD profile [ 685.567620][T16396] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3500'. [ 685.603026][T16396] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3500'. [ 685.726484][ T5702] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 685.743994][ T5702] usb 9-1: USB disconnect, device number 14 [ 685.758300][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.758465][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.926570][T15144] udevd[15144]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.410910][T16136] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.410978][T16136] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.411106][T16136] bridge_slave_0: entered allmulticast mode [ 686.424178][T16136] bridge_slave_0: entered promiscuous mode [ 686.442157][T16136] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.442356][T16136] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.442557][T16136] bridge_slave_1: entered allmulticast mode [ 686.457487][T16136] bridge_slave_1: entered promiscuous mode [ 687.439268][T16136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.447629][T16136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.624768][T16136] team0: Port device team_slave_0 added [ 687.644979][T16136] team0: Port device team_slave_1 added [ 688.018007][T16136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.018024][T16136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.018045][T16136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.041107][T16136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.041130][T16136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.041156][T16136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.907129][T16444] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3517'. [ 688.934660][T16444] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3517'. [ 688.985408][T16438] syz_tun: entered allmulticast mode [ 689.022270][T16438] syz_tun: left allmulticast mode [ 689.284680][T16136] hsr_slave_0: entered promiscuous mode [ 689.293686][T16136] hsr_slave_1: entered promiscuous mode [ 692.289970][ T5586] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 692.339989][ T997] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 692.401041][ T5702] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 692.455865][ T5586] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 692.457220][ T5586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.457249][ T5586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.457271][ T5586] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.477787][ T5586] usb 9-1: config 0 descriptor?? [ 692.520364][ T997] usb 8-1: Using ep0 maxpacket: 32 [ 692.522729][ T997] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 692.525238][ T997] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 692.525261][ T997] usb 8-1: config 0 has no interface number 0 [ 692.525318][ T997] usb 8-1: config 0 interface 12 has no altsetting 0 [ 692.572816][ T5702] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 692.579347][ T5702] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.579564][ T5702] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 692.579735][ T5702] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 692.579760][ T5702] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.585053][ T5702] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.585204][ T5702] usb 10-1: Product: syz [ 692.585255][ T5702] usb 10-1: Manufacturer: syz [ 692.585398][ T5702] usb 10-1: SerialNumber: syz [ 692.808879][ T997] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.808906][ T997] usb 8-1: Product: syz [ 692.808921][ T997] usb 8-1: Manufacturer: syz [ 692.808936][ T997] usb 8-1: SerialNumber: syz [ 693.504156][ T5702] usb 10-1: Cannot retrieve CPort count: -71 [ 693.504204][ T5702] usb 10-1: Cannot retrieve CPort count: -71 [ 693.504233][ T5702] es2_ap_driver 10-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 693.605629][ T997] usb 8-1: config 0 descriptor?? [ 693.646474][ T5702] usb 10-1: USB disconnect, device number 23 [ 693.730570][ T5586] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 693.730611][ T5586] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 693.730637][ T5586] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 693.730662][ T5586] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 693.730677][ T5586] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 693.730694][ T5586] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 693.730709][ T5586] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 694.055797][T16473] option changes via remount are deprecated (pid=16472 comm=syz.7.3527) [ 694.069935][ T997] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 694.069990][ T997] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 694.070006][ T997] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 694.070097][ T997] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 694.103402][ T5586] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.8-1/input0 [ 694.145911][ T997] usb 8-1: USB disconnect, device number 14 [ 694.600618][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3530'. [ 694.600642][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3530'. [ 694.659123][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3530'. [ 694.785555][T16136] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 694.828502][ T5586] usb 9-1: USB disconnect, device number 15 [ 694.919697][T16136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.971606][T16136] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 695.086675][T16136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 695.107771][T16136] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 697.243498][T16136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 697.261535][T16136] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 697.403179][T16136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.401804][T16136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.530349][T16136] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.593500][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.593659][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.635710][T12898] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.635924][T12898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.790038][ T997] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 698.941567][ T997] usb 8-1: Using ep0 maxpacket: 32 [ 698.942423][ T997] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 698.945179][ T997] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 698.945204][ T997] usb 8-1: config 0 has no interface number 0 [ 698.945252][ T997] usb 8-1: config 0 interface 12 has no altsetting 0 [ 698.990083][ T997] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.990110][ T997] usb 8-1: Product: syz [ 698.990125][ T997] usb 8-1: Manufacturer: syz [ 698.990140][ T997] usb 8-1: SerialNumber: syz [ 698.996808][T16532] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3543'. [ 698.996847][T16532] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3543'. [ 699.054533][ T997] usb 8-1: config 0 descriptor?? [ 699.073720][T16534] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3543'. [ 700.333827][T16526] option changes via remount are deprecated (pid=16525 comm=syz.7.3541) [ 700.376965][ T997] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 700.377020][ T997] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 700.377038][ T997] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 700.377122][ T997] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 700.442214][ T997] usb 8-1: USB disconnect, device number 15 [ 701.107925][T16136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.150020][ T5702] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 701.739962][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 701.751074][ T5702] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 701.754307][ T5702] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 701.754331][ T5702] usb 2-1: config 0 has no interface number 0 [ 701.754376][ T5702] usb 2-1: config 0 interface 12 has no altsetting 0 [ 701.756556][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.756579][ T5702] usb 2-1: Product: syz [ 701.756593][ T5702] usb 2-1: Manufacturer: syz [ 701.756606][ T5702] usb 2-1: SerialNumber: syz [ 701.767910][ T5702] usb 2-1: config 0 descriptor?? [ 702.614669][T16559] kAFS: No cell specified [ 702.618675][ T5702] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 702.618707][ T5702] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 702.618716][ T5702] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 702.618770][ T5702] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 702.706263][ T5702] usb 2-1: USB disconnect, device number 17 [ 703.813746][ T4953] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 703.813766][ T4953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 703.813827][ T4953] loop0: [ 703.894291][T16136] veth0_vlan: entered promiscuous mode [ 703.941320][T16136] veth1_vlan: entered promiscuous mode [ 704.876651][T16136] veth0_macvtap: entered promiscuous mode [ 704.924190][T16136] veth1_macvtap: entered promiscuous mode [ 705.042904][T16136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.099776][T16136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.643802][ T1367] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.645056][ T1367] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.645094][ T1367] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.645129][ T1367] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.932602][ T1367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.932633][ T1367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.173393][ T1418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.173413][ T1418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.189939][ T5725] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 706.709960][ T5725] usb 10-1: Using ep0 maxpacket: 32 [ 706.710651][ T5725] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 706.755991][ T5732] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 706.756148][ T5725] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 706.756161][ T5725] usb 10-1: config 0 has no interface number 0 [ 706.756275][ T5725] usb 10-1: config 0 interface 12 has no altsetting 0 [ 706.759282][ T5725] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.759296][ T5725] usb 10-1: Product: syz [ 706.759304][ T5725] usb 10-1: Manufacturer: syz [ 706.759311][ T5725] usb 10-1: SerialNumber: syz [ 706.829034][ T5725] usb 10-1: config 0 descriptor?? [ 706.849778][T16602] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3563'. [ 706.902471][ T5732] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 706.920652][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.920675][ T5732] usb 2-1: Product: syz [ 706.920682][ T5732] usb 2-1: Manufacturer: syz [ 706.920690][ T5732] usb 2-1: SerialNumber: syz [ 707.125840][T16602] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.126052][T16602] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.277138][T16596] option changes via remount are deprecated (pid=16595 comm=syz.9.3560) [ 707.301902][ T5725] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 707.301935][ T5725] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 707.301945][ T5725] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 707.302538][ T5725] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 707.357826][ T5725] usb 10-1: USB disconnect, device number 24 [ 707.499664][T16602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.535621][T16602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.663243][T16610] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3554'. [ 707.663259][T16610] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3554'. [ 707.713624][T16610] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3554'. [ 707.835528][ T5732] (unnamed net_device) (uninitialized): Assigned a random MAC address: de:9a:81:cf:5e:76 [ 711.386504][ T5732] rtl8150 2-1:1.0: eth21: rtl8150 is detected [ 711.438473][ T3378] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.480103][ T3378] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.480148][ T3378] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.480182][ T3378] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.528291][ T5732] usb 2-1: USB disconnect, device number 18 [ 712.062591][T16630] kvm: kvm [16629]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x50 [ 712.349675][T16376] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 713.199926][T16376] usb 10-1: Using ep0 maxpacket: 32 [ 713.200888][T16376] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 713.203606][T16376] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 713.203630][T16376] usb 10-1: config 0 has no interface number 0 [ 713.203677][T16376] usb 10-1: config 0 interface 12 has no altsetting 0 [ 713.207607][T16376] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.207630][T16376] usb 10-1: Product: syz [ 713.207644][T16376] usb 10-1: Manufacturer: syz [ 713.207656][T16376] usb 10-1: SerialNumber: syz [ 713.238260][T16376] usb 10-1: config 0 descriptor?? [ 713.925838][T16634] option changes via remount are deprecated (pid=16632 comm=syz.9.3575) [ 713.943551][T16376] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 713.943609][T16376] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 713.943633][T16376] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 713.943727][T16376] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 714.641903][T16376] usb 10-1: USB disconnect, device number 25 [ 715.989961][T16656] comedi comedi1: reset error (fatal) [ 723.702469][ T50] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 725.245229][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 725.974336][ T50] usb 2-1: device descriptor read/all, error -71 [ 727.970476][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3600'. [ 735.200040][ T5702] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 735.371767][ T5702] usb 8-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 735.377680][ T5702] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.377734][ T5702] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 735.377757][ T5702] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 735.377780][ T5702] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 735.377805][ T5702] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 735.377826][ T5702] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 735.377869][ T5702] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.403220][ T5702] usb 8-1: config 0 descriptor?? [ 735.426925][ T5702] appledisplay 8-1:0.0: Submitting URB failed [ 735.427086][ T5702] appledisplay 8-1:0.0: probe with driver appledisplay failed with error -5 [ 735.657122][T16757] netlink: 