last executing test programs: 1m42.655340907s ago: executing program 0 (id=401): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x37, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz0\x00', {0x3, 0x80, 0x7f, 0xc000}, 0x7, [0x7, 0x8ae, 0x3, 0x1, 0x140000, 0xa, 0x5133, 0xc, 0x6, 0x3, 0x6, 0x7, 0x7, 0x8, 0x1, 0xb, 0xffff, 0x3, 0x8, 0x0, 0x3ff, 0x5, 0xe1ce, 0x7f, 0x949d, 0x3, 0x6, 0xee59f85, 0x10, 0x8, 0x1, 0x3, 0x4, 0x6, 0x3, 0x4, 0x7, 0x3, 0x8, 0x9, 0x2, 0x7fff, 0x1000, 0x2, 0x8, 0x5, 0x3, 0x9, 0xa6, 0x6, 0x3, 0x1, 0x1, 0x3, 0x9, 0x5, 0xd, 0x10000, 0x6, 0x4, 0x80000000, 0x0, 0x5, 0xaec], [0x9, 0x0, 0x6, 0x7, 0x800, 0x17ed, 0x7ff, 0x7, 0xfffffffc, 0x6, 0x7, 0x3, 0xb4, 0x7, 0x9ad, 0x7, 0x1, 0x7, 0x40, 0x8, 0x3, 0xe621, 0x0, 0x0, 0x5, 0x8000, 0x6, 0x8, 0x7f, 0x8, 0x8, 0x63ae, 0x40, 0xc2f, 0x1, 0xfffffffa, 0x52f4, 0x80000000, 0x170, 0x8, 0xc9, 0x4, 0x0, 0x1, 0x5, 0x2, 0x0, 0xc39c, 0x5, 0x81, 0x400, 0x14, 0xefb, 0x8, 0x8, 0x8001, 0x9, 0x9, 0x8, 0x750a, 0x4, 0x0, 0x5, 0x7f], [0x7, 0x3, 0xfa, 0x5, 0x7, 0x8, 0xe9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x6, 0x800, 0x7, 0x1000, 0x3, 0x8001, 0x1, 0x4d, 0x4, 0x7dc, 0x4, 0x10, 0x8001, 0x0, 0x2, 0x91a5, 0x79c0, 0xfffffff8, 0xd693, 0x1, 0x10001, 0x1000, 0x6, 0x4, 0x10000000, 0x1c000000, 0x101, 0xfffff493, 0x6, 0x6, 0x1, 0x3, 0x3ff, 0x8b, 0x7, 0x105, 0x3, 0x7, 0x0, 0x1, 0x7, 0x0, 0x8, 0xfffffff7, 0x7, 0x7, 0x5, 0x3ff, 0x6, 0xff, 0xff, 0x26f], [0x2, 0x47, 0x4, 0x4, 0xbc0d, 0x200, 0x0, 0x5, 0x3, 0xc56, 0x10, 0x100, 0x15a2, 0x2, 0xffff8001, 0x6a, 0x4, 0x1, 0x9, 0x0, 0x2, 0xfffffeff, 0x10000, 0x6, 0x6, 0x6, 0x1, 0x4, 0x0, 0x1, 0x0, 0x800, 0xfffffffa, 0x3, 0x4f, 0x10, 0x48, 0x8, 0xffff, 0x5b, 0x2, 0x2, 0x400, 0xffe00000, 0xfff, 0x4, 0x8c, 0x9, 0x7fffffff, 0x9, 0x2b, 0x7, 0x3, 0xeef511c6, 0xfffffff7, 0x3, 0x2, 0x2, 0x9, 0xbc, 0xfffffffe, 0x2, 0x15b85565, 0x885]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xe8962, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f00000000c0)=0x9) 1m40.522649796s ago: executing program 0 (id=409): socket(0x10, 0x803, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000300)={0x58, 0x0, 0x68}) tkill(r0, 0x7) 1m40.514615241s ago: executing program 2 (id=410): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r6, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 1m40.285060336s ago: executing program 0 (id=412): getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f00000000c0)) 1m40.215139297s ago: executing program 2 (id=413): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x3, 0x80, 0x7f, 0xc000}, 0x7, [0x7, 0x8ae, 0x3, 0x1, 0x140000, 0xa, 0x5133, 0xc, 0x6, 0x3, 0x6, 0x7, 0x7, 0x8, 0x1, 0xb, 0xffff, 0x3, 0x8, 0x0, 0x3ff, 0x5, 0xe1ce, 0x7f, 0x949d, 0x3, 0x6, 0xee59f85, 0x10, 0x8, 0x1, 0x3, 0x4, 0x6, 0x3, 0x4, 0x7, 0x3, 0x8, 0x9, 0x2, 0x7fff, 0x1000, 0x2, 0x8, 0x5, 0x3, 0x9, 0xa6, 0x6, 0x3, 0x1, 0x1, 0x3, 0x9, 0x5, 0xd, 0x10000, 0x6, 0x4, 0x80000000, 0x0, 0x5, 0xaec], [0x9, 0x0, 0x6, 0x7, 0x800, 0x17ed, 0x7ff, 0x7, 0xfffffffc, 0x6, 0x7, 0x3, 0xb4, 0x7, 0x9ad, 0x7, 0x1, 0x7, 0x40, 0x8, 0x3, 0xe621, 0x0, 0x0, 0x5, 0x8000, 0x6, 0x8, 0x7f, 0x8, 0x8, 0x63ae, 0x40, 0xc2f, 0x1, 0xfffffffa, 0x52f4, 0x80000000, 0x170, 0x8, 0xc9, 0x4, 0x0, 0x1, 0x5, 0x2, 0x0, 0xc39c, 0x5, 0x81, 0x400, 0x14, 0xefb, 0x8, 0x8, 0x8001, 0x9, 0x9, 0x8, 0x750a, 0x4, 0x0, 0x5, 0x7f], [0x7, 0x3, 0xfa, 0x5, 0x7, 0x8, 0xe9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x6, 0x800, 0x7, 0x1000, 0x3, 0x8001, 0x1, 0x4d, 0x4, 0x7dc, 0x4, 0x10, 0x8001, 0x0, 0x2, 0x91a5, 0x79c0, 0xfffffff8, 0xd693, 0x1, 0x10001, 0x1000, 0x6, 0x4, 0x10000000, 0x1c000000, 0x101, 0xfffff493, 0x6, 0x6, 0x1, 0x3, 0x3ff, 0x8b, 0x7, 0x105, 0x3, 0x7, 0x0, 0x1, 0x7, 0x0, 0x8, 0xfffffff7, 0x7, 0x7, 0x5, 0x3ff, 0x6, 0xff, 0xff, 0x26f], [0x2, 0x47, 0x4, 0x4, 0xbc0d, 0x200, 0x0, 0x5, 0x3, 0xc56, 0x10, 0x100, 0x15a2, 0x2, 0xffff8001, 0x6a, 0x4, 0x1, 0x9, 0x0, 0x2, 0xfffffeff, 0x10000, 0x6, 0x6, 0x6, 0x1, 0x4, 0x0, 0x1, 0x0, 0x800, 0xfffffffa, 0x3, 0x4f, 0x10, 0x48, 0x8, 0xffff, 0x5b, 0x2, 0x2, 0x400, 0xffe00000, 0xfff, 0x4, 0x8c, 0x9, 0x7fffffff, 0x9, 0x2b, 0x7, 0x3, 0xeef511c6, 0xfffffff7, 0x3, 0x2, 0x2, 0x9, 0xbc, 0xfffffffe, 0x2, 0x15b85565, 0x885]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xe8962, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79") ioctl(r4, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000002000000") 1m40.100528799s ago: executing program 0 (id=414): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m39.265858849s ago: executing program 2 (id=417): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000000100)="9d") mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m37.740222789s ago: executing program 0 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 1m35.89573034s ago: executing program 2 (id=438): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m35.275778838s ago: executing program 0 (id=440): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz0\x00', {0x3, 0x80, 0x7f, 0xc000}, 0x7, [0x7, 0x8ae, 0x3, 0x1, 0x140000, 0xa, 0x5133, 0xc, 0x6, 0x3, 0x6, 0x7, 0x7, 0x8, 0x1, 0xb, 0xffff, 0x3, 0x8, 0x0, 0x3ff, 0x5, 0xe1ce, 0x7f, 0x949d, 0x3, 0x6, 0xee59f85, 0x10, 0x8, 0x1, 0x3, 0x4, 0x6, 0x3, 0x4, 0x7, 0x3, 0x8, 0x9, 0x2, 0x7fff, 0x1000, 0x2, 0x8, 0x5, 0x3, 0x9, 0xa6, 0x6, 0x3, 0x1, 0x1, 0x3, 0x9, 0x5, 0xd, 0x10000, 0x6, 0x4, 0x80000000, 0x0, 0x5, 0xaec], [0x9, 0x0, 0x6, 0x7, 0x800, 0x17ed, 0x7ff, 0x7, 0xfffffffc, 0x6, 0x7, 0x3, 0xb4, 0x7, 0x9ad, 0x7, 0x1, 0x7, 0x40, 0x8, 0x3, 0xe621, 0x0, 0x0, 0x5, 0x8000, 0x6, 0x8, 0x7f, 0x8, 0x8, 0x63ae, 0x40, 0xc2f, 0x1, 0xfffffffa, 0x52f4, 0x80000000, 0x170, 0x8, 0xc9, 0x4, 0x0, 0x1, 0x5, 0x2, 0x0, 0xc39c, 0x5, 0x81, 0x400, 0x14, 0xefb, 0x8, 0x8, 0x8001, 0x9, 0x9, 0x8, 0x750a, 0x4, 0x0, 0x5, 0x7f], [0x7, 0x3, 0xfa, 0x5, 0x7, 0x8, 0xe9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x6, 0x800, 0x7, 0x1000, 0x3, 0x8001, 0x1, 0x4d, 0x4, 0x7dc, 0x4, 0x10, 0x8001, 0x0, 0x2, 0x91a5, 0x79c0, 0xfffffff8, 0xd693, 0x1, 0x10001, 0x1000, 0x6, 0x4, 0x10000000, 0x1c000000, 0x101, 0xfffff493, 0x6, 0x6, 0x1, 0x3, 0x3ff, 0x8b, 0x7, 0x105, 0x3, 0x7, 0x0, 0x1, 0x7, 0x0, 0x8, 0xfffffff7, 0x7, 0x7, 0x5, 0x3ff, 0x6, 0xff, 0xff, 0x26f], [0x2, 0x47, 0x4, 0x4, 0xbc0d, 0x200, 0x0, 0x5, 0x3, 0xc56, 0x10, 0x100, 0x15a2, 0x2, 0xffff8001, 0x6a, 0x4, 0x1, 0x9, 0x0, 0x2, 0xfffffeff, 0x10000, 0x6, 0x6, 0x6, 0x1, 0x4, 0x0, 0x1, 0x0, 0x800, 0xfffffffa, 0x3, 0x4f, 0x10, 0x48, 0x8, 0xffff, 0x5b, 0x2, 0x2, 0x400, 0xffe00000, 0xfff, 0x4, 0x8c, 0x9, 0x7fffffff, 0x9, 0x2b, 0x7, 0x3, 0xeef511c6, 0xfffffff7, 0x3, 0x2, 0x2, 0x9, 0xbc, 0xfffffffe, 0x2, 0x15b85565, 0x885]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xe8962, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79") ioctl(r5, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000002000000") 1m34.687585005s ago: executing program 32 (id=440): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz0\x00', {0x3, 0x80, 0x7f, 0xc000}, 0x7, [0x7, 0x8ae, 0x3, 0x1, 0x140000, 0xa, 0x5133, 0xc, 0x6, 0x3, 0x6, 0x7, 0x7, 0x8, 0x1, 0xb, 0xffff, 0x3, 0x8, 0x0, 0x3ff, 0x5, 0xe1ce, 0x7f, 0x949d, 0x3, 0x6, 0xee59f85, 0x10, 0x8, 0x1, 0x3, 0x4, 0x6, 0x3, 0x4, 0x7, 0x3, 0x8, 0x9, 0x2, 0x7fff, 0x1000, 0x2, 0x8, 0x5, 0x3, 0x9, 0xa6, 0x6, 0x3, 0x1, 0x1, 0x3, 0x9, 0x5, 0xd, 0x10000, 0x6, 0x4, 0x80000000, 0x0, 0x5, 0xaec], [0x9, 0x0, 0x6, 0x7, 0x800, 0x17ed, 0x7ff, 0x7, 0xfffffffc, 0x6, 0x7, 0x3, 0xb4, 0x7, 0x9ad, 0x7, 0x1, 0x7, 0x40, 0x8, 0x3, 0xe621, 0x0, 0x0, 0x5, 0x8000, 0x6, 0x8, 0x7f, 0x8, 0x8, 0x63ae, 0x40, 0xc2f, 0x1, 0xfffffffa, 0x52f4, 0x80000000, 0x170, 0x8, 0xc9, 0x4, 0x0, 0x1, 0x5, 0x2, 0x0, 0xc39c, 0x5, 0x81, 0x400, 0x14, 0xefb, 0x8, 0x8, 0x8001, 0x9, 0x9, 0x8, 0x750a, 0x4, 0x0, 0x5, 0x7f], [0x7, 0x3, 0xfa, 0x5, 0x7, 0x8, 0xe9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x6, 0x800, 0x7, 0x1000, 0x3, 0x8001, 0x1, 0x4d, 0x4, 0x7dc, 0x4, 0x10, 0x8001, 0x0, 0x2, 0x91a5, 0x79c0, 0xfffffff8, 0xd693, 0x1, 0x10001, 0x1000, 0x6, 0x4, 0x10000000, 0x1c000000, 0x101, 0xfffff493, 0x6, 0x6, 0x1, 0x3, 0x3ff, 0x8b, 0x7, 0x105, 0x3, 0x7, 0x0, 0x1, 0x7, 0x0, 0x8, 0xfffffff7, 0x7, 0x7, 0x5, 0x3ff, 0x6, 0xff, 0xff, 0x26f], [0x2, 0x47, 0x4, 0x4, 0xbc0d, 0x200, 0x0, 0x5, 0x3, 0xc56, 0x10, 0x100, 0x15a2, 0x2, 0xffff8001, 0x6a, 0x4, 0x1, 0x9, 0x0, 0x2, 0xfffffeff, 0x10000, 0x6, 0x6, 0x6, 0x1, 0x4, 0x0, 0x1, 0x0, 0x800, 0xfffffffa, 0x3, 0x4f, 0x10, 0x48, 0x8, 0xffff, 0x5b, 0x2, 0x2, 0x400, 0xffe00000, 0xfff, 0x4, 0x8c, 0x9, 0x7fffffff, 0x9, 0x2b, 0x7, 0x3, 0xeef511c6, 0xfffffff7, 0x3, 0x2, 0x2, 0x9, 0xbc, 0xfffffffe, 0x2, 0x15b85565, 0x885]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xe8962, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79") ioctl(r5, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000002000000") 1m32.383718815s ago: executing program 2 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa100002800500010000000000060003400004000008000740000004001800068014000400"], 0xb4}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x7fffffffffffffff, 0x145102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES16], 0x0, 0x20000000, 0xfffffc3e, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x1018042, 0x0) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1f3) 1m31.363589622s ago: executing program 1 (id=453): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON=@special}) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000002c0)="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", 0x67f}], 0x1}}], 0x1, 0x40080) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401001186eeea000905821704"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 1m30.855994405s ago: executing program 2 (id=454): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x28, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m29.980623889s ago: executing program 33 (id=454): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x28, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m29.41614605s ago: executing program 1 (id=459): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x370) 1m29.118941702s ago: executing program 1 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 1m28.932377843s ago: executing program 1 (id=461): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m26.594088946s ago: executing program 1 (id=465): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e08000100000001090227000101008032"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000000100)="9d") mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m24.492431481s ago: executing program 1 (id=472): r0 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON=@special}) 1m23.538997028s ago: executing program 34 (id=472): r0 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON=@special}) 42.435250788s ago: executing program 3 (id=544): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write$P9_RREADDIR(r0, &(0x7f00000000c0)={0x44, 0x29, 0x2, {0x0, [{{0x80, 0x0, 0x3}, 0x0, 0x80, 0x21, './debug/ieee80211/phy0/aql_enable'}]}}, 0x44) 42.024184593s ago: executing program 3 (id=545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) 41.593000438s ago: executing program 3 (id=548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa100002800500010000000000060003400004000008000740000004001800068014000400"], 0xb4}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x7fffffffffffffff, 0x145102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x1018042, 0x0) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1f3) 39.79819672s ago: executing program 3 (id=552): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x8, r5) wait4(0x0, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x2000077c, 0x0, 0x0) 38.470143837s ago: executing program 3 (id=554): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) 32.105234239s ago: executing program 3 (id=562): r0 = syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x0, 0x17, 0x2, "7416"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 31.180292591s ago: executing program 35 (id=562): r0 = syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x0, 0x17, 0x2, "7416"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 15.823844562s ago: executing program 7 (id=601): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba919736d"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = accept(r1, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_usb_connect$midi(0x2, 0x63, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x8, 0x0, 0x34, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x8}, @midi_out_jack={0x15, 0x24, 0x3, 0x6, 0xff, 0x7, [{0x3, 0x4}, {0x5, 0x7}, {0x5, 0x11}, {0x31, 0x5}, {0x12, 0x1}, {0x7, 0x8}, {0x4, 0xf4}]}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x3, 0x3, [{0xc6}, {0xf, 0xa}, {0x4, 0x8}], 0x8}, @midi_out_jack={0xb, 0x24, 0x3, 0x1, 0x0, 0x2, [{0x4, 0x4}, {0x4, 0xa}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x0, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xfd}]}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xc, 0xf3, 0x7, 0x10, 0x80}, 0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="050f2a0004071050061209001410040161c798e1df64a4c56f072b530500a93b071002120e090003100b"], 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3401}}, {0xd, &(0x7f0000000440)=@string={0xd, 0x3, "9e98e2d1944989106f2d5c"}}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="000000002aefde020000000000000000", @ANYRES32=0x0, @ANYBLOB="89e64cc14026dc036f6cf08bcce3ca7fc31f0950989a0cc17ab3941b5b0a18b232eb32b96dd32b7354ac0308e0ff1543cc952d37c43b7dc1b4495234bfbde937ecb85d66a9a4d879da7f03dd662a34e6b0594deea4c12c5e4f03d7fe1b2fbdeae5ed08567af9be725e4c46cb5cc4dcfd5602bd5e0086869ec482ea915defd43c2b32", @ANYRESDEC=r4], 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mknod(&(0x7f0000000940)='./file0\x00', 0x1, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r6}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[0x0], 0x0, 0x71, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0x7}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mincore(&(0x7f00005ee000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/54) 10.772176569s ago: executing program 4 (id=616): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x199, @empty, 0xffff8b9a}, 0x1c) 10.50933317s ago: executing program 7 (id=618): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000003f010000040001002c000000", @ANYRES32, @ANYBLOB="00009801000003001669247bce327e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x2000142, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000340)={{0x5, 0x4, 0x8, 0x7, 'syz1\x00', 0x1}, 0x1, [0x7, 0xffff, 0x98, 0x805, 0x0, 0x8, 0x3, 0x101, 0x3ff, 0x3, 0x4000000000007, 0x80, 0x6, 0x3, 0x4000fff, 0x1, 0x0, 0x2, 0xf3f, 0xfffe, 0x4, 0xfffffffffffffffa, 0x0, 0xf4a, 0xfffffffffffffff7, 0x0, 0x7, 0x2, 0x4, 0xc9, 0x4, 0x3, 0x4, 0x101, 0x101, 0x3, 0x8, 0x9, 0x10a, 0x7ff, 0x7ff, 0x8, 0x3, 0x10, 0x5166f65b, 0x7fff, 0xfffffffffffffff9, 0x7728fcc0, 0x0, 0x3, 0x1, 0x8, 0xc, 0x4, 0x0, 0xfffffffffffffff4, 0x88, 0x4, 0x4, 0xffffffffffff2f8a, 0x5, 0x9, 0x7, 0x2, 0xfffbfffffffffffa, 0x6, 0x7f, 0x2, 0x1ff, 0x41ff, 0x0, 0x6, 0xffffffffffffffff, 0x2, 0xd964, 0x7, 0xfffffffffffffff9, 0xa, 0x6, 0x80000000, 0x4, 0x9, 0x1, 0xcb, 0x9, 0x243, 0xcf40, 0x6, 0xffffffffffffffff, 0x4, 0xa69, 0x8, 0x8, 0x800000000000000, 0x7fffffffffffffff, 0x9, 0xce8, 0xd, 0xffffffffffff8000, 0x5, 0x6e0, 0x1a02379b, 0xc2c, 0x13, 0x1, 0x6, 0x1, 0x0, 0x100000000002, 0x100000000, 0x8, 0x0, 0x6, 0x6, 0x4, 0x8, 0x8, 0x5, 0x2, 0x2, 0x800000000, 0x168, 0x7, 0x8, 0x7, 0x3, 0x0, 0xffc9]}) 10.424628553s ago: executing program 4 (id=619): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c000000130001002cbd70000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000580"], 0x3c}}, 0x0) 9.941279996s ago: executing program 5 (id=620): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7cc, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.535032829s