last executing test programs: 8.967594787s ago: executing program 4 (id=121): getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000005c0)={0x0, 0xcf, "feb1cb3ec3e3fe9441bbb88b5cfa143f62df3fad9f6e78b51473ae9160acc02f8347985a933714c55900dcaa0a9ad91b760396f9b30a75676eb285db546d9afe8ffedb5632ca271cfc3d510962d45f3e2a2ea044e57159040bc0a53907c64f30261b252fd53511778050425d4ff4f352720045d0c8a50000000081c156c7544a64e8e7482879376859197f14b06d89070655b0f847982d4ab79dd692eaef9b22341c466120d5aa49be99f688168cfc3f27b448ed9304e00977df7854316e2d1003be35bbbb8c2dda960460493ae516"}, &(0x7f0000000340)=0xd7) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x9d, 0x7fffffff, 0x0, 0x1, 0x5392, 0xc, 0x9, {r0, @in6={{0xa, 0x4e20, 0x6, @mcast2, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x808, 0x498c, 0x10, &(0x7f0000000080)={[0xdbc1]}, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r3 = syz_io_uring_setup(0x3140, &(0x7f0000000080)={0x0, 0x20000002, 0x8000, 0x3, 0x3c2, 0x0, r2}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000f00), r7}}, 0x18) r8 = socket$qrtr(0x2a, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_ifreq(r8, 0x8993, &(0x7f0000000240)={'bond_slave_1\x00', @ifru_settings={0x5, 0xffff, @te1=&(0x7f0000000140)={0x8000, 0x7435, 0x3, 0xcada}}}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0x40045010, &(0x7f0000000040)=0x5f) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 8.312438867s ago: executing program 3 (id=123): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641", 0xb0}, {&(0x7f0000000d00)="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", 0x12e}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd9", 0x44}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8.154963434s ago: executing program 3 (id=125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x54}}, 0x40000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x2, 0x4}, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e1a, @rand_addr=0x64010108}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x84, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00\x00'], 0xdc) ioctl$int_in(r3, 0x40000000af01, 0x0) r6 = syz_io_uring_setup(0x424, &(0x7f0000000180)={0x0, 0xcaca, 0x40, 0x0, 0x103}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000000c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x4, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r9, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r10) socket$nl_xfrm(0x10, 0x3, 0x6) 7.8495731s ago: executing program 4 (id=128): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x5761, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x385d, 0x1, "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"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000480)='\xbf\x9a', &(0x7f00000004c0)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b3\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\v\x14/\x92(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\x9c\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9!\xfa\x88\xb0V\xa7\x93\x1c\x9d\xce\xb7@`#\xd6\n\xbf\xba\xeeV{\xe7\xdd\xa2\xbdd\x04\x0ft\xc7G\xf2K\xf6\x1b%/$\x9b\xe3@\xd9 \xb2\xf5x\xe3g\x8dh\xfe\x81/\xe6\xb5\x12\x03\xed\xeas\x1ca\x14\xd1\xb1\xf3\xf5c\xd3\x0e\x82k\xe2h\x95\x99\xf7\xd6\xcdh=\x8cz\x8d\xc9\x0f\x93\x02YS\xf9\xcb\xaf\x86\nx%kR\xfe\x1eQ\xa5L\xec\x00o\xbb\xcb\xa2\x81\x15\xa6\xef\xc0\x01ShM\xcb\xbfE\xcd\x9b\xbc\xd83\x87\xa7\xceq\x00\x00\x00\x00\xdd\'J\x92/\xf6\x14FD\r\xf4\xdf\xdd\x86\xe5,\xa8N\x8f\v\xca\xf8\xec\x890\xd6\x97V)\xea', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', r4, 0x20, 0x40, 0x1001000, 0x7d, {{0xa, 0x4, 0x2, 0x6, 0x28, 0x68, 0x0, 0xf9, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0xfe, 0x0}, {[@rr={0x7, 0x13, 0xee, [@rand_addr=0x64010102, @remote, @broadcast, @private=0xa010101]}]}}}}}) r5 = gettid() alarm(0x4) tkill(r5, 0x12) syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x72}, &(0x7f0000000040), &(0x7f0000000140)) 5.590526162s ago: executing program 4 (id=137): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000050000106a053103000000000001090224000100"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4044015}, 0x40010) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 5.344519846s ago: executing program 3 (id=138): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0xa00) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x40, 0x6, '\x00', 0x4000040}) 5.342602947s ago: executing program 0 (id=139): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x97) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5.152942416s ago: executing program 1 (id=140): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) add_key(&(0x7f0000000680)='pkcs7_test\x00', 0x0, &(0x7f0000000800)="10130611a2c1cda427021111b4652a7698cc5d90c4", 0x15, 0xfffffffffffffffe) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) readahead(r0, 0x58, 0x1) 4.980474947s ago: executing program 1 (id=141): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100"], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xeecd, 0x100, 0x20000001, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x130c0}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 4.450040675s ago: executing program 2 (id=145): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x421, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x904}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x24000840) 4.347055575s ago: executing program 0 (id=146): unshare(0x22020600) r0 = syz_open_procfs$userns(0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x100000, 0x71, 0x0, {r0}}, 0x20) 4.141857265s ago: executing program 4 (id=147): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x5761, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x385d, 0x1, "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"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000480)='\xbf\x9a', &(0x7f00000004c0)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b3\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\v\x14/\x92(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\x9c\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9!