'syz.8.3604': attribute type 19 has an invalid length. [ 736.313764][T16376] usb 8-1: USB disconnect, device number 16 [ 738.148558][T16767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3612'. [ 739.179988][ T5718] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 739.330013][ T5718] usb 7-1: Using ep0 maxpacket: 32 [ 739.330690][ T5718] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 739.335547][ T5718] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 739.335572][ T5718] usb 7-1: config 0 has no interface number 0 [ 739.335615][ T5718] usb 7-1: config 0 interface 12 has no altsetting 0 [ 739.337976][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.337999][ T5718] usb 7-1: Product: syz [ 739.338012][ T5718] usb 7-1: Manufacturer: syz [ 739.338026][ T5718] usb 7-1: SerialNumber: syz [ 739.431668][ T5718] usb 7-1: config 0 descriptor?? [ 739.468702][T16774] Bluetooth: hci0: unsupported parameter 255 [ 739.468835][T16774] Bluetooth: hci0: unsupported parameter 255 [ 739.969599][T16768] option changes via remount are deprecated (pid=16766 comm=syz.6.3608) [ 739.982653][ T5718] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 739.982692][ T5718] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 739.982701][ T5718] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 739.982754][ T5718] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 740.044809][ T5718] usb 7-1: USB disconnect, device number 7 [ 743.361657][ T1235] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 743.511237][ T1235] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 743.512425][ T1235] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.512463][ T1235] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 743.512476][ T1235] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 743.512490][ T1235] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 743.512528][ T1235] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.592353][T16806] netlink: 'syz.9.3625': attribute type 19 has an invalid length. [ 744.180097][ T1235] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 744.330764][ T1235] usb 8-1: Using ep0 maxpacket: 32 [ 744.338612][ T1235] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 744.346142][ T1235] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 744.346174][ T1235] usb 8-1: config 0 has no interface number 0 [ 744.346221][ T1235] usb 8-1: config 0 interface 12 has no altsetting 0 [ 744.359928][ T1235] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.359955][ T1235] usb 8-1: Product: syz [ 744.359970][ T1235] usb 8-1: Manufacturer: syz [ 744.359984][ T1235] usb 8-1: SerialNumber: syz [ 744.375350][ T1235] usb 8-1: config 0 descriptor?? [ 744.791345][T16813] option changes via remount are deprecated (pid=16812 comm=syz.7.3628) [ 744.801127][ T1235] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 744.801181][ T1235] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 744.801199][ T1235] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 744.801292][ T1235] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 744.822823][ T1235] usb 8-1: USB disconnect, device number 17 [ 744.843695][T15144] udevd[15144]: setting owner of /dev/bus/usb/008/017 to uid=0, gid=0 failed: No such file or directory [ 744.935934][ T5732] usb 9-1: USB disconnect, device number 16 [ 746.643877][ T997] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 747.539311][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.539367][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.649921][ T997] usb 2-1: Using ep0 maxpacket: 8 [ 747.650786][ T997] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 747.656473][ T997] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 747.656488][ T997] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.656499][ T997] usb 2-1: config 0 has no interface number 0 [ 747.656516][ T997] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 747.656537][ T997] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 747.656551][ T997] usb 2-1: config 0 interface 255 has no altsetting 0 [ 747.656571][ T997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.678247][ T997] usb 2-1: config 0 descriptor?? [ 747.691085][ T997] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 747.758138][ T5586] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 747.919995][ T5586] usb 8-1: Using ep0 maxpacket: 32 [ 747.922916][ T5586] usb 8-1: unable to get BOS descriptor or descriptor too short [ 747.922974][ T5586] usb 8-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 747.925812][ T5586] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 747.988876][ T5586] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.988904][ T5586] usb 8-1: Product: syz [ 747.988919][ T5586] usb 8-1: Manufacturer: syz [ 747.988934][ T5586] usb 8-1: SerialNumber: syz [ 748.047393][ T1235] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 748.270937][ T1235] usb 7-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 748.273764][ T1235] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.273813][ T1235] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 748.273837][ T1235] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 748.273907][ T1235] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 748.273931][ T1235] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 748.273952][ T1235] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 748.273991][ T1235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.471133][ T1235] usb 7-1: config 0 descriptor?? [ 748.503763][ T1235] appledisplay 7-1:0.0: Submitting URB failed [ 748.503936][ T1235] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -5 [ 748.592823][ T5586] usb 8-1: unit 37 not found! [ 748.592872][ T5586] usb 8-1: unit 0 not found! [ 749.312323][ T997] gspca_vc032x: reg_w err -110 [ 749.313072][ T997] vc032x 2-1:0.255: probe with driver vc032x failed with error -110 [ 749.615306][T16376] usb 7-1: USB disconnect, device number 8 [ 749.928743][ T5586] usb 8-1: USB disconnect, device number 18 [ 750.205577][ T5732] usb 2-1: USB disconnect, device number 21 [ 751.641650][T15144] udevd[15144]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.803660][ T36] audit: type=1326 audit(1787149079.499:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16863 comm="syz.1.3647" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab60fe0d9 code=0x7ffc0000 [ 751.844634][ T36] audit: type=1326 audit(1787149079.499:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16863 comm="syz.1.3647" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab60fe0d9 code=0x7ffc0000 [ 751.844975][ T36] audit: type=1326 audit(1787149079.539:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16863 comm="syz.1.3647" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f9ab60fe0d9 code=0x7ffc0000 [ 751.845457][ T36] audit: type=1326 audit(1787149079.539:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16863 comm="syz.1.3647" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab60fe0d9 code=0x7ffc0000 [ 751.845870][ T36] audit: type=1326 audit(1787149079.539:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16863 comm="syz.1.3647" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab60fe0d9 code=0x7ffc0000 [ 751.869943][ T5702] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 751.969972][ T5718] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 752.043810][ T5702] usb 10-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 752.045279][ T5702] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.045329][ T5702] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 752.045353][ T5702] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 752.045378][ T5702] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 752.045403][ T5702] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 752.045424][ T5702] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 752.045462][ T5702] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.055325][ T5702] usb 10-1: config 0 descriptor?? [ 752.068509][ T5702] appledisplay 10-1:0.0: Submitting URB failed [ 752.068646][ T5702] appledisplay 10-1:0.0: probe with driver appledisplay failed with error -5 [ 752.179995][ T5718] usb 7-1: Using ep0 maxpacket: 32 [ 752.195318][ T5718] usb 7-1: unable to get BOS descriptor or descriptor too short [ 752.195372][ T5718] usb 7-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 752.196561][ T5718] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 752.213716][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.213741][ T5718] usb 7-1: Product: syz [ 752.213754][ T5718] usb 7-1: Manufacturer: syz [ 752.213769][ T5718] usb 7-1: SerialNumber: syz [ 752.953907][ T5702] usb 10-1: USB disconnect, device number 26 [ 753.027567][ T5718] usb 7-1: unit 37 not found! [ 753.027648][ T5718] usb 7-1: unit 0 not found! [ 753.124001][ T5718] usb 7-1: USB disconnect, device number 9 [ 753.265834][T15144] udevd[15144]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.498797][ T5702] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 754.659944][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 754.660642][ T5702] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 754.662122][ T5702] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 754.662149][ T5702] usb 2-1: config 0 has no interface number 0 [ 754.662194][ T5702] usb 2-1: config 0 interface 12 has no altsetting 0 [ 754.664845][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.664860][ T5702] usb 2-1: Product: syz [ 754.664868][ T5702] usb 2-1: Manufacturer: syz [ 754.664876][ T5702] usb 2-1: SerialNumber: syz [ 754.765994][ T5702] usb 2-1: config 0 descriptor?? [ 755.392958][T16869] option changes via remount are deprecated (pid=16868 comm=syz.1.3650) [ 755.430167][ T5702] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 755.430221][ T5702] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 755.430239][ T5702] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 755.430331][ T5702] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 755.467149][ T5702] usb 2-1: USB disconnect, device number 22 [ 759.711574][T16901] netlink: 'syz.1.3660': attribute type 19 has an invalid length. [ 760.351722][T16906] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3661'. [ 766.290131][T16376] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 766.381561][ T5702] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 766.439995][T16376] usb 9-1: Using ep0 maxpacket: 32 [ 766.440866][T16376] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 766.442373][T16376] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 766.442398][T16376] usb 9-1: config 0 has no interface number 0 [ 766.442446][T16376] usb 9-1: config 0 interface 12 has no altsetting 0 [ 766.446838][T16376] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.446864][T16376] usb 9-1: Product: syz [ 766.446880][T16376] usb 9-1: Manufacturer: syz [ 766.446895][T16376] usb 9-1: SerialNumber: syz [ 767.413502][T16376] usb 9-1: config 0 descriptor?? [ 767.570896][ T5702] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 767.602903][ T5702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.602930][ T5702] usb 8-1: Product: syz [ 767.602998][ T5702] usb 8-1: Manufacturer: syz [ 767.603014][ T5702] usb 8-1: SerialNumber: syz [ 767.866900][T16932] option changes via remount are deprecated (pid=16931 comm=syz.8.3670) [ 767.891545][T16376] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 767.891667][T16376] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 767.891684][T16376] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 767.891827][T16376] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 767.975926][T16945] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3673'. [ 768.019090][T16376] usb 9-1: USB disconnect, device number 17 [ 768.461443][ T5702] (unnamed net_device) (uninitialized): Assigned a random MAC address: d6:3d:31:8a:03:31 [ 768.725520][ T31] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 768.806991][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3674'. [ 769.448490][T16952] ------------[ cut here ]------------ [ 769.448505][T16952] ODEBUG: free active (active state 0) object: ffff88803c21b8b8 object type: timer_list hint: cec_wait_timeout+0x0/0x180 [ 769.448899][T16952] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#1: syz.9.3674/16952 [ 769.449177][T16952] Modules linked in: [ 769.449210][T16952] CPU: 1 UID: 0 PID: 16952 Comm: syz.9.3674 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 769.449234][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 769.449250][T16952] RIP: 0010:debug_print_object+0x18a/0x230 [ 769.449279][T16952] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 4d 93 5f fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 a3 ef df 0a 48 83 c4 10 5b 41 5c [ 769.449296][T16952] RSP: 0018:ffffc900060c7830 EFLAGS: 00010246 [ 769.449313][T16952] RAX: 1ffffffff16df0b8 RBX: dffffc0000000000 RCX: 0000000000000000 [ 769.449329][T16952] RDX: ffffffff8bca9340 RSI: ffffffff8bca8dc0 RDI: ffffffff8fba88b0 [ 769.449345][T16952] RBP: ffffffff8bca9340 R08: ffff88803c21b8b8 R09: ffffffff8b6f9940 [ 769.449361][T16952] R10: dffffc0000000000 R11: ffffffff81b1d4e0 R12: 0000000000000000 [ 769.449373][T16952] R13: ffffffff8fba88b0 R14: ffff88803c21b8b8 R15: ffffffff8b6f85c0 [ 769.449389][T16952] FS: 00007f537c3f46c0(0000) GS:ffff888125d32000(0000) knlGS:0000000000000000 [ 769.449405][T16952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 769.449419][T16952] CR2: 0000001b2e814ff8 CR3: 0000000060152000 CR4: 00000000003526f0 [ 769.449442][T16952] Call Trace: [ 769.449456][T16952] [ 769.449495][ T5702] rtl8150 8-1:1.0: eth21: rtl8150 is detected [ 769.449464][T16952] ? __pfx_cec_wait_timeout+0x10/0x10 [ 769.449547][T16952] ? __pfx_cec_wait_timeout+0x10/0x10 [ 769.449579][T16952] debug_check_no_obj_freed+0x2e3/0x450 [ 769.449626][T16952] kfree+0x13e/0x6d0 [ 769.449716][T16952] ? cec_transmit_msg_fh+0x16f0/0x24d0 [ 769.449760][T16952] cec_transmit_msg_fh+0x16f0/0x24d0 [ 769.449857][T16952] cec_ioctl+0x2026/0x3060 [ 769.449885][T16952] ? __pfx_cec_ioctl+0x10/0x10 [ 769.449912][T16952] ? finish_task_switch+0x40e/0xc60 [ 769.450020][T16952] ? lockdep_hardirqs_on+0x7b/0x110 [ 769.450119][T16952] ? rcu_is_watching+0x16/0xb0 [ 769.450179][T16952] ? trace_sched_exit_tp+0x3a/0x130 [ 769.450201][T16952] ? __schedule+0x16f5/0x5510 [ 769.450237][T16952] ? do_vfs_ioctl+0x1184/0x1550 [ 769.450313][T16952] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 769.450365][T16952] ? irqentry_exit+0x218/0x910 [ 769.450389][T16952] ? lockdep_hardirqs_on+0x7b/0x110 [ 769.450413][T16952] ? irqentry_exit+0x218/0x910 [ 769.450451][T16952] ? security_file_ioctl+0x12a/0x2a0 [ 769.450554][T16952] ? security_file_ioctl+0x25f/0x2a0 [ 769.450581][T16952] ? __pfx_cec_ioctl+0x10/0x10 [ 769.450602][T16952] __se_sys_ioctl+0xff/0x170 [ 769.450661][T16952] do_syscall_64+0x166/0x520 [ 769.450712][T16952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.450760][T16952] ? clear_bhb_loop+0x70/0xc0 [ 769.450786][T16952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.450807][T16952] RIP: 0033:0x7f537e1de0d9 [ 769.450832][T16952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.450850][T16952] RSP: 002b:00007f537c3f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 769.450873][T16952] RAX: ffffffffffffffda RBX: 00007f537e466180 RCX: 00007f537e1de0d9 [ 769.450890][T16952] RDX: 0000200000000100 RSI: 00000000c0386105 RDI: 0000000000000005 [ 769.450904][T16952] RBP: 00007f537e275024 R08: 0000000000000000 R09: 0000000000000000 [ 769.450918][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.450931][T16952] R13: 00007f537e466218 R14: 00007f537e466180 R15: 00007fff5a1f0428 [ 769.450965][T16952] [ 769.450980][T16952] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 769.450996][T16952] CPU: 1 UID: 0 PID: 16952 Comm: syz.9.3674 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 769.451020][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 769.451033][T16952] Call Trace: [ 769.451041][T16952] [ 769.451049][T16952] vpanic+0x56d/0xa60 [ 769.451101][T16952] ? __pfx__printk+0x10/0x10 [ 769.451125][T16952] ? __pfx_vpanic+0x10/0x10 [ 769.451154][T16952] ? is_bpf_text_address+0x292/0x2b0 [ 769.451230][T16952] ? is_bpf_text_address+0x26/0x2b0 [ 769.451263][T16952] panic+0xc5/0xd0 [ 769.451292][T16952] ? __pfx_panic+0x10/0x10 [ 769.451339][T16952] __warn+0x315/0x4c0 [ 769.451368][T16952] ? debug_print_object+0xec/0x230 [ 769.451400][T16952] ? debug_print_object+0xec/0x230 [ 769.451429][T16952] __report_bug+0x276/0x570 [ 769.451501][T16952] ? debug_print_object+0xec/0x230 [ 769.451539][T16952] ? __pfx___report_bug+0x10/0x10 [ 769.451560][T16952] ? __lock_acquire+0x683/0x2ce0 [ 769.451666][T16952] ? __lock_acquire+0x683/0x2ce0 [ 769.451691][T16952] report_bug_entry+0x19b/0x290 [ 769.451714][T16952] ? debug_print_object+0x18a/0x230 [ 769.451750][T16952] ? debug_print_object+0x18f/0x230 [ 769.451778][T16952] handle_bug+0xce/0x200 [ 769.451806][T16952] exc_invalid_op+0x1a/0x50 [ 769.451833][T16952] asm_exc_invalid_op+0x1a/0x20 [ 769.451853][T16952] RIP: 0010:debug_print_object+0x18a/0x230 [ 769.451883][T16952] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 4d 93 5f fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 a3 ef df 0a 48 83 c4 10 5b 41 5c [ 769.451901][T16952] RSP: 0018:ffffc900060c7830 EFLAGS: 00010246 [ 769.451919][T16952] RAX: 1ffffffff16df0b8 RBX: dffffc0000000000 RCX: 0000000000000000 [ 769.451935][T16952] RDX: ffffffff8bca9340 RSI: ffffffff8bca8dc0 RDI: ffffffff8fba88b0 [ 769.451952][T16952] RBP: ffffffff8bca9340 R08: ffff88803c21b8b8 R09: ffffffff8b6f9940 [ 769.451968][T16952] R10: dffffc0000000000 R11: ffffffff81b1d4e0 R12: 0000000000000000 [ 769.451983][T16952] R13: ffffffff8fba88b0 R14: ffff88803c21b8b8 R15: ffffffff8b6f85c0 [ 769.452005][T16952] ? __pfx_timer_debug_hint+0x10/0x10 [ 769.452081][T16952] ? __pfx_cec_wait_timeout+0x10/0x10 [ 769.452111][T16952] ? __pfx_cec_wait_timeout+0x10/0x10 [ 769.452145][T16952] debug_check_no_obj_freed+0x2e3/0x450 [ 769.452192][T16952] kfree+0x13e/0x6d0 [ 769.452212][T16952] ? cec_transmit_msg_fh+0x16f0/0x24d0 [ 769.452248][T16952] cec_transmit_msg_fh+0x16f0/0x24d0 [ 769.452294][T16952] cec_ioctl+0x2026/0x3060 [ 769.452322][T16952] ? __pfx_cec_ioctl+0x10/0x10 [ 769.452348][T16952] ? finish_task_switch+0x40e/0xc60 [ 769.452369][T16952] ? lockdep_hardirqs_on+0x7b/0x110 [ 769.452395][T16952] ? rcu_is_watching+0x16/0xb0 [ 769.452421][T16952] ? trace_sched_exit_tp+0x3a/0x130 [ 769.452441][T16952] ? __schedule+0x16f5/0x5510 [ 769.452478][T16952] ? do_vfs_ioctl+0x1184/0x1550 [ 769.452511][T16952] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 769.452562][T16952] ? irqentry_exit+0x218/0x910 [ 769.452585][T16952] ? lockdep_hardirqs_on+0x7b/0x110 [ 769.452608][T16952] ? irqentry_exit+0x218/0x910 [ 769.452644][T16952] ? security_file_ioctl+0x12a/0x2a0 [ 769.452671][T16952] ? security_file_ioctl+0x25f/0x2a0 [ 769.452698][T16952] ? __pfx_cec_ioctl+0x10/0x10 [ 769.452726][T16952] __se_sys_ioctl+0xff/0x170 [ 769.452761][T16952] do_syscall_64+0x166/0x520 [ 769.452784][T16952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.452805][T16952] ? clear_bhb_loop+0x70/0xc0 [ 769.452831][T16952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.452852][T16952] RIP: 0033:0x7f537e1de0d9 [ 769.452870][T16952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.452888][T16952] RSP: 002b:00007f537c3f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 769.452908][T16952] RAX: ffffffffffffffda RBX: 00007f537e466180 RCX: 00007f537e1de0d9 [ 769.452924][T16952] RDX: 0000200000000100 RSI: 00000000c0386105 RDI: 0000000000000005 [ 769.452940][T16952] RBP: 00007f537e275024 R08: 0000000000000000 R09: 0000000000000000 [ 769.452954][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.452968][T16952] R13: 00007f537e466218 R14: 00007f537e466180 R15: 00007fff5a1f0428 [ 769.453002][T16952] [ 769.453337][T16952] Kernel Offset: disabled