ago: executing program 5 (id=621): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f00000000c0)="2e0f785c7f06660fc7b503000000b9ec0200000f320f300f784e0026660fc7b69edf0000b8010000000f01c1ea53000000be00660f303e0fc75fab", 0x3b}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x4000090) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00"], 0x4c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x30}}, 0x0) 9.320526214s ago: executing program 7 (id=623): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.011441634s ago: executing program 5 (id=625): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="00042dbd7000fddb4b38ddb2658926c49900"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) r3 = socket(0x2b, 0x80801, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r4, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000400)='./file0\x00'}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000002180)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x1014) 7.836641444s ago: executing program 6 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 7.791295003s ago: executing program 4 (id=627): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba919736d"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = accept(r1, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_usb_connect$midi(0x2, 0x63, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x8, 0x0, 0x34, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x8}, @midi_out_jack={0x15, 0x24, 0x3, 0x6, 0xff, 0x7, [{0x3, 0x4}, {0x5, 0x7}, {0x5, 0x11}, {0x31, 0x5}, {0x12, 0x1}, {0x7, 0x8}, {0x4, 0xf4}]}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x3, 0x3, [{0xc6}, {0xf, 0xa}, {0x4, 0x8}], 0x8}, @midi_out_jack={0xb, 0x24, 0x3, 0x1, 0x0, 0x2, [{0x4, 0x4}, {0x4, 0xa}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x0, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xfd}]}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xc, 0xf3, 0x7, 0x10, 0x80}, 0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="050f2a0004071050061209001410040161c798e1df64a4c56f072b530500a93b071002120e090003100b"], 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3401}}, {0xd, &(0x7f0000000440)=@string={0xd, 0x3, "9e98e2d1944989106f2d5c"}}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="000000002aefde020000000000000000", @ANYRES32=0x0, @ANYBLOB="89e64cc14026dc036f6cf08bcce3ca7fc31f0950989a0cc17ab3941b5b0a18b232eb32b96dd32b7354ac0308e0ff1543cc952d37c43b7dc1b4495234bfbde937ecb85d66a9a4d879da7f03dd662a34e6b0594deea4c12c5e4f03d7fe1b2fbdeae5ed08567af9be725e4c46cb5cc4dcfd5602bd5e0086869ec482ea915defd43c2b32", @ANYRESDEC=r4], 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mknod(&(0x7f0000000940)='./file0\x00', 0x1, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r6}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[0x0], 0x0, 0x71, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0x7}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mincore(&(0x7f00005ee000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/54) 7.743806106s ago: executing program 7 (id=628): mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(0x0) mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 7.544593892s ago: executing program 5 (id=629): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x60, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.503291126s ago: executing program 6 (id=630): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7cc, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.311488484s ago: executing program 7 (id=631): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x658, @empty, 0x0, 0x6}, 0x20) 7.256073291s ago: executing program 6 (id=632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000090a015924883000000000000200000008000a40000000010900020073797a31000000000900010073797a3000000000080005400000000814000980070002"], 0x78}}, 0x0) 6.885300199s ago: executing program 6 (id=633): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 5.189479259s ago: executing program 6 (id=634): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f00000000c0)="2e0f785c7f06660fc7b503000000b9ec0200000f320f300f784e0026660fc7b69edf0000b8010000000f01c1ea53000000be00660f303e0fc75fab", 0x3b}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x4000090) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00"], 0x4c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x30}}, 0x0) 5.042122695s ago: executing program 7 (id=635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) memfd_create(&(0x7f00000051c0)='\x02A\xbb\xff\x00\x14\x16\xae\xe5j\xe50\x0f\x14%\xba\x13\x8bn^\xe77\xf3\xad', 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1ff, 0x5}}]}}]}, 0x48}}, 0x0) 3.518915973s ago: executing program 6 (id=636): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff0000000705810340000107058202000200070503"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000000100)="9d") mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.205638929s ago: executing program 4 (id=637): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c000000130001002cbd70000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80180005801400058008000200"], 0x3c}}, 0x0) 1.50745014s ago: executing program 5 (id=638): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="00042dbd7000fddb4b38ddb2658926c49900"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) r3 = socket(0x2b, 0x80801, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r4, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000400)='./file0\x00'}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000002180)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x1014) 1.250248902s ago: executing program 4 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 581.875502ms ago: executing program 5 (id=640): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) 0s ago: executing program 4 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7cc, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. [ 80.996895][ T5571] cgroup: Unknown subsys name 'net' [ 81.246869][ T5571] cgroup: Unknown subsys name 'cpuset' [ 81.312580][ T5571] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.145200][ T5571] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.675999][ T5591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.691324][ T5593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.705064][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.705832][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.707221][ T5593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.708573][ T5593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.709215][ T5593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.737906][ T4898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.740479][ T4898] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.743983][ T4898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.747446][ T4898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.750392][ T4898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.754897][ T5599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.755675][ T5599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.779742][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.783287][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.790192][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.797230][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.798367][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.843176][ T4898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.873088][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.885269][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.896098][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.911809][ T5591] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.933018][ T5591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.046960][ T10] cfg80211: failed to load regulatory.db [ 87.855856][ T5597] Bluetooth: hci1: command tx timeout [ 87.922497][ T5597] Bluetooth: hci2: command tx timeout [ 87.922616][ T5597] Bluetooth: hci3: command tx timeout [ 88.002225][ T4898] Bluetooth: hci4: command tx timeout [ 88.002593][ T4898] Bluetooth: hci0: command tx timeout [ 88.616897][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.618025][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.618563][ T5584] bridge_slave_0: entered allmulticast mode [ 88.620240][ T5584] bridge_slave_0: entered promiscuous mode [ 88.641034][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.641216][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.641370][ T5583] bridge_slave_0: entered allmulticast mode [ 88.645052][ T5583] bridge_slave_0: entered promiscuous mode [ 88.665649][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.665768][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.666346][ T5582] bridge_slave_0: entered allmulticast mode [ 88.668956][ T5582] bridge_slave_0: entered promiscuous mode [ 88.677259][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.677378][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.677885][ T5584] bridge_slave_1: entered allmulticast mode [ 88.682754][ T5584] bridge_slave_1: entered promiscuous mode [ 88.698590][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.698742][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.699241][ T5583] bridge_slave_1: entered allmulticast mode [ 88.704345][ T5583] bridge_slave_1: entered promiscuous mode [ 88.719725][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.719845][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.720005][ T5582] bridge_slave_1: entered allmulticast mode [ 88.723868][ T5582] bridge_slave_1: entered promiscuous mode [ 88.876715][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.898642][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.914515][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.914849][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.915068][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.915249][ T5587] bridge_slave_0: entered allmulticast mode [ 88.917184][ T5587] bridge_slave_0: entered promiscuous mode [ 88.921169][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.022672][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.022758][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.022877][ T5585] bridge_slave_0: entered allmulticast mode [ 89.024468][ T5585] bridge_slave_0: entered promiscuous mode [ 89.029991][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.037048][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.037301][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.037451][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.037605][ T5587] bridge_slave_1: entered allmulticast mode [ 89.040255][ T5587] bridge_slave_1: entered promiscuous mode [ 89.072305][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.072439][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.072619][ T5585] bridge_slave_1: entered allmulticast mode [ 89.075302][ T5585] bridge_slave_1: entered promiscuous mode [ 89.206726][ T5584] team0: Port device team_slave_0 added [ 89.223731][ T5583] team0: Port device team_slave_0 added [ 89.225991][ T5582] team0: Port device team_slave_0 added [ 89.231841][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.248285][ T5584] team0: Port device team_slave_1 added [ 89.254119][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.257816][ T5583] team0: Port device team_slave_1 added [ 89.264825][ T5582] team0: Port device team_slave_1 added [ 89.268791][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.290869][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.397905][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.397941][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.397958][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.419811][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.419827][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.419850][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.425411][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.425432][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.425455][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.434233][ T5587] team0: Port device team_slave_0 added [ 89.435397][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.435409][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.435439][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.440007][ T5585] team0: Port device team_slave_0 added [ 89.441322][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.441334][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.441357][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.444997][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.445010][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.445033][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.451252][ T5587] team0: Port device team_slave_1 added [ 89.472981][ T5585] team0: Port device team_slave_1 added [ 89.626174][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.626191][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.626213][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.673424][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.673440][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.673463][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.697866][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.697883][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.697906][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.723436][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.723453][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.723476][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.763596][ T5584] hsr_slave_0: entered promiscuous mode [ 89.767220][ T5584] hsr_slave_1: entered promiscuous mode [ 89.794980][ T5582] hsr_slave_0: entered promiscuous mode [ 89.796328][ T5582] hsr_slave_1: entered promiscuous mode [ 89.797594][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 89.797690][ T5582] Cannot create hsr debugfs directory [ 89.820984][ T5583] hsr_slave_0: entered promiscuous mode [ 89.823836][ T5583] hsr_slave_1: entered promiscuous mode [ 89.824870][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 89.824893][ T5583] Cannot create hsr debugfs directory [ 89.924319][ T5597] Bluetooth: hci1: command tx timeout [ 90.003272][ T4898] Bluetooth: hci2: command tx timeout [ 90.003376][ T5597] Bluetooth: hci3: command tx timeout [ 90.082039][ T5597] Bluetooth: hci0: command tx timeout [ 90.082079][ T5597] Bluetooth: hci4: command tx timeout [ 90.498483][ T5587] hsr_slave_0: entered promiscuous mode [ 90.499332][ T5587] hsr_slave_1: entered promiscuous mode [ 90.500518][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 90.500541][ T5587] Cannot create hsr debugfs directory [ 90.514740][ T5585] hsr_slave_0: entered promiscuous mode [ 90.516102][ T5585] hsr_slave_1: entered promiscuous mode [ 90.517097][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 90.517120][ T5585] Cannot create hsr debugfs directory [ 91.209545][ T5584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.263460][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.271311][ T5584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.295994][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.300489][ T5584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.335946][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.355276][ T5584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.396391][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.485883][ T5583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.530657][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.537634][ T5583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.566395][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.584697][ T5583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.626442][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.650610][ T5583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.677876][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.857162][ T5587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.896522][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.910846][ T5587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.936089][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.953558][ T5587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.975827][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.010401][ T5587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.012143][ T4898] Bluetooth: hci1: command tx timeout [ 92.038910][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.083143][ T4898] Bluetooth: hci3: command tx timeout [ 92.083158][ T5597] Bluetooth: hci2: command tx timeout [ 92.164002][ T4898] Bluetooth: hci4: command tx timeout [ 92.164039][ T4898] Bluetooth: hci0: command tx timeout [ 92.204503][ T5585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.237671][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.250365][ T5585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.276909][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.286048][ T5585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.305118][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.340254][ T5585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.366067][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.422867][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.528652][ T5582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.555070][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.573469][ T5582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.617652][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.630373][ T5582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.657443][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.663933][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.667820][ T5582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.696202][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.750361][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.750505][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.783716][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.808264][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.808349][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.904601][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.954543][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.954670][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.986093][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.024455][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.024574][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.099982][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.181727][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.188589][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.254653][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.294004][ T3206] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.294202][ T3206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.391052][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.421780][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.476932][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.477603][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.537876][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.539215][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.621380][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.726007][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.726241][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.837073][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.837260][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.082075][ T4898] Bluetooth: hci1: command tx timeout [ 94.130920][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.162500][ T4898] Bluetooth: hci2: command tx timeout [ 94.162536][ T4898] Bluetooth: hci3: command tx timeout [ 94.242219][ T4898] Bluetooth: hci0: command tx timeout [ 94.242292][ T5597] Bluetooth: hci4: command tx timeout [ 94.780890][ T5584] veth0_vlan: entered promiscuous mode [ 94.814078][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.848296][ T5584] veth1_vlan: entered promiscuous mode [ 95.171187][ T5584] veth0_macvtap: entered promiscuous mode [ 95.177446][ T5583] veth0_vlan: entered promiscuous mode [ 95.201248][ T5584] veth1_macvtap: entered promiscuous mode [ 95.270667][ T5583] veth1_vlan: entered promiscuous mode [ 95.314268][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.397463][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.429209][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.460281][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.624805][ T5583] veth0_macvtap: entered promiscuous mode [ 95.725266][ T5583] veth1_macvtap: entered promiscuous mode [ 95.811110][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.024525][ T5587] veth0_vlan: entered promiscuous mode [ 96.056827][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.095715][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.097703][ T5587] veth1_vlan: entered promiscuous mode [ 96.206627][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.206650][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.464909][ T5585] veth0_vlan: entered promiscuous mode [ 96.551224][ T5582] veth0_vlan: entered promiscuous mode [ 96.581043][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.581064][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.607163][ T5587] veth0_macvtap: entered promiscuous mode [ 96.725683][ T5585] veth1_vlan: entered promiscuous mode [ 96.734658][ T5587] veth1_macvtap: entered promiscuous mode [ 96.776788][ T5582] veth1_vlan: entered promiscuous mode [ 96.802849][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.802871][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.899966][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.998958][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.024728][ T2152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.024751][ T2152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.051563][ T5585] veth0_macvtap: entered promiscuous mode [ 97.080003][ T5582] veth0_macvtap: entered promiscuous mode [ 97.099978][ T5585] veth1_macvtap: entered promiscuous mode [ 97.129789][ T5582] veth1_macvtap: entered promiscuous mode [ 97.649556][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.717340][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.807267][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.877637][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.027596][ T2152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.027618][ T2152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.438672][ T5787] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 98.613403][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.219788][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.219809][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.534805][ T1136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.535026][ T1136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.535572][ T1136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.814177][ T197] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.907833][ T2152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.907893][ T2152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.017307][ T197] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.070809][ T197] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.070847][ T197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.070886][ T197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 100.070907][ T197] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.070956][ T197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.179137][ T197] usb 1-1: config 0 descriptor?? [ 100.267941][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.267965][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.563782][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.563803][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.982079][ T197] usbhid 1-1:0.0: can't add hid device: -71 [ 100.982199][ T197] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 101.012196][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.012710][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.048345][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.135401][ T197] usb 1-1: USB disconnect, device number 2 [ 104.326795][ T5817] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 106.227704][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.227728][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.430721][ T5837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17'. [ 106.430811][ T5837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17'. [ 106.433230][ T1623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.433274][ T1623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.433308][ T1623] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.433341][ T1623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.433373][ T1623] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.433405][ T1623] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.559633][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.562624][ T1130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.562915][ T1130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.563079][ T1130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.563576][ T1130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.563762][ T1130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.682195][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.377416][ T5868] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 110.983825][ T5868] bond1 (unregistering): Released all slaves [ 113.117319][ T5866] netlink: 132 bytes leftover after parsing attributes in process `syz.4.29'. [ 113.817126][ T36] audit: type=1326 audit(1787640092.493:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5898 comm="syz.1.36" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f437e14e0d9 code=0x0 [ 114.133549][ T42] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 114.330839][ T42] usb 5-1: not running at top speed; connect to a high speed hub [ 114.330881][ T42] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0 [ 114.357234][ T42] usb 5-1: config 8 has an invalid interface number: 44 but max is 0 [ 114.357260][ T42] usb 5-1: config 8 has no interface number 0 [ 114.357290][ T42] usb 5-1: config 8 interface 44 has no altsetting 0 [ 114.364375][ T42] usb 5-1: string descriptor 0 read error: -22 [ 114.364798][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.959216][ T42] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state. [ 115.660958][ T5917] netlink: 'syz.1.42': attribute type 2 has an invalid length. [ 115.661031][ T5917] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 118.157666][ T42] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 118.174440][ T42] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 118.174525][ T42] usb 5-1: media controller created [ 118.179330][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.407287][ T42] DVB: Unable to find symbol dib7000p_attach() [ 118.407303][ T42] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 118.407316][ T42] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 118.413453][ T42] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 118.413510][ T42] usb 5-1: media controller created [ 118.425633][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.322417][ T42] DVB: Unable to find symbol dib7000p_attach() [ 120.322433][ T42] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 120.522125][ T42] rc_core: IR keymap rc-dib0700-rc5 not found [ 120.522148][ T42] Registered IR keymap rc-empty [ 120.522752][ T42] dvb-usb: could not initialize remote control. [ 120.522763][ T42] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected. [ 121.116859][ T42] usb 5-1: USB disconnect, device number 2 [ 123.359489][ T5954] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 123.683108][ T42] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected. [ 123.995030][ T5970] process 'syz.4.56' launched './file2' with NULL argv: empty string added [ 128.095509][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'. [ 128.095538][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'. [ 131.426357][ T6059] ======================================================= [ 131.426357][ T6059] WARNING: The mand mount option has been deprecated and [ 131.426357][ T6059] and is ignored by this kernel. Remove the mand [ 131.426357][ T6059] option from the mount to silence this warning. [ 131.426357][ T6059] ======================================================= [ 133.527137][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.527239][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.130284][ T6107] netlink: 44 bytes leftover after parsing attributes in process `syz.1.99'. [ 138.176756][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.222985][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.250513][ T6110] netlink: 44 bytes leftover after parsing attributes in process `syz.1.99'. [ 138.301083][ T6111] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 138.749437][ T6119] netlink: 46 bytes leftover after parsing attributes in process `syz.3.102'. [ 140.330579][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.108'. [ 140.330617][ T6137] netlink: 'syz.4.108': attribute type 7 has an invalid length. [ 140.330630][ T6137] netlink: 'syz.4.108': attribute type 8 has an invalid length. [ 140.330642][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 140.351552][ T6137] syz_tun: entered promiscuous mode [ 140.426841][ T6137] syz_tun: left promiscuous mode [ 140.799499][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 141.393772][ T6153] netlink: 46 bytes leftover after parsing attributes in process `syz.0.115'. [ 145.777053][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.130'. [ 145.777090][ T6196] netlink: 'syz.0.130': attribute type 7 has an invalid length. [ 145.777105][ T6196] netlink: 'syz.0.130': attribute type 8 has an invalid length. [ 145.777117][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 145.808321][ T6196] syz_tun: entered promiscuous mode [ 145.859939][ T6196] syz_tun: left promiscuous mode [ 146.455745][ T6202] netlink: 46 bytes leftover after parsing attributes in process `syz.1.131'. [ 148.210049][ T6229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.143'. [ 148.210085][ T6229] netlink: 'syz.4.143': attribute type 7 has an invalid length. [ 148.210098][ T6229] netlink: 'syz.4.143': attribute type 8 has an invalid length. [ 148.210110][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'. [ 148.489617][ T6229] syz_tun: entered promiscuous mode [ 148.703488][ T6229] syz_tun: left promiscuous mode [ 149.069084][ T6233] netlink: 46 bytes leftover after parsing attributes in process `syz.2.146'. [ 149.592034][ T5705] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.677246][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 150.738725][ T5705] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 150.753217][ T5705] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 150.753247][ T5705] usb 1-1: config 179 has no interface number 0 [ 150.753296][ T5705] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 