\xfa\x88\xb0V\xa7\x93\x1c\x9d\xce\xb7@`#\xd6\n\xbf\xba\xeeV{\xe7\xdd\xa2\xbdd\x04\x0ft\xc7G\xf2K\xf6\x1b%/$\x9b\xe3@\xd9 \xb2\xf5x\xe3g\x8dh\xfe\x81/\xe6\xb5\x12\x03\xed\xeas\x1ca\x14\xd1\xb1\xf3\xf5c\xd3\x0e\x82k\xe2h\x95\x99\xf7\xd6\xcdh=\x8cz\x8d\xc9\x0f\x93\x02YS\xf9\xcb\xaf\x86\nx%kR\xfe\x1eQ\xa5L\xec\x00o\xbb\xcb\xa2\x81\x15\xa6\xef\xc0\x01ShM\xcb\xbfE\xcd\x9b\xbc\xd83\x87\xa7\xceq\x00\x00\x00\x00\xdd\'J\x92/\xf6\x14FD\r\xf4\xdf\xdd\x86\xe5,\xa8N\x8f\v\xca\xf8\xec\x890\xd6\x97V)\xea', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', r4, 0x20, 0x40, 0x1001000, 0x7d, {{0xa, 0x4, 0x2, 0x6, 0x28, 0x68, 0x0, 0xf9, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0xfe, 0x0}, {[@rr={0x7, 0x13, 0xee, [@rand_addr=0x64010102, @remote, @broadcast, @private=0xa010101]}]}}}}}) r5 = gettid() alarm(0x4) tkill(r5, 0x12) syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x72}, &(0x7f0000000040), &(0x7f0000000140)) 4.125893527s ago: executing program 2 (id=148): r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 4.030889772s ago: executing program 0 (id=149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_DEBUG(r5, 0x227e, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000005180)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002f80)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$kcm(0x29, 0xc, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 3.961823097s ago: executing program 2 (id=150): ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x7, @win={{0x3, 0x6, 0x8, 0x68}, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x1}}) syz_open_dev$sndpcmp(0x0, 0x100, 0x100) close(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0xf) wait4(r1, 0x0, 0x2, 0x0) tkill(r1, 0x3) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x1000}) socket(0x400000000010, 0x3, 0x0) 3.502848488s ago: executing program 3 (id=151): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) add_key(&(0x7f0000000680)='pkcs7_test\x00', 0x0, &(0x7f0000000800)="10130611a2c1cda427021111b4652a7698cc5d90c4", 0x15, 0xfffffffffffffffe) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) readahead(r0, 0x58, 0x1) 3.35589068s ago: executing program 3 (id=152): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0xc0884123, 0x0) 3.045733205s ago: executing program 1 (id=153): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000009480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000000), 0x0) 2.972770012s ago: executing program 2 (id=154): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 2.775054401s ago: executing program 1 (id=155): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4000840) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000000)=0x3, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x992d, 0x400, 0xffffffff, 0x3b9}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000000000", @ANYRES32], 0x50) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r2, 0x3516, 0xa00100, 0x0, 0x0, 0x0) 2.700183554s ago: executing program 2 (id=156): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x97) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.31783499s ago: executing program 1 (id=157): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000050000106a053103000000000001090224000100"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4044015}, 0x40010) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 1.988129586s ago: executing program 4 (id=158): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') pread64(r2, &(0x7f0000000000)=""/220, 0xdc, 0x5) r3 = socket(0xa, 0x3, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) 1.786322588s ago: executing program 0 (id=159): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x421, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x904}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x24000840) 1.702787843s ago: executing program 2 (id=160): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 1.617498783s ago: executing program 0 (id=161): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0xa00) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x40, 0x6, '\x00', 0x4000040}) 1.592051034s ago: executing program 3 (id=162): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) clock_settime(0x0, &(0x7f0000000140)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x36, 0xb, 0x80000006, 0x180, 0x7fffffff, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0x10000000f4a, 0x100000000, 0xbdb], 0x6000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008ff4b0000340000000000019078ac1e0001ac1414aa8617000000030611848a83989c24887c92520e2763c50300080090780007000d"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0xe0000012}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240"], 0x64}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') ioctl$SG_GET_SG_TABLESIZE(r8, 0x227f, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 679.114126ms ago: executing program 1 (id=163): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921"], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xeecd, 0x100, 0x20000001, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x130c0}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 570.076912ms ago: executing program 4 (id=164): ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x7, @win={{0x3, 0x6, 0x8, 0x68}, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x1}}) syz_open_dev$sndpcmp(0x0, 0x100, 0x100) close(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0xf) wait4(r1, 0x0, 0x2, 0x0) tkill(r1, 0x3) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x1000}) socket(0x400000000010, 0x3, 0x0) 0s ago: executing program 0 (id=165): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 80.977704][ T5835] cgroup: Unknown subsys name 'net' [ 81.090582][ T5835] cgroup: Unknown subsys name 'cpuset' [ 81.099012][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.731002][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.939393][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.950804][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.960898][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.971597][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.972514][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.979610][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.989094][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.995163][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.000821][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.008622][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.023533][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.023705][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.031286][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.038392][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.048376][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.052913][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.068388][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.070007][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.083894][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.085545][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.092799][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.099449][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.105708][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.119726][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.130184][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.859921][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 85.886781][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 86.073441][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 86.085769][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 86.176159][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 86.241398][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.248988][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.256554][ T5853] bridge_slave_0: entered allmulticast mode [ 86.263942][ T5853] bridge_slave_0: entered promiscuous mode [ 86.305875][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.313210][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.320862][ T5853] bridge_slave_1: entered allmulticast mode [ 86.328741][ T5853] bridge_slave_1: entered promiscuous mode [ 86.389112][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.396647][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.403822][ T5855] bridge_slave_0: entered allmulticast mode [ 86.411675][ T5855] bridge_slave_0: entered promiscuous mode [ 86.451079][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.458527][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.465841][ T5855] bridge_slave_1: entered allmulticast mode [ 86.473848][ T5855] bridge_slave_1: entered promiscuous mode [ 86.515469][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.575977][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.610000][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.617442][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.624641][ T5850] bridge_slave_0: entered allmulticast mode [ 86.633290][ T5850] bridge_slave_0: entered promiscuous mode [ 86.641964][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.649280][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.656818][ T5851] bridge_slave_0: entered allmulticast mode [ 86.664207][ T5851] bridge_slave_0: entered promiscuous mode [ 86.700987][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.710769][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.718299][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.725685][ T5850] bridge_slave_1: entered allmulticast mode [ 86.733669][ T5850] bridge_slave_1: entered promiscuous mode [ 86.741245][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.748681][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.755869][ T5851] bridge_slave_1: entered allmulticast mode [ 86.764048][ T5851] bridge_slave_1: entered promiscuous mode [ 86.773149][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.780662][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.788016][ T5852] bridge_slave_0: entered allmulticast mode [ 86.795320][ T5852] bridge_slave_0: entered promiscuous mode [ 86.806884][ T5853] team0: Port device team_slave_0 added [ 86.816033][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.855115][ T9] cfg80211: failed to load regulatory.db [ 86.882093][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.889812][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.897860][ T5852] bridge_slave_1: entered allmulticast mode [ 86.906595][ T5852] bridge_slave_1: entered promiscuous mode [ 86.937615][ T5853] team0: Port device team_slave_1 added [ 86.988274][ T5855] team0: Port device team_slave_0 added [ 87.092480][ T5855] team0: Port device team_slave_1 added [ 87.105044][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.121790][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.137269][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.152273][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.164210][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.167822][ T5870] Bluetooth: hci4: command tx timeout [ 87.171430][ T5862] Bluetooth: hci1: command tx timeout [ 87.171591][ T5862] Bluetooth: hci0: command tx timeout [ 87.189937][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.216425][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.236253][ T5862] Bluetooth: hci2: command tx timeout [ 87.236367][ T5870] Bluetooth: hci3: command tx timeout [ 87.252571][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.277559][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.303497][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.310749][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.336770][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.404764][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.412051][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.438121][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.464671][ T5851] team0: Port device team_slave_0 added [ 87.473354][ T5852] team0: Port device team_slave_0 added [ 87.482257][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.489376][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.516825][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.531386][ T5850] team0: Port device team_slave_0 added [ 87.540117][ T5851] team0: Port device team_slave_1 added [ 87.549089][ T5852] team0: Port device team_slave_1 added [ 87.578661][ T5850] team0: Port device team_slave_1 added [ 87.621763][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.628896][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.655126][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.715732][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.722854][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.749188][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.773951][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.781245][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.807367][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.825859][ T5853] hsr_slave_0: entered promiscuous mode [ 87.833060][ T5853] hsr_slave_1: entered promiscuous mode [ 