150.753323][ T5705] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 150.753350][ T5705] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.753374][ T5705] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 150.753416][ T5705] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 150.753462][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.534311][ T6245] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.335451][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 152.335532][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 152.387854][ T5590] usb 1-1: USB disconnect, device number 3 [ 152.427005][ T5705] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 152.512726][ T6279] netlink: 46 bytes leftover after parsing attributes in process `syz.3.162'. [ 152.934765][ T5705] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 153.092193][ T5705] usb 3-1: Using ep0 maxpacket: 16 [ 153.093858][ T5705] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 153.099164][ T5705] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 153.099197][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.156963][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.156993][ T5705] usb 3-1: Product: syz [ 153.157007][ T5705] usb 3-1: Manufacturer: syz [ 153.157021][ T5705] usb 3-1: SerialNumber: syz [ 153.169562][ T6288] device-mapper: ioctl: name not supplied when creating device [ 153.171001][ T6288] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 153.319672][ T5705] usb 3-1: config 0 descriptor?? [ 153.364010][ T5705] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 153.364048][ T5705] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 154.921149][ T5705] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 154.932030][ T5705] em28xx 3-1:0.0: Config register raw data: 0x3d [ 154.932055][ T5705] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 154.932071][ T5705] em28xx 3-1:0.0: No AC97 audio processor [ 155.657413][ T6311] netlink: 46 bytes leftover after parsing attributes in process `syz.1.174'. [ 155.771739][ T42] usb 3-1: USB disconnect, device number 2 [ 155.914939][ T31] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 155.932179][ T6320] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 156.073476][ T31] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 156.076377][ T31] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 156.076412][ T31] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.076439][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.076473][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.148979][ T31] usb 5-1: config 0 descriptor?? [ 156.155781][ T6308] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 156.402698][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 156.402829][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 156.442877][ T31] usb 5-1: USB disconnect, device number 3 [ 158.125621][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.186'. [ 158.125657][ T6347] netlink: 'syz.4.186': attribute type 7 has an invalid length. [ 158.125670][ T6347] netlink: 'syz.4.186': attribute type 8 has an invalid length. [ 158.125682][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 158.227962][ T6347] syz_tun: entered promiscuous mode [ 158.255154][ T6351] netlink: 46 bytes leftover after parsing attributes in process `syz.2.187'. [ 158.271489][ T5590] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 158.281461][ T6347] syz_tun: left promiscuous mode [ 158.422730][ T5590] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 158.424060][ T5590] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 158.424086][ T5590] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 158.424103][ T5590] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 158.424123][ T5590] usb 2-1: config 220 has no interface number 2 [ 158.424211][ T5590] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 158.424238][ T5590] usb 2-1: config 220 interface 0 has no altsetting 0 [ 158.424256][ T5590] usb 2-1: config 220 interface 76 has no altsetting 0 [ 158.424284][ T5590] usb 2-1: config 220 interface 1 has no altsetting 0 [ 158.478156][ T5590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.478185][ T5590] usb 2-1: Product: syz [ 158.478201][ T5590] usb 2-1: Manufacturer: syz [ 158.478216][ T5590] usb 2-1: SerialNumber: syz [ 159.096650][ T5590] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 159.096698][ T5590] uvcvideo 2-1:220.0: No valid video chain found. [ 159.096767][ T5590] usb 2-1: selecting invalid altsetting 0 [ 159.167444][ T5590] usb 2-1: selecting invalid altsetting 0 [ 159.167653][ T5590] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 159.210949][ T5590] usb 2-1: USB disconnect, device number 2 [ 160.165870][ T36] audit: type=1326 audit(1787640138.823:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6368 comm="syz.4.194" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2464d4e0d9 code=0x0 [ 160.335441][ T6377] syzkaller0: entered promiscuous mode [ 160.335469][ T6377] syzkaller0: entered allmulticast mode [ 160.941282][ T6385] netlink: 46 bytes leftover after parsing attributes in process `syz.0.199'. [ 161.147714][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 161.945022][ T6399] syz.0.203 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 161.945060][ T6399] CPU: 0 UID: 0 PID: 6399 Comm: syz.0.203 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 161.945084][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.945096][ T6399] Call Trace: [ 161.945105][ T6399] [ 161.945113][ T6399] dump_stack_lvl+0xe8/0x150 [ 161.945152][ T6399] dump_header+0xd3/0x4b0 [ 161.945195][ T6399] oom_kill_process+0x3ab/0x9e0 [ 161.945228][ T6399] out_of_memory+0x1064/0x1480 [ 161.945270][ T6399] ? __pfx_out_of_memory+0x10/0x10 [ 161.945297][ T6399] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 161.945317][ T6399] ? _mutex_lock_killable+0x152/0x1d0 [ 161.945340][ T6399] ? try_charge_memcg+0xbbe/0x15c0 [ 161.945366][ T6399] try_charge_memcg+0xc7d/0x15c0 [ 161.945402][ T6399] ? __pfx_try_charge_memcg+0x10/0x10 [ 161.945442][ T6399] ? charge_memcg+0x47/0x310 [ 161.945466][ T6399] charge_memcg+0x1dd/0x310 [ 161.945490][ T6399] __mem_cgroup_charge+0x25/0x80 [ 161.945512][ T6399] shmem_get_folio_gfp+0x81a/0x1c40 [ 161.945565][ T6399] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 161.945591][ T6399] ? filemap_map_pages+0x1e0/0x1c50 [ 161.945626][ T6399] shmem_fault+0x170/0x380 [ 161.945652][ T6399] __do_fault+0x138/0x2a0 [ 161.945677][ T6399] do_pte_missing+0x1828/0x28f0 [ 161.945707][ T6399] ? handle_mm_fault+0xed/0x2690 [ 161.945729][ T6399] handle_mm_fault+0xe81/0x2690 [ 161.945753][ T6399] ? handle_mm_fault+0xed/0x2690 [ 161.945780][ T6399] ? __pfx_handle_mm_fault+0x10/0x10 [ 161.945799][ T6399] ? follow_page_pte+0x74b/0xf20 [ 161.945827][ T6399] ? __pfx_follow_page_pte+0x10/0x10 [ 161.945856][ T6399] __get_user_pages+0x1676/0x2650 [ 161.945916][ T6399] populate_vma_page_range+0x2be/0x3c0 [ 161.945946][ T6399] ? __pfx_populate_vma_page_range+0x10/0x10 [ 161.945974][ T6399] ? userfaultfd_unmap_complete+0x292/0x310 [ 161.946000][ T6399] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 161.946024][ T6399] __mm_populate+0x25f/0x390 [ 161.946052][ T6399] ? __pfx___mm_populate+0x10/0x10 [ 161.946075][ T6399] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 161.946097][ T6399] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 161.946116][ T6399] ? up_write+0x5a/0x190 [ 161.946144][ T6399] vm_mmap_pgoff+0x356/0x4e0 [ 161.946185][ T6399] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 161.946212][ T6399] ? rcu_is_watching+0x16/0xb0 [ 161.946240][ T6399] ? __x64_sys_mmap+0x7f/0x140 [ 161.946269][ T6399] do_syscall_64+0x166/0x520 [ 161.946288][ T6399] ? trace_irq_disable+0x3b/0x140 [ 161.946307][ T6399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.946325][ T6399] ? clear_bhb_loop+0x70/0xc0 [ 161.946347][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.946364][ T6399] RIP: 0033:0x7f91ac48e0d9 [ 161.946381][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.946397][ T6399] RSP: 002b:00007f91aa6c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 161.946417][ T6399] RAX: ffffffffffffffda RBX: 00007f91ac716090 RCX: 00007f91ac48e0d9 [ 161.946430][ T6399] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 161.946443][ T6399] RBP: 00007f91ac525024 R08: ffffffffffffffff R09: 0000000000000000 [ 161.946455][ T6399] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 161.946467][ T6399] R13: 00007f91ac716128 R14: 00007f91ac716090 R15: 00007fff8e3b2e08 [ 161.946498][ T6399] [ 161.946506][ T6399] memory: usage 96kB, limit 96kB, failcnt 43 [ 161.946517][ T6399] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 161.946530][ T6399] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 161.946540][ T6399] Memory cgroup stats for /syz0/test: [ 161.948264][ T6399] cache 98304 [ 161.948276][ T6399] rss 0 [ 161.948283][ T6399] shmem 98304 [ 161.948290][ T6399] mapped_file 98304 [ 161.948298][ T6399] dirty 0 [ 161.948305][ T6399] writeback 0 [ 161.948312][ T6399] workingset_refault_anon 0 [ 161.948319][ T6399] workingset_refault_file 0 [ 161.948327][ T6399] swap 0 [ 161.948334][ T6399] swapcached 0 [ 161.948341][ T6399] pgpgin 24 [ 161.948347][ T6399] pgpgout 0 [ 161.948354][ T6399] pgfault 25 [ 161.948361][ T6399] pgmajfault 0 [ 161.948368][ T6399] inactive_anon 0 [ 161.948374][ T6399] active_anon 98304 [ 161.948382][ T6399] inactive_file 0 [ 161.948388][ T6399] active_file 0 [ 161.948395][ T6399] unevictable 0 [ 161.948402][ T6399] hierarchical_memory_limit 98304 [ 161.948409][ T6399] hierarchical_memsw_limit 9223372036854771712 [ 161.948417][ T6399] total_cache 98304 [ 161.948424][ T6399] total_rss 0 [ 161.948431][ T6399] total_shmem 98304 [ 161.948438][ T6399] total_mapped_file 98304 [ 161.948445][ T6399] total_dirty 0 [ 161.948452][ T6399] total_writeback 0 [ 161.948459][ T6399] total_workingset_refault_anon 0 [ 161.948466][ T6399] total_workingset_refault_file 0 [ 161.948474][ T6399] total_swap 0 [ 161.948481][ T6399] total_swapcached 0 [ 161.948489][ T6399] total_pgpgin 24 [ 161.948496][ T6399] total_pgpgout 0 [ 161.948503][ T6399] total_pgfault 25 [ 161.948510][ T6399] total_pgmajfault 0 [ 161.948518][ T6399] total_inactive_anon 0 [ 161.948525][ T6399] total_active_anon 98304 [ 161.948532][ T6399] total_inactive_file 0 [ 161.948540][ T6399] total_active_file 0 [ 161.948547][ T6399] total_unevictable 0 [ 161.948554][ T6399] anon_cost 10 [ 161.948561][ T6399] file_cost 0 [ 161.948568][ T6399] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.203,pid=6397,uid=0 [ 162.526990][ T6399] Memory cgroup out of memory: Killed process 6397 (syz.0.203) total-vm:104432kB, anon-rss:1432kB, file-rss:22592kB, shmem-rss:7176kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 163.291998][ T5590] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.342123][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.342154][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.446945][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.446975][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.463981][ T5590] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 163.496172][ T5590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.523432][ T5590] usb 1-1: config 0 descriptor?? [ 163.937375][ T5590] [drm:udl_init] *ERROR* Selecting channel failed [ 164.224824][ T5590] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 164.224853][ T5590] [drm] Initialized udl on minor 1 [ 164.257697][ T5590] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 164.280961][ T5590] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 164.304135][ T5590] usb 1-1: USB disconnect, device number 4 [ 167.342758][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.342790][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.369921][ T6478] overlayfs: missing 'lowerdir' [ 167.378597][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.380072][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.101891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 168.126758][ T6484] Zero length message leads to an empty skb [ 170.400894][ T6517] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 170.401703][ T6517] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 170.419887][ T6510] syz.0.240 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 170.427212][ T6510] CPU: 1 UID: 0 PID: 6510 Comm: syz.0.240 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.427240][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.427251][ T6510] Call Trace: [ 170.427259][ T6510] [ 170.427268][ T6510] dump_stack_lvl+0xe8/0x150 [ 170.427302][ T6510] dump_header+0xd3/0x4b0 [ 170.427331][ T6510] oom_kill_process+0x3ab/0x9e0 [ 170.427361][ T6510] out_of_memory+0x1064/0x1480 [ 170.427398][ T6510] ? __pfx_out_of_memory+0x10/0x10 [ 170.427423][ T6510] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 170.427444][ T6510] ? _mutex_lock_killable+0x152/0x1d0 [ 170.427470][ T6510] ? try_charge_memcg+0xbbe/0x15c0 [ 170.427496][ T6510] try_charge_memcg+0xc7d/0x15c0 [ 170.427535][ T6510] ? __pfx_try_charge_memcg+0x10/0x10 [ 170.427577][ T6510] ? charge_memcg+0x47/0x310 [ 170.427603][ T6510] charge_memcg+0x1dd/0x310 [ 170.427628][ T6510] __mem_cgroup_charge+0x25/0x80 [ 170.427650][ T6510] shmem_get_folio_gfp+0x81a/0x1c40 [ 170.427703][ T6510] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 170.427737][ T6510] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 170.427764][ T6510] shmem_write_begin+0x166/0x320 [ 170.427789][ T6510] generic_perform_write+0x2ad/0x8b0 [ 170.427830][ T6510] ? __pfx_generic_perform_write+0x10/0x10 [ 170.427857][ T6510] ? generic_write_checks_count+0x426/0x530 [ 170.427885][ T6510] ? file_update_time_flags+0x2db/0x450 [ 170.427908][ T6510] shmem_file_write_iter+0xfb/0x120 [ 170.427935][ T6510] iter_file_splice_write+0xa36/0x1240 [ 170.427988][ T6510] ? __pfx_iter_file_splice_write+0x10/0x10 [ 170.428034][ T6510] ? __pfx_iter_file_splice_write+0x10/0x10 [ 170.428061][ T6510] direct_splice_actor+0x104/0x160 [ 170.428100][ T6510] splice_direct_to_actor+0x586/0xcc0 [ 170.428146][ T6510] ? __pfx_direct_splice_actor+0x10/0x10 [ 170.428173][ T6510] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 170.428211][ T6510] do_splice_direct+0x19b/0x2a0 [ 170.428245][ T6510] ? __pfx_do_splice_direct+0x10/0x10 [ 170.428272][ T6510] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 170.428297][ T6510] ? rw_verify_area+0x209/0x4d0 [ 170.428328][ T6510] do_sendfile+0x540/0x7e0 [ 170.428358][ T6510] ? __pfx_do_sendfile+0x10/0x10 [ 170.428386][ T6510] ? __se_sys_futex+0x3a8/0x450 [ 170.428416][ T6510] __se_sys_sendfile64+0x144/0x1a0 [ 170.428438][ T6510] ? __pfx___se_sys_futex+0x10/0x10 [ 170.428464][ T6510] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 170.428496][ T6510] do_syscall_64+0x166/0x520 [ 170.428519][ T6510] ? trace_irq_disable+0x3b/0x140 [ 170.428541][ T6510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.428562][ T6510] ? clear_bhb_loop+0x70/0xc0 [ 170.428587][ T6510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.428607][ T6510] RIP: 0033:0x7f91ac48e0d9 [ 170.428628][ T6510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.428645][ T6510] RSP: 002b:00007f91aa6e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 170.428669][ T6510] RAX: ffffffffffffffda RBX: 00007f91ac715fa0 RCX: 00007f91ac48e0d9 [ 170.428684][ T6510] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 170.428696][ T6510] RBP: 00007f91ac525024 R08: 0000000000000000 R09: 0000000000000000 [ 170.428709][ T6510] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000 [ 170.428722][ T6510] R13: 00007f91ac716038 R14: 00007f91ac715fa0 R15: 00007fff8e3b2e08 [ 170.428758][ T6510] [ 170.430973][ T6510] memory: usage 96kB, limit 96kB, failcnt 113 [ 170.430990][ T6510] memory+swap: usage 192kB, limit 9007199254740988kB, failcnt 0 [ 170.431004][ T6510] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 170.431015][ T6510] Memory cgroup stats for /syz0/test: [ 170.431228][ T6510] cache 98304 [ 170.431236][ T6510] rss 0 [ 170.431243][ T6510] shmem 98304 [ 170.431249][ T6510] mapped_file 0 [ 170.431256][ T6510] dirty 0 [ 170.431262][ T6510] writeback 0 [ 170.431268][ T6510] workingset_refault_anon 0 [ 170.431275][ T6510] workingset_refault_file 0 [ 170.431282][ T6510] swap 98304 [ 170.431288][ T6510] swapcached 98304 [ 170.431295][ T6510] pgpgin 73 [ 170.431301][ T6510] pgpgout 49 [ 170.431307][ T6510] pgfault 26 [ 170.431313][ T6510] pgmajfault 0 [ 170.431320][ T6510] inactive_anon 0 [ 170.431327][ T6510] active_anon 0 [ 170.431333][ T6510] inactive_file 0 [ 170.431340][ T6510] active_file 0 [ 170.431346][ T6510] unevictable 0 [ 170.431353][ T6510] hierarchical_memory_limit 98304 [ 170.431360][ T6510] hierarchical_memsw_limit 9223372036854771712 [ 170.431368][ T6510] total_cache 98304 [ 170.431374][ T6510] total_rss 0 [ 170.431381][ T6510] total_shmem 98304 [ 170.431387][ T6510] total_mapped_file 0 [ 170.431394][ T6510] total_dirty 0 [ 170.431401][ T6510] total_writeback 0 [ 170.431408][ T6510] total_workingset_refault_anon 0 [ 170.431415][ T6510] total_workingset_refault_file 0 [ 170.431422][ T6510] total_swap 98304 [ 170.431428][ T6510] total_swapcached 98304 [ 170.431435][ T6510] total_pgpgin 73 [ 170.431442][ T6510] total_pgpgout 49 [ 170.431448][ T6510] total_pgfault 26 [ 170.431454][ T6510] total_pgmajfault 0 [ 170.431461][ T6510] total_inactive_anon 0 [ 170.431468][ T6510] total_active_anon 0 [ 170.438346][ T6510] total_inactive_file 0 [ 170.438360][ T6510] total_active_file 0 [ 170.438367][ T6510] total_unevictable 0 [ 170.438373][ T6510] anon_cost 378 [ 170.438380][ T6510] file_cost 0 [ 170.438388][ T6510] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.240,pid=6505,uid=0 [ 170.479078][ T6510] Memory cgroup out of memory: Killed process 6505 (syz.0.240) total-vm:102384kB, anon-rss:1436kB, file-rss:22612kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 170.872706][ T5720] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 171.055921][ T5720] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 171.062593][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.062662][ T5720] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 171.062684][ T5720] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 171.076065][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.076088][ T5720] usb 1-1: Product: syz [ 171.076101][ T5720] usb 1-1: Manufacturer: syz [ 171.076113][ T5720] usb 1-1: SerialNumber: syz [ 171.389919][ T5720] usb-storage 1-1:1.0: USB Mass Storage device detected [ 171.397325][ T36] audit: type=1800 audit(1787640149.983:4): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.246" name="manufacturer" dev="configfs" ino=11626 res=0 errno=0 [ 171.397382][ T36] audit: type=1800 audit(1787640150.003:5): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.246" name="product" dev="configfs" ino=11627 res=0 errno=0 [ 171.434463][ T5720] scsi host1: usb-storage 1-1:1.0 [ 171.627835][ T197] usb 1-1: USB disconnect, device number 5 [ 173.489171][ T6563] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 173.489235][ T6563] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 176.079116][ T6605] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 176.079179][ T6605] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 176.384399][ T6611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'. [ 176.384436][ T6611] netlink: 'syz.2.260': attribute type 7 has an invalid length. [ 176.384450][ T6611] netlink: 'syz.2.260': attribute type 8 has an invalid length. [ 176.384462][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 176.440074][ T6611] syz_tun: entered promiscuous mode [ 177.288353][ T6611] syz_tun: left promiscuous mode [ 180.053996][ T6661] netlink: 132 bytes leftover after parsing attributes in process `syz.3.291'. [ 180.414917][ T6669] trusted_key: syz.2.295 sent an empty control message without MSG_MORE. [ 184.506402][ T6756] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.071980][ T5713] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 187.179720][ T6798] device-mapper: ioctl: Invalid ioctl structure: name my, dev f801 [ 187.201985][ T5713] usb 2-1: device descriptor read/64, error -71 [ 187.531962][ T5713] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 187.692320][ T5713] usb 2-1: device descriptor read/64, error -71 [ 187.802510][ T5713] usb usb2-port1: attempt power cycle [ 188.005239][ T6804] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 188.212257][ T5713] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 188.232812][ T5713] usb 2-1: device descriptor read/8, error -71 [ 188.475767][ T5713] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 188.492843][ T5713] usb 2-1: device descriptor read/8, error -71 [ 188.605002][ T5713] usb usb2-port1: unable to enumerate USB device [ 189.434571][ T6843] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 191.120674][ T6872] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 191.776236][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.370'. [ 191.776272][ T6890] netlink: 'syz.1.370': attribute type 7 has an invalid length. [ 191.776285][ T6890] netlink: 'syz.1.370': attribute type 8 has an invalid length. [ 191.776297][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 191.895736][ T6890] syz_tun: entered promiscuous mode [ 191.923860][ T6890] syz_tun: left promiscuous mode [ 192.375838][ T6892] syzkaller0: entered promiscuous mode [ 192.375867][ T6892] syzkaller0: entered allmulticast mode [ 192.561760][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 192.909457][ T5713] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 193.673968][ T5713] usb 1-1: device descriptor read/64, error -71 [ 194.416382][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.416458][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.011861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 196.061862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 196.081859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 196.101869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 196.221872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 196.291860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 196.431876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 196.501859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 196.521873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 198.340581][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.341721][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.297936][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.317002][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.313983][ T1130] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.314036][ T1130] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.314074][ T1130] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.314111][ T1130] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.575621][ T6955] support for the xor transformation has been removed. [ 200.843429][ T5713] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 200.982661][ T5713] usb 5-1: device descriptor read/64, error -71 [ 201.222021][ T5713] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 201.344153][ T6977] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 201.344390][ T6977] Error validating options; rc = [-22] [ 201.372097][ T5713] usb 5-1: device descriptor read/64, error -71 [ 201.492480][ T5713] usb usb5-port1: attempt power cycle [ 201.582199][ T6924] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 201.742172][ T6924] usb 3-1: Using ep0 maxpacket: 8 [ 201.743266][ T6924] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 201.746247][ T6924] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.746275][ T6924] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.746288][ T6924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.746309][ T6924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.821198][ T6924] usb 3-1: config 0 descriptor?? [ 201.862015][ T5713] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 201.884586][ T5713] usb 5-1: device descriptor read/8, error -71 [ 202.151996][ T5713] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 202.173710][ T5713] usb 5-1: device descriptor read/8, error -71 [ 202.278062][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.283622][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.300108][ T5713] usb usb5-port1: unable to enumerate USB device [ 202.332003][ T928] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 202.392828][ T6924] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 202.392872][ T6924] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x6 [ 202.392896][ T6924] mcp2221 0003:04D8:00DD.0001: item fetching failed at offset 4/5 [ 202.396425][ T6924] mcp2221 0003:04D8:00DD.0001: can't parse reports [ 202.396539][ T6924] mcp2221 0003:04D8:00DD.0001: probe with driver mcp2221 failed with error -22 [ 202.521944][ T928] usb 4-1: Using ep0 maxpacket: 32 [ 202.522996][ T928] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 202.529541][ T928] usb 4-1: config index 0 descriptor too short (expected 27632, got 27) [ 202.529569][ T928] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 202.529592][ T928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 202.529613][ T928] usb 4-1: config 1 has no interface number 0 [ 202.529662][ T928] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.529690][ T928] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 202.529735][ T928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.652855][ T928] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 202.779543][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 202.779569][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 202.845976][ T6924] usb 3-1: USB disconnect, device number 3 [ 202.975961][ T928] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 203.333117][ T10] usb 4-1: USB disconnect, device number 2 [ 203.387425][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 204.783498][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 204.783524][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 205.222638][ T36] audit: type=1800 audit(1787640183.913:6): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.416" name="product" dev="configfs" ino=12697 res=0 errno=0 [ 205.602032][ T5705] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 205.634370][ T7033] capability: warning: `syz.3.420' uses deprecated v2 capabilities in a way that may be insecure [ 205.832007][ T5705] usb 3-1: device descriptor read/64, error -71 [ 206.072362][ T5705] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.232198][ T5705] usb 3-1: device descriptor read/64, error -71 [ 206.342589][ T5705] usb usb3-port1: attempt power cycle [ 206.799192][ T5705] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 206.927641][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 206.927667][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 207.160841][ T5705] usb 3-1: device descriptor read/8, error -71 [ 207.392049][ T5705] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 207.413022][ T5705] usb 3-1: device descriptor read/8, error -71 [ 207.536211][ T5705] usb usb3-port1: unable to enumerate USB device [ 207.664313][ T36] audit: type=1800 audit(1787640186.353:7): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.429" name="product" dev="configfs" ino=13445 res=0 errno=0 [ 208.161986][ T6924] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 208.322823][ T6924] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 208.342386][ T6924] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 208.342413][ T6924] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 208.342433][ T6924] usb 2-1: config 220 has no interface number 2 [ 208.342517][ T6924] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 208.342546][ T6924] usb 2-1: config 220 interface 0 has no altsetting 0 [ 208.342564][ T6924] usb 2-1: config 220 interface 76 has no altsetting 0 [ 208.342581][ T6924] usb 2-1: config 220 interface 1 has no altsetting 0 [ 208.350022][ T6924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.350048][ T6924] usb 2-1: Product: syz [ 208.350062][ T6924] usb 2-1: Manufacturer: syz [ 208.350077][ T6924] usb 2-1: SerialNumber: syz [ 208.838438][ T6924] usb 2-1: selecting invalid altsetting 0 [ 208.838848][ T6924] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 208.838879][ T6924] uvcvideo 2-1:220.0: No valid video chain found. [ 208.929372][ T6924] usb 2-1: selecting invalid altsetting 0 [ 208.929408][ T6924] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 208.967366][ T6924] usb 2-1: USB disconnect, device number 7 [ 209.059074][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 209.059100][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 210.673006][ T7102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.750380][ T7102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.766172][ T7102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.769219][ T7102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.771146][ T7102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.432030][ T7114] capability: warning: `syz.3.449' uses 32-bit capabilities (legacy support in use) [ 211.481939][ T5705] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 211.635573][ T5705] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 211.637113][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.637138][ T5705] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 211.637175][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.844269][ T7102] Bluetooth: hci4: command 0x0406 tx timeout [ 211.844410][ T7102] Bluetooth: hci3: command 0x0406 tx timeout [ 211.845308][ T7102] Bluetooth: hci1: command 0x0406 tx timeout [ 211.845526][ T7102] Bluetooth: hci0: command 0x0406 tx timeout [ 212.684155][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 212.745307][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 212.832852][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 212.975283][ T59] Bluetooth: hci2: command tx timeout [ 213.347571][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 213.492151][ T5705] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 213.701946][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 213.702905][ T5705] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 213.706700][ T5705] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 213.706726][ T5705] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 213.706748][ T5705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 213.706769][ T5705] usb 2-1: config 1 has no interface number 0 [ 213.706831][ T5705] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.706858][ T5705] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 213.707000][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.889080][ T5705] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 213.942173][ T153] bridge_slave_1: left allmulticast mode [ 213.968704][ T153] bridge_slave_1: left promiscuous mode [ 214.039286][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.069303][ T5705] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 214.240380][ T6924] usb 5-1: USB disconnect, device number 8 [ 214.476686][ T153] bridge_slave_0: left allmulticast mode [ 214.476722][ T153] bridge_slave_0: left promiscuous mode [ 214.477237][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.506944][ T5705] usb 2-1: USB disconnect, device number 