87.862210][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.869233][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.895520][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.913817][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.921097][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.947078][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.967215][ T5855] hsr_slave_0: entered promiscuous mode [ 87.974138][ T5855] hsr_slave_1: entered promiscuous mode [ 87.980903][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 87.986907][ T5855] Cannot create hsr debugfs directory [ 87.995984][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.003011][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.029012][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.131518][ T5852] hsr_slave_0: entered promiscuous mode [ 88.138378][ T5852] hsr_slave_1: entered promiscuous mode [ 88.144785][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 88.150863][ T5852] Cannot create hsr debugfs directory [ 88.271984][ T5851] hsr_slave_0: entered promiscuous mode [ 88.278801][ T5851] hsr_slave_1: entered promiscuous mode [ 88.285225][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 88.291194][ T5851] Cannot create hsr debugfs directory [ 88.352148][ T5850] hsr_slave_0: entered promiscuous mode [ 88.359258][ T5850] hsr_slave_1: entered promiscuous mode [ 88.365772][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 88.371802][ T5850] Cannot create hsr debugfs directory [ 88.935045][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.950916][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.964753][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.990155][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.058223][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.071654][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.083229][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.110989][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.196301][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.221396][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.233054][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.240218][ T5870] Bluetooth: hci0: command tx timeout [ 89.247488][ T5870] Bluetooth: hci4: command tx timeout [ 89.247875][ T5862] Bluetooth: hci1: command tx timeout [ 89.264768][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.317080][ T5870] Bluetooth: hci2: command tx timeout [ 89.322968][ T5862] Bluetooth: hci3: command tx timeout [ 89.389938][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.407834][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.424568][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.447024][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.589035][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.601507][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.614637][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.638768][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.650949][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.715351][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.766315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.774182][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.808961][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.816429][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.862739][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.879497][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.943160][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.974593][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.003526][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.010774][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.028946][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.036290][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.074586][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.081768][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.112592][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.119740][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.140867][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.298022][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.369440][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.376828][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.421360][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.428616][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.459639][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.560650][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.592469][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.678926][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.686202][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.730836][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.738118][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.875736][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.965870][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.050585][ T5855] veth0_vlan: entered promiscuous mode [ 91.167127][ T5855] veth1_vlan: entered promiscuous mode [ 91.270050][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.299407][ T5852] veth0_vlan: entered promiscuous mode [ 91.317722][ T5863] Bluetooth: hci0: command tx timeout [ 91.323812][ T5870] Bluetooth: hci4: command tx timeout [ 91.329731][ T5862] Bluetooth: hci1: command tx timeout [ 91.363709][ T5852] veth1_vlan: entered promiscuous mode [ 91.398915][ T5870] Bluetooth: hci2: command tx timeout [ 91.404407][ T5862] Bluetooth: hci3: command tx timeout [ 91.508940][ T5855] veth0_macvtap: entered promiscuous mode [ 91.538033][ T5850] veth0_vlan: entered promiscuous mode [ 91.552491][ T5855] veth1_macvtap: entered promiscuous mode [ 91.605321][ T5850] veth1_vlan: entered promiscuous mode [ 91.624846][ T5852] veth0_macvtap: entered promiscuous mode [ 91.638743][ T5852] veth1_macvtap: entered promiscuous mode [ 91.663718][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.680140][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.715646][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.728043][ T5853] veth0_vlan: entered promiscuous mode [ 91.760797][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.770497][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.794503][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.803489][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.819926][ T5853] veth1_vlan: entered promiscuous mode [ 