8 [ 214.514870][ T5705] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 215.004935][ T4898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.046070][ T5591] Bluetooth: hci2: command tx timeout [ 215.053769][ T4898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.060233][ T4898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.094558][ T4898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.095697][ T4898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.744026][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.835162][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.892484][ T153] bond0 (unregistering): Released all slaves [ 216.089058][ T7150] pim6reg: entered allmulticast mode [ 216.127060][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 216.271062][ T7150] pim6reg: left allmulticast mode [ 217.121934][ T59] Bluetooth: hci2: command tx timeout [ 217.281963][ T59] Bluetooth: hci0: command tx timeout [ 217.353853][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 217.353877][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 219.212028][ T59] Bluetooth: hci2: command tx timeout [ 219.373269][ T59] Bluetooth: hci0: command tx timeout [ 220.239861][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 221.018784][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 221.018809][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 221.093687][ T153] hsr_slave_0: left promiscuous mode [ 221.135154][ T153] hsr_slave_1: left promiscuous mode [ 221.141261][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.227025][ T4898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.235712][ T4898] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.263697][ T4898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.268912][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.272077][ T4898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.284050][ T4898] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.441894][ T59] Bluetooth: hci0: command tx timeout [ 222.373210][ T153] team0 (unregistering): Port device team_slave_1 removed [ 222.460866][ T153] team0 (unregistering): Port device team_slave_0 removed [ 223.298163][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.298359][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.298520][ T7101] bridge_slave_0: entered allmulticast mode [ 223.335528][ T7101] bridge_slave_0: entered promiscuous mode [ 223.371973][ T59] Bluetooth: hci4: command tx timeout [ 223.379282][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.380339][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.380530][ T7101] bridge_slave_1: entered allmulticast mode [ 223.389694][ T7101] bridge_slave_1: entered promiscuous mode [ 223.533500][ T59] Bluetooth: hci0: command tx timeout [ 223.783661][ T5590] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 223.936379][ T5590] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 223.939080][ T5590] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 223.939107][ T5590] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 223.939125][ T5590] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 223.939144][ T5590] usb 5-1: config 220 has no interface number 2 [ 223.939220][ T5590] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 223.939248][ T5590] usb 5-1: config 220 interface 0 has no altsetting 0 [ 223.939266][ T5590] usb 5-1: config 220 interface 76 has no altsetting 0 [ 223.939284][ T5590] usb 5-1: config 220 interface 1 has no altsetting 0 [ 223.960824][ T5590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.960851][ T5590] usb 5-1: Product: syz [ 223.960866][ T5590] usb 5-1: Manufacturer: syz [ 223.960879][ T5590] usb 5-1: SerialNumber: syz [ 224.075630][ T7101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.279342][ T5590] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 224.279377][ T5590] uvcvideo 5-1:220.0: No valid video chain found. [ 224.279440][ T5590] usb 5-1: selecting invalid altsetting 0 [ 224.423972][ T5590] usb 5-1: selecting invalid altsetting 0 [ 224.424009][ T5590] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 224.438952][ T5590] usb 5-1: USB disconnect, device number 9 [ 224.491192][ T7101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.522195][ T59] Bluetooth: hci4: command tx timeout [ 225.636624][ T7101] team0: Port device team_slave_0 added [ 225.736071][ T7101] team0: Port device team_slave_1 added [ 226.100157][ T7284] device-mapper: ioctl: name not supplied when creating device [ 226.127230][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.127246][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.127273][ T7101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.212729][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3 [ 226.289003][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 226.289028][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 226.314591][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.314608][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.314631][ T7101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.159727][ T153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.460754][ T7101] hsr_slave_0: entered promiscuous mode [ 227.465016][ T7101] hsr_slave_1: entered promiscuous mode [ 227.612201][ T59] Bluetooth: hci4: command tx timeout [ 227.818104][ T153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.144019][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.147102][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.147343][ T7155] bridge_slave_0: entered allmulticast mode [ 228.156567][ T7155] bridge_slave_0: entered promiscuous mode [ 228.208983][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.209227][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.209417][ T7155] bridge_slave_1: entered allmulticast mode [ 228.219005][ T7155] bridge_slave_1: entered promiscuous mode [ 228.424162][ T7314] device-mapper: ioctl: name not supplied when creating device [ 228.631950][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 228.631974][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 228.735163][ T153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.447738][ T153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.514276][ T5244] 8021q: adding VLAN 0 to HW filter on device eth4 [ 229.524080][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.583513][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.696172][ T59] Bluetooth: hci4: command tx timeout [ 230.328588][ T7344] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 230.328615][ T7344] Error validating options; rc = [-22] [ 230.602045][ T197] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 230.752065][ T197] usb 5-1: Using ep0 maxpacket: 8 [ 230.754820][ T197] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 230.756397][ T197] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.756428][ T197] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.756451][ T197] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.756486][ T197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.820249][ T197] usb 5-1: config 0 descriptor?? [ 231.265531][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.267854][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.348381][ T7155] team0: Port device team_slave_0 added [ 231.460154][ T197] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 231.460191][ T197] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x6 [ 231.460215][ T197] mcp2221 0003:04D8:00DD.0002: item fetching failed at offset 4/5 [ 231.460963][ T197] mcp2221 0003:04D8:00DD.0002: can't parse reports [ 231.461090][ T197] mcp2221 0003:04D8:00DD.0002: probe with driver mcp2221 failed with error -22 [ 231.466009][ T7155] team0: Port device team_slave_1 added [ 231.643112][ T6924] usb 5-1: USB disconnect, device number 10 [ 231.964818][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.964837][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.964864][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.056142][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.056160][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.056188][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.918804][ T7155] hsr_slave_0: entered promiscuous mode [ 232.920229][ T7155] hsr_slave_1: entered promiscuous mode [ 232.921356][ T7155] debugfs: 'hsr0' already exists in 'hsr' [ 232.921381][ T7155] Cannot create hsr debugfs directory [ 233.025786][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.026020][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.026248][ T7232] bridge_slave_0: entered allmulticast mode [ 233.035902][ T7232] bridge_slave_0: entered promiscuous mode [ 233.106796][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.106940][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.107128][ T7232] bridge_slave_1: entered allmulticast mode [ 233.125452][ T7232] bridge_slave_1: entered promiscuous mode [ 233.284555][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 233.284582][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 233.804971][ T153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.983740][ T7232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.103588][ T7232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.126877][ T7101] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.165301][ T7101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.867509][ T7380] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 235.867533][ T7380] Error validating options; rc = [-22] [ 235.971189][ T153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.024744][ T7101] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.066637][ T7101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.126392][ T7101] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.152014][ T5705] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 236.169249][ T7101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.175039][ T7232] team0: Port device team_slave_0 added [ 236.196493][ T7101] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.240297][ T7101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.248719][ T7232] team0: Port device team_slave_1 added [ 236.302107][ T5705] usb 4-1: Using ep0 maxpacket: 8 [ 236.302973][ T5705] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 236.326477][ T5705] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.326519][ T5705] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.326542][ T5705] usb 4-1: config 0 interface 0 has no altsetting 0 [ 236.326577][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.381748][ T5705] usb 4-1: config 0 descriptor?? [ 236.623322][ T153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.805056][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.835486][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.957424][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.957441][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.957466][ T7232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.970050][ T5705] usbhid 4-1:0.0: can't add hid device: -71 [ 236.970182][ T5705] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 237.037360][ T5705] usb 4-1: USB disconnect, device number 3 [ 237.194802][ T153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.243643][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.243660][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.243686][ T7232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.732832][ T7232] hsr_slave_0: entered promiscuous mode [ 237.738115][ T7232] hsr_slave_1: entered promiscuous mode [ 237.741136][ T7232] debugfs: 'hsr0' already exists in 'hsr' [ 237.741162][ T7232] Cannot create hsr debugfs directory [ 238.740844][ T5244] 8021q: adding VLAN 0 to HW filter on device eth5 [ 239.957070][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 239.957086][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 240.237970][ T7155] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 240.280187][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.945862][ T153] bridge_slave_1: left allmulticast mode [ 241.945942][ T153] bridge_slave_1: left promiscuous mode [ 241.947677][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.964705][ T5949] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 242.136395][ T153] bridge_slave_0: left allmulticast mode [ 242.136433][ T153] bridge_slave_0: left promiscuous mode [ 242.146487][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.182890][ T5949] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 242.184040][ T5949] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.184094][ T5949] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.184120][ T5949] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 242.184147][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.236965][ T5949] spcp8x5 4-1:1.0: required endpoints missing [ 242.493975][ T153] bridge_slave_1: left allmulticast mode [ 242.494013][ T153] bridge_slave_1: left promiscuous mode [ 242.494277][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.683871][ T153] bridge_slave_0: left allmulticast mode [ 242.683908][ T153] bridge_slave_0: left promiscuous mode [ 242.684181][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.782008][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 242.912032][ T10] usb 5-1: device descriptor read/64, error -71 [ 243.152117][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 243.292223][ T10] usb 5-1: device descriptor read/64, error -71 [ 243.404138][ T10] usb usb5-port1: attempt power cycle [ 243.478845][ T5949] usb 4-1: USB disconnect, device number 4 [ 243.615373][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.724468][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.744232][ T153] bond0 (unregistering): Released all slaves [ 243.776942][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 243.792502][ T10] usb 5-1: device descriptor read/8, error -71 [ 244.031966][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 244.055401][ T10] usb 5-1: device descriptor read/8, error -71 [ 244.167138][ T10] usb usb5-port1: unable to enumerate USB device [ 244.272749][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.352603][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.374845][ T153] bond0 (unregistering): Released all slaves [ 244.434345][ T7155] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 244.514134][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.557800][ T7437] ip6gre1: entered promiscuous mode [ 244.675229][ T7155] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 244.759725][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.804594][ T7155] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.865897][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.937061][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 245.937078][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'. [ 246.097251][ T7101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.620884][ T7101] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.829922][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.830073][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.930773][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.951433][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.108808][ T7232] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 248.290792][ T7479] syz.4.524 (7479) used greatest stack depth: 18816 bytes left [ 248.462007][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 248.596461][ T7232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.615412][ T5244] 8021q: adding VLAN 0 to HW filter on device eth6 [ 248.641472][ T7232] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 248.662774][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 248.664849][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.664905][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.664928][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 248.664953][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.664996][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.778214][ T10] spcp8x5 4-1:1.0: required endpoints missing [ 248.900371][ T7232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 249.289009][ T7232] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 249.332026][ T7232] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 249.435392][ T7232] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 249.464708][ T7232] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 249.485059][ T7155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.114761][ T7155] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.186333][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.186606][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.210396][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.227304][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.381918][ T6924] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 250.552652][ T6924] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 250.553746][ T6924] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 250.553772][ T6924] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 250.553792][ T6924] usb 5-1: config 220 has no interface number 2 [ 250.553851][ T6924] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 250.553867][ T6924] usb 5-1: config 220 interface 0 has no altsetting 0 [ 250.553877][ T6924] usb 5-1: config 220 interface 76 has no altsetting 0 [ 250.553886][ T6924] usb 5-1: config 220 interface 1 has no altsetting 0 [ 250.556157][ T6924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.556180][ T6924] usb 5-1: Product: syz [ 250.556194][ T6924] usb 5-1: Manufacturer: syz [ 250.556207][ T6924] usb 5-1: SerialNumber: syz [ 251.033747][ T5720] usb 4-1: USB disconnect, device number 5 [ 251.185649][ T6924] usb 5-1: selecting invalid altsetting 0 [ 251.186089][ T6924] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 251.186121][ T6924] uvcvideo 5-1:220.0: No valid video chain found. [ 251.315064][ T6924] usb 5-1: selecting invalid altsetting 0 [ 251.315106][ T6924] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 251.339919][ T6924] usb 5-1: USB disconnect, device number 15 [ 251.440260][ T7525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.529'. [ 251.440285][ T7525] netlink: 'syz.3.529': attribute type 7 has an invalid length. [ 251.440293][ T7525] netlink: 'syz.3.529': attribute type 8 has an invalid length. [ 251.440299][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 251.542391][ T153] hsr_slave_0: left promiscuous mode [ 251.581999][ T153] hsr_slave_1: left promiscuous mode [ 251.722637][ T153] hsr_slave_0: left promiscuous mode [ 251.743932][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 251.743947][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 251.772073][ T153] hsr_slave_1: left promiscuous mode [ 251.876339][ T153] veth1_macvtap: left promiscuous mode [ 251.876460][ T153] veth0_macvtap: left promiscuous mode [ 251.876642][ T153] veth1_vlan: left promiscuous mode [ 251.877523][ T153] veth0_vlan: left promiscuous mode [ 252.012505][ T153] veth1_macvtap: left promiscuous mode [ 252.012573][ T153] veth0_macvtap: left promiscuous mode [ 252.014504][ T153] veth1_vlan: left promiscuous mode [ 252.014586][ T153] veth0_vlan: left promiscuous mode [ 252.953696][ T153] team0 (unregistering): Port device team_slave_1 removed [ 253.013739][ T153] team0 (unregistering): Port device team_slave_0 removed [ 253.613977][ T153] team0 (unregistering): Port device team_slave_1 removed [ 253.673297][ T153] team0 (unregistering): Port device team_slave_0 removed [ 253.874954][ T7525] syz_tun: entered promiscuous mode [ 253.912163][ T7525] syz_tun: left promiscuous mode [ 254.017869][ T5244] 8021q: adding VLAN 0 to HW filter on device eth7 [ 254.914024][ T7232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.022021][ T7232] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.123528][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.124098][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.688125][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.692907][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.872590][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.872660][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.053813][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.287427][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.534'. [ 256.287454][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.534'. [ 256.287468][ T7561] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 257.745148][ T7101] veth0_vlan: entered promiscuous mode [ 257.812728][ T7101] veth1_vlan: entered promiscuous mode [ 257.850476][ T7155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.049628][ T5244] 8021q: adding VLAN 0 to HW filter on device eth8 [ 258.342589][ T7101] veth0_macvtap: entered promiscuous mode [ 259.149230][ T7101] veth1_macvtap: entered promiscuous mode [ 259.338165][ T7232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.389784][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.466767][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.814707][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 260.210786][ T7614] hsr_slave_1 (unregistering): left promiscuous mode [ 260.664763][ T2152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.865374][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 260.865397][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 261.086315][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.086338][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.218841][ T7155] veth0_vlan: entered promiscuous mode [ 261.274101][ T7155] veth1_vlan: entered promiscuous mode [ 261.428540][ T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.428564][ T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.760582][ T7155] veth0_macvtap: entered promiscuous mode [ 261.820323][ T7155] veth1_macvtap: entered promiscuous mode [ 261.845903][ T7232] veth0_vlan: entered promiscuous mode [ 261.846985][ T7657] netlink: 40 bytes leftover after parsing attributes in process `syz.3.543'. [ 262.058337][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.063552][ T7232] veth1_vlan: entered promiscuous mode [ 262.158400][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.742777][ T7674] syz.3.545 (7674) used greatest stack depth: 18584 bytes left [ 262.817956][ T7232] veth0_macvtap: entered promiscuous mode [ 263.929282][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 263.929308][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 264.042580][ T7232] veth1_macvtap: entered promiscuous mode [ 264.484816][ T185] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.609685][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.609733][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.654957][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.718750][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.929606][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.929627][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.028283][ T5712] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 266.134705][ T5712] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 266.263672][ T5712] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 266.263705][ T5712] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 266.263725][ T5712] usb 5-1: config 220 has no interface number 2 [ 266.263802][ T5712] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 266.263831][ T5712] usb 5-1: config 220 interface 0 has no altsetting 0 [ 266.263850][ T5712] usb 5-1: config 220 interface 76 has no altsetting 0 [ 266.263868][ T5712] usb 5-1: config 220 interface 1 has no altsetting 0 [ 266.588557][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.588585][ T5712] usb 5-1: Product: syz [ 266.588600][ T5712] usb 5-1: Manufacturer: syz [ 266.588614][ T5712] usb 5-1: SerialNumber: syz [ 267.278174][ T7710] all: renamed from bridge_slave_0 (while UP) [ 267.471481][ T5712] usb 5-1: can't set config #220, error -71 [ 267.475271][ T5712] usb 5-1: USB disconnect, device number 16 [ 267.814623][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.842017][ T1136] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.859711][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.860257][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.096226][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.103775][ T66] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.103977][ T66] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.104166][ T66] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.063694][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.063715][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.175960][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.225832][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.311953][ T5951] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 272.472868][ T5951] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 272.495739][ T5951] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.495800][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.601282][ T5951] spcp8x5 7-1:1.0: required endpoints missing [ 273.508236][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.588062][ T4898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.701257][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 273.840398][ T5594] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 273.898332][ T4898] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.963716][ T4898] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.058954][ T4898] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.097097][ T4898] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.614529][ T5594] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 274.616073][ T5594] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 274.616098][ T5594] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 274.616118][ T5594] usb 6-1: config 220 has no interface number 2 [ 274.616204][ T5594] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 274.616233][ T5594] usb 6-1: config 220 interface 0 has no altsetting 0 [ 274.616251][ T5594] usb 6-1: config 220 interface 76 has no altsetting 0 [ 274.616270][ T5594] usb 6-1: config 220 interface 1 has no altsetting 0 [ 274.619603][ T5594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.619627][ T5594] usb 6-1: Product: syz [ 274.619650][ T5594] usb 6-1: Manufacturer: syz [ 274.619664][ T5594] usb 6-1: SerialNumber: syz [ 274.738874][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.743103][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.838376][ T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.838396][ T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.116728][ T5594] usb 6-1: selecting invalid altsetting 0 [ 275.164146][ T5594] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 275.164181][ T5594] uvcvideo 6-1:220.0: No valid video chain found. [ 275.190389][ T5594] usb 6-1: selecting invalid altsetting 0 [ 275.190430][ T5594] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 275.227219][ T5315] usb 7-1: USB disconnect, device number 2 [ 275.273306][ T5594] usb 6-1: USB disconnect, device number 2 [ 275.647844][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.562071][ T59] Bluetooth: hci1: command tx timeout [ 276.564641][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.566554][ T7817] hub 8-0:1.0: USB hub found [ 277.571750][ T7817] hub 8-0:1.0: 1 port detected [ 278.554693][ T36] audit: type=1800 audit(1787640257.223:8): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.576" name="power" dev="configfs" ino=17672 res=0 errno=0 [ 278.883426][ T59] Bluetooth: hci1: command tx timeout [ 279.264706][ T7813] null_blk: disk nullb1 created [ 279.336490][ T36] audit: type=1800 audit(1787640258.033:9): pid=7825 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.576" name="memory_backed" dev="configfs" ino=17678 res=0 errno=0 [ 279.336553][ T36] audit: type=1800 audit(1787640258.033:10): pid=7821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.576" name="zoned" dev="configfs" ino=17673 res=0 errno=0 [ 280.556366][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.632897][ T5590] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 280.670735][ T5244] 8021q: adding VLAN 0 to HW filter on device eth9 [ 280.691910][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 280.792919][ T5590] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.795039][ T5590] usb 8-1: config index 0 descriptor too short (expected 64998, got 72) [ 280.803879][ T5590] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.803904][ T5590] usb 8-1: Product: syz [ 280.803919][ T5590] usb 8-1: Manufacturer: syz [ 280.804087][ T5590] usb 8-1: SerialNumber: syz [ 280.852746][ T31] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 280.854289][ T31] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 280.854314][ T31] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 280.854334][ T31] usb 5-1: config 220 has no interface number 2 [ 280.854419][ T31] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 280.854447][ T31] usb 5-1: config 220 interface 0 has no altsetting 0 [ 280.854465][ T31] usb 5-1: config 220 interface 76 has no altsetting 0 [ 280.854483][ T31] usb 5-1: config 220 interface 1 has no altsetting 0 [ 280.859340][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.859366][ T31] usb 5-1: Product: syz [ 280.859383][ T31] usb 5-1: Manufacturer: syz [ 280.859397][ T31] usb 5-1: SerialNumber: syz [ 280.961903][ T59] Bluetooth: hci1: command tx timeout [ 281.270351][ T31] usb 5-1: selecting invalid altsetting 0 [ 281.303985][ T31] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 281.304020][ T31] uvcvideo 5-1:220.0: No valid video chain found. [ 281.524380][ T31] usb 5-1: selecting invalid altsetting 0 [ 281.524421][ T31] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 281.526526][ T5594] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 281.550442][ T31] usb 5-1: USB disconnect, device number 17 [ 283.043682][ T59] Bluetooth: hci1: command tx timeout [ 283.076005][ T5594] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 283.095201][ T5315] usb 8-1: USB disconnect, device number 2 [ 283.245217][ T5594] ath9k_htc: Failed to initialize the device [ 283.270924][ T5315] usb 8-1: ath9k_htc: USB layer deinitialized [ 284.791005][ T5244] 8021q: adding VLAN 0 to HW filter on device eth10 [ 284.794890][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 287.544929][ T5315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.603990][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.112364][ T12] bridge_slave_1: left allmulticast mode [ 288.112422][ T12] bridge_slave_1: left promiscuous mode [ 288.112695][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.280157][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.167871][ T5315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.199345][ T7918] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 289.199369][ T7918] Error validating options; rc = [-22] [ 289.459114][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.479744][ T5594] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 289.553148][ T12] bridge_slave_0: left allmulticast mode [ 289.553173][ T12] bridge_slave_0: left promiscuous mode [ 289.553396][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.652068][ T5594] usb 8-1: Using ep0 maxpacket: 8 [ 289.652889][ T5594] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 289.654026][ T5594] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.654044][ T5594] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.654057][ T5594] usb 8-1: config 0 interface 0 has no altsetting 0 [ 289.654094][ T5594] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.658617][ T5594] usb 8-1: config 0 descriptor?? [ 289.777035][ T5315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.777074][ T5315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.071746][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.087194][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.494031][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.804312][ T1136] IPVS: starting estimator thread 0... [ 291.892505][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.983716][ T7942] IPVS: using max 7 ests per chain, 16800 per kthread [ 292.323943][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.025603][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.087688][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.162014][ T5315] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 293.317033][ T5315] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 293.321362][ T5315] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 293.321390][ T5315] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 293.321410][ T5315] usb 6-1: config 220 has no interface number 2 [ 293.321552][ T5315] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 293.321580][ T5315] usb 6-1: config 220 interface 0 has no altsetting 0 [ 293.321659][ T5315] usb 6-1: config 220 interface 76 has no altsetting 0 [ 293.321678][ T5315] usb 6-1: config 220 interface 1 has no altsetting 0 [ 293.335918][ T7952] Bluetooth: MGMT ver 1.23 [ 293.396742][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.398402][ T5315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.398419][ T5315] usb 6-1: Product: syz [ 293.398427][ T5315] usb 6-1: Manufacturer: syz [ 293.398435][ T5315] usb 6-1: SerialNumber: syz [ 293.510778][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.553542][ T12] bond0 (unregistering): Released all slaves [ 293.698929][ T5315] usb 6-1: selecting invalid altsetting 0 [ 293.726956][ T5315] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 293.726993][ T5315] uvcvideo 6-1:220.0: No valid video chain found. [ 293.876617][ T5594] usbhid 8-1:0.0: can't add hid device: -71 [ 293.876698][ T5594] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 293.894337][ T5315] usb 6-1: selecting invalid altsetting 0 [ 293.894373][ T5315] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 293.948300][ T5594] usb 8-1: USB disconnect, device number 3 [ 293.968145][ T5315] usb 6-1: USB disconnect, device number 3 [ 294.042494][ T928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.162159][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.176707][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.231056][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.231097][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.231120][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.342974][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.345036][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.517448][ T7964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.619'. [ 296.841963][ T8002] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 296.841988][ T8002] Error validating options; rc = [-22] [ 297.161924][ T5315] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 297.223554][ T6924] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 297.312920][ T5315] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 297.317082][ T5315] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 297.317109][ T5315] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 297.317149][ T5315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.377209][ T6924] usb 5-1: Using ep0 maxpacket: 8 [ 297.378187][ T6924] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 297.379998][ T6924] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.380030][ T6924] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.380063][ T6924] usb 5-1: config 0 interface 0 has no altsetting 0 [ 297.380097][ T6924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.451440][ T6924] usb 5-1: config 0 descriptor?? [ 297.530190][ T5315] usb 6-1: probing VID:PID(0424:012C) [ 297.559327][ T5315] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 297.559357][ T5315] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 297.559375][ T5315] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 297.559392][ T5315] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 297.559409][ T5315] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 297.875476][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.878855][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.061927][ T5315] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 298.083474][ C0] net_ratelimit: 4 callbacks suppressed [ 298.083496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.120501][ T5315] usb 6-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 299.278132][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.292292][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.342900][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.363201][ T197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.405263][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.450040][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.522703][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.766068][ T5244] 8021q: adding VLAN 0 to HW filter on device eth11 [ 300.310729][ T5315] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 300.776170][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.744767][ T6924] usbhid 5-1:0.0: can't add hid device: -71 [ 301.744906][ T6924] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 302.025643][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.097828][ T5705] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 302.104401][ T5705] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 302.106530][ T5705] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 302.979354][ T5315] usb 6-1: USB disconnect, device number 4 [ 302.987854][ T6924] usb 5-1: USB disconnect, device number 18 [ 303.103181][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 303.171707][ T5594] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 303.947538][ T6924] net_ratelimit: 4 callbacks suppressed [ 303.948282][ T6924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.234539][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.269560][ T8053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.270887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.412856][ T5594] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 304.443078][ T5594] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 304.443128][ T5594] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.645390][ T5594] spcp8x5 7-1:1.0: required endpoints missing [ 305.146324][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.201605][ T5315] ------------[ cut here ]------------ [ 305.201621][ T5315] ODEBUG: free active (active state 0) object: ffff88803cd81420 object type: timer_list hint: vub300_inactivity_timer_expired+0x0/0x3f0 [ 305.201669][ T5315] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#0: kworker/0:3/5315 [ 305.201710][ T5315] Modules linked in: [ 305.201734][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 305.201814][ T5315] Tainted: [L]=SOFTLOCKUP [ 305.201823][ T5315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.201845][ T5315] Workqueue: usb_hub_wq hub_event [ 305.201877][ T5315] RIP: 0010:debug_print_object+0x18a/0x230 [ 305.201909][ T5315] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 ad 0d 5b fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 43 39 db 0a 48 83 c4 10 5b 41 5c [ 305.201927][ T5315] RSP: 0018:ffffc90003907218 EFLAGS: 00010246 [ 305.201945][ T5315] RAX: 1ffffffff16df150 RBX: dffffc0000000000 RCX: 0000000000000000 [ 305.201961][ T5315] RDX: ffffffff8bcbfb40 RSI: ffffffff8bcbf5c0 RDI: ffffffff8fbc3f50 [ 305.201977][ T5315] RBP: ffffffff8bcbfb40 R08: ffff88803cd81420 R09: ffffffff8b6f9e00 [ 305.201992][ T5315] R10: dffffc0000000000 R11: ffffffff81b1e390 R12: 0000000000000000 [ 305.202007][ T5315] R13: ffffffff8fbc3f50 R14: ffff88803cd81420 R15: ffffffff8b6f8a80 [ 305.202023][ T5315] FS: 0000000000000000(0000) GS:ffff888125be8000(0000) knlGS:0000000000000000 [ 305.202041][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.202055][ T5315] CR2: 00007f73df2db7c0 CR3: 0000000034fca000 CR4: 00000000003526f0 [ 305.202076][ T5315] Call Trace: [ 305.202084][ T5315] [ 305.202092][ T5315] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 305.202117][ T5315] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 305.202148][ T5315] debug_check_no_obj_freed+0x2e3/0x450 [ 305.202222][ T5315] kfree+0x13e/0x6d0 [ 305.202243][ T5315] ? device_release+0xc4/0x1f0 [ 305.202269][ T5315] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 305.202299][ T5315] device_release+0xc4/0x1f0 [ 305.202323][ T5315] kobject_put+0x222/0x550 [ 305.202351][ T5315] ? mmc_pwrseq_free+0x86/0xa0 [ 305.202388][ T5315] vub300_disconnect+0x280/0x2f0 [ 305.202415][ T5315] usb_unbind_interface+0x295/0x9f0 [ 305.202459][ T5315] ? kernfs_remove_by_name_ns+0x101/0x140 [ 305.202487][ T5315] ? __pfx_usb_unbind_interface+0x10/0x10 [ 305.202518][ T5315] device_release_driver_internal+0x4f5/0x880 [ 305.202565][ T5315] bus_remove_device+0x449/0x560 [ 305.202598][ T5315] ? __pfx_bus_remove_device+0x10/0x10 [ 305.202625][ T5315] ? up_read+0x34/0x180 [ 305.202658][ T5315] ? kernfs_remove_by_name_ns+0x101/0x140 [ 305.202687][ T5315] device_del+0x528/0x8f0 [ 305.202727][ T5315] ? __pfx_device_del+0x10/0x10 [ 305.202755][ T5315] ? kobject_put+0x516/0x550 [ 305.202795][ T5315] usb_disable_device+0x3d4/0x8d0 [ 305.202844][ T5315] usb_disconnect+0x32d/0x990 [ 305.202883][ T5315] hub_event+0x1bb7/0x4cf0 [ 305.202924][ T5315] ? __lock_acquire+0x683/0x2ce0 [ 305.202953][ T5315] ? register_lock_class+0x31/0x2e0 [ 305.203017][ T5315] ? __pfx_hub_event+0x10/0x10 [ 305.203047][ T5315] ? process_scheduled_works+0x97a/0x1630 [ 305.203082][ T5315] ? rcu_is_watching+0x16/0xb0 [ 305.203113][ T5315] ? process_scheduled_works+0x97a/0x1630 [ 305.203140][ T5315] process_scheduled_works+0xc3d/0x1630 [ 305.203204][ T5315] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.203240][ T5315] ? assign_work+0x3cf/0x5d0 [ 305.203272][ T5315] worker_thread+0xa47/0xfb0 [ 305.203316][ T5315] ? __kthread_parkme+0x71/0x1f0 [ 305.203358][ T5315] kthread+0x38b/0x470 [ 305.203390][ T5315] ? __pfx_worker_thread+0x10/0x10 [ 305.203415][ T5315] ? __pfx_kthread+0x10/0x10 [ 305.203449][ T5315] ret_from_fork+0x514/0xb70 [ 305.203485][ T5315] ? __pfx_ret_from_fork+0x10/0x10 [ 305.203517][ T5315] ? __switch_to+0xc89/0x1420 [ 305.203549][ T5315] ? __pfx_kthread+0x10/0x10 [ 305.203583][ T5315] ret_from_fork_asm+0x1a/0x30 [ 305.203625][ T5315] [ 305.203636][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 305.203654][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 305.203681][ T5315] Tainted: [L]=SOFTLOCKUP [ 305.203689][ T5315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.203702][ T5315] Workqueue: usb_hub_wq hub_event [ 305.203730][ T5315] Call Trace: [ 305.203739][ T5315] [ 305.203747][ T5315] vpanic+0x56d/0xa60 [ 305.203768][ T5315] ? __pfx__printk+0x10/0x10 [ 305.203793][ T5315] ? __pfx_vpanic+0x10/0x10 [ 305.203823][ T5315] ? is_bpf_text_address+0x292/0x2b0 [ 305.203859][ T5315] ? is_bpf_text_address+0x26/0x2b0 [ 305.203898][ T5315] panic+0xc5/0xd0 [ 305.203929][ T5315] ? __pfx_panic+0x10/0x10 [ 305.203974][ T5315] ? ret_from_fork_asm+0x1a/0x30 [ 305.204001][ T5315] __warn+0x315/0x4c0 [ 305.204020][ T5315] ? debug_print_object+0xec/0x230 [ 305.204055][ T5315] ? debug_print_object+0xec/0x230 [ 305.204084][ T5315] __report_bug+0x276/0x570 [ 305.204115][ T5315] ? debug_print_object+0xec/0x230 [ 305.204148][ T5315] ? __pfx___report_bug+0x10/0x10 [ 305.204170][ T5315] ? do_raw_spin_lock+0x12b/0x2f0 [ 305.204218][ T5315] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 305.204247][ T5315] report_bug_entry+0x19b/0x290 [ 305.204273][ T5315] ? debug_print_object+0x18a/0x230 [ 305.204303][ T5315] ? debug_print_object+0x18f/0x230 [ 305.204331][ T5315] handle_bug+0xce/0x200 [ 305.204358][ T5315] exc_invalid_op+0x1a/0x50 [ 305.204385][ T5315] asm_exc_invalid_op+0x1a/0x20 [ 305.204407][ T5315] RIP: 0010:debug_print_object+0x18a/0x230 [ 305.204437][ T5315] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 ad 0d 5b fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 43 39 db 0a 48 83 c4 10 5b 41 5c [ 305.204454][ T5315] RSP: 0018:ffffc90003907218 EFLAGS: 00010246 [ 305.204471][ T5315] RAX: 1ffffffff16df150 RBX: dffffc0000000000 RCX: 0000000000000000 [ 305.204486][ T5315] RDX: ffffffff8bcbfb40 RSI: ffffffff8bcbf5c0 RDI: ffffffff8fbc3f50 [ 305.204501][ T5315] RBP: ffffffff8bcbfb40 R08: ffff88803cd81420 R09: ffffffff8b6f9e00 [ 305.204517][ T5315] R10: dffffc0000000000 R11: ffffffff81b1e390 R12: 0000000000000000 [ 305.204531][ T5315] R13: ffffffff8fbc3f50 R14: ffff88803cd81420 R15: ffffffff8b6f8a80 [ 305.204553][ T5315] ? __pfx_timer_debug_hint+0x10/0x10 [ 305.204593][ T5315] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 305.204617][ T5315] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 305.204647][ T5315] debug_check_no_obj_freed+0x2e3/0x450 [ 305.204698][ T5315] kfree+0x13e/0x6d0 [ 305.204717][ T5315] ? device_release+0xc4/0x1f0 [ 305.204743][ T5315] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 305.204772][ T5315] device_release+0xc4/0x1f0 [ 305.204796][ T5315] kobject_put+0x222/0x550 [ 305.204824][ T5315] ? mmc_pwrseq_free+0x86/0xa0 [ 305.204868][ T5315] vub300_disconnect+0x280/0x2f0 [ 305.204895][ T5315] usb_unbind_interface+0x295/0x9f0 [ 305.204937][ T5315] ? kernfs_remove_by_name_ns+0x101/0x140 [ 305.204965][ T5315] ? __pfx_usb_unbind_interface+0x10/0x10 [ 305.204996][ T5315] device_release_driver_internal+0x4f5/0x880 [ 305.205035][ T5315] bus_remove_device+0x449/0x560 [ 305.205067][ T5315] ? __pfx_bus_remove_device+0x10/0x10 [ 305.205093][ T5315] ? up_read+0x34/0x180 [ 305.205125][ T5315] ? kernfs_remove_by_name_ns+0x101/0x140 [ 305.205154][ T5315] device_del+0x528/0x8f0 [ 305.205194][ T5315] ? __pfx_device_del+0x10/0x10 [ 305.205223][ T5315] ? kobject_put+0x516/0x550 [ 305.205261][ T5315] usb_disable_device+0x3d4/0x8d0 [ 305.205302][ T5315] usb_disconnect+0x32d/0x990 [ 305.205339][ T5315] hub_event+0x1bb7/0x4cf0 [ 305.205379][ T5315] ? __lock_acquire+0x683/0x2ce0 [ 305.205407][ T5315] ? register_lock_class+0x31/0x2e0 [ 305.205470][ T5315] ? __pfx_hub_event+0x10/0x10 [ 305.205500][ T5315] ? process_scheduled_works+0x97a/0x1630 [ 305.205534][ T5315] ? rcu_is_watching+0x16/0xb0 [ 305.205573][ T5315] ? process_scheduled_works+0x97a/0x1630 [ 305.205600][ T5315] process_scheduled_works+0xc3d/0x1630 [ 305.205663][ T5315] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.205699][ T5315] ? assign_work+0x3cf/0x5d0 [ 305.205739][ T5315] worker_thread+0xa47/0xfb0 [ 305.205783][ T5315] ? __kthread_parkme+0x71/0x1f0 [ 305.205825][ T5315] kthread+0x38b/0x470 [ 305.205864][ T5315] ? __pfx_worker_thread+0x10/0x10 [ 305.205889][ T5315] ? __pfx_kthread+0x10/0x10 [ 305.205923][ T5315] ret_from_fork+0x514/0xb70 [ 305.205959][ T5315] ? __pfx_ret_from_fork+0x10/0x10 [ 305.205991][ T5315] ? __switch_to+0xc89/0x1420 [ 305.206024][ T5315] ? __pfx_kthread+0x10/0x10 [ 305.206058][ T5315] ret_from_fork_asm+0x1a/0x30 [ 305.206099][ T5315] [ 305.206244][ T5315] Kernel Offset: disabled