91.840608][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.866771][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.904702][ T5850] veth0_macvtap: entered promiscuous mode [ 91.946976][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.969762][ T5850] veth1_macvtap: entered promiscuous mode [ 91.996042][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.008471][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.030007][ T5853] veth0_macvtap: entered promiscuous mode [ 92.044333][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.095432][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.111341][ T5853] veth1_macvtap: entered promiscuous mode [ 92.112308][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.175553][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.234885][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.241357][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.250285][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.260033][ T5851] veth0_vlan: entered promiscuous mode [ 92.290081][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.330843][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.339948][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.362146][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.371090][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.377734][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.398469][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.413367][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.428805][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.498728][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.509863][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.522056][ T5851] veth1_vlan: entered promiscuous mode [ 92.559627][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.565603][ T5968] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.572507][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.622702][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.635566][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.860820][ T5851] veth0_macvtap: entered promiscuous mode [ 92.888390][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.904427][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.931233][ T5851] veth1_macvtap: entered promiscuous mode [ 92.985509][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.019044][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.081555][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.101127][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.122054][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.174671][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.268089][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.288230][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.332813][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.356921][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.393889][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.409342][ T5863] Bluetooth: hci0: command tx timeout [ 93.409358][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.422499][ T5870] Bluetooth: hci4: command tx timeout [ 93.426304][ T5862] Bluetooth: hci1: command tx timeout [ 93.477438][ T5862] Bluetooth: hci3: command tx timeout [ 93.477861][ T5863] Bluetooth: hci2: command tx timeout [ 93.773894][ T5980] bridge_slave_0: left allmulticast mode [ 93.789467][ T5980] bridge_slave_0: left promiscuous mode [ 93.804013][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.878022][ T5980] bridge_slave_1: left allmulticast mode [ 93.889160][ T5980] bridge_slave_1: left promiscuous mode [ 93.900919][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.953563][ T5980] bond0: (slave bond_slave_0): Releasing backup interface [ 93.998604][ T5980] bond0: (slave bond_slave_1): Releasing backup interface [ 94.045458][ T5980] team0: Port device team_slave_0 removed [ 94.078473][ T5980] team0: Port device team_slave_1 removed [ 94.084751][ T5977] Set syz1 is full, maxelem 6117 reached [ 94.102231][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.131920][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.159605][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.180427][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.208693][ T5980] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.743006][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 94.797475][ T5907] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 94.930875][ T5990] process 'syz.0.6' launched './file1' with NULL argv: empty string added [ 94.950329][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.981210][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.022209][ T5907] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.056692][ T5907] usb 5-1: not running at top speed; connect to a high speed hub [ 95.103064][ T5907] usb 5-1: config index 0 descriptor too short (expected 28771, got 10) [ 95.118791][ T5907] usb 5-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 95.214023][ T5907] usb 5-1: config 114 descriptor has 1 excess byte, ignoring [ 95.255605][ T5907] usb 5-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 95.273754][ T5994] Zero length message leads to an empty skb [ 95.309922][ T5907] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 95.362078][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.412903][ T5907] usb 5-1: Product: syz [ 95.431254][ T5907] usb 5-1: Manufacturer: syz [ 95.459904][ T5907] usb 5-1: SerialNumber: syz [ 95.555596][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.593446][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.761195][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.824309][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.047595][ T5907] usb 5-1: USB disconnect, device number 2 [ 96.437011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.466189][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 96.659510][ T24] usb 4-1: config 128 interface 0 has no altsetting 0 [ 96.691366][ T24] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 96.732960][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.919108][ T6010] input: syz1 as /devices/virtual/input/input5 [ 97.376157][ T24] usb 4-1: string descriptor 0 read error: -71 [ 97.560063][ T24] usb 4-1: selecting invalid altsetting 3 [ 97.585752][ T24] comedi comedi5: could not set alternate setting 3 in high speed [ 97.619128][ T24] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 97.677232][ T24] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 97.725761][ T24] usb 4-1: USB disconnect, device number 2 [ 97.838313][ T5906] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.975808][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.983588][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.016170][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 98.026837][ T5906] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.039571][ T5906] usb 3-1: config 8 has an invalid interface number: 134 but max is 0 [ 98.054259][ T5906] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 98.079344][ T5906] usb 3-1: config 8 has no interface number 0 [ 98.090730][ T5906] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=fa.e6 [ 98.102343][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.112883][ T5906] usb 3-1: Product: ᐁ [ 98.134627][ T5906] usb 3-1: Manufacturer: Й [ 98.144415][ T5906] usb 3-1: SerialNumber: syz [ 98.201508][ T30] audit: type=1326 audit(1773807585.514:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c679c799 code=0x7ffc0000 [ 98.288892][ T30] audit: type=1326 audit(1773807585.554:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c679c799 code=0x7ffc0000 [ 98.346796][ T24] IPVS: starting estimator thread 0... [ 98.381875][ T30] audit: type=1326 audit(1773807585.564:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84c679c799 code=0x7ffc0000 [ 98.454372][ T30] audit: type=1326 audit(1773807585.564:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c679c799 code=0x7ffc0000 [ 98.489685][ T6029] IPVS: using max 50 ests per chain, 120000 per kthread [ 98.583781][ T30] audit: type=1326 audit(1773807585.564:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c679c799 code=0x7ffc0000 [ 98.655367][ T30] audit: type=1326 audit(1773807585.564:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f84c679c799 code=0x7ffc0000 [ 98.680455][ T30] audit: type=1326 audit(1773807585.564:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c679c799 code=0x7ffc0000 [ 98.703170][ T30] audit: type=1326 audit(1773807585.594:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c679c799 code=0x7ffc0000 [ 98.725419][ T30] audit: type=1326 audit(1773807585.594:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f84c679c799 code=0x7ffc0000 [ 98.764004][ T30] audit: type=1326 audit(1773807585.594:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.1.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c679c799 code=0x7ffc0000 [ 99.224839][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.340149][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.252167][ T34] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.327969][ T34] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.373539][ T34] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.414241][ T34] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.631579][ T5906] kvaser_usb 3-1:8.134: error -ENODEV: Cannot get usb endpoint(s) [ 102.681300][ T5906] usb 3-1: USB disconnect, device number 2 [ 102.846237][ T5926] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 102.972691][ T5906] IPVS: starting estimator thread 0... [ 103.030282][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.077312][ T6073] IPVS: using max 50 ests per chain, 120000 per kthread [ 103.110935][ T5926] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 103.192726][ T5926] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 103.265935][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.380411][ T5926] usb 1-1: config 0 descriptor?? [ 103.512404][ T5926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 103.567266][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 103.737157][ T6086] pim6reg: entered allmulticast mode [ 103.746287][ T29] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 103.762323][ T5926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 103.837378][ T5926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 103.920358][ T5926] usb 1-1: media controller created [ 103.974404][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.083894][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.122227][ T29] usb 3-1: not running at top speed; connect to a high speed hub [ 104.133599][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 104.173722][ T5926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 104.220644][ T29] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 104.253119][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 104.268373][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.311216][ T29] usb 3-1: Product: syz [ 104.340361][ T29] usb 3-1: Manufacturer: syz [ 104.389983][ T29] usb 3-1: SerialNumber: syz [ 104.400501][ T5926] dvb-usb: schedule remote query interval to 150 msecs. [ 104.451973][ T5926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 104.523050][ T5926] usb 1-1: USB disconnect, device number 2 [ 104.802730][ T5926] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 105.589609][ T6104] netlink: 164 bytes leftover after parsing attributes in process `syz.4.32'. [ 107.738787][ T29] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 107.767268][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.805133][ T29] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 107.898987][ T29] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 107.941270][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.974317][ T29] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 108.053566][ T29] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.066157][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.204839][ T6128] mmap: syz.1.40 (6128) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.394996][ T29] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 108.460684][ T29] usb 3-1: USB disconnect, device number 3 [ 108.644339][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.896260][ T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.049359][ T29] usb 3-1: device descriptor read/64, error -71 [ 109.306292][ T29] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.457551][ T29] usb 3-1: device descriptor read/64, error -71 [ 109.587043][ T29] usb usb3-port1: attempt power cycle [ 109.956338][ T29] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.017900][ T29] usb 3-1: device descriptor read/8, error -71 [ 110.307883][ T29] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 110.346930][ T29] usb 3-1: device descriptor read/8, error -71 [ 110.492137][ T29] usb usb3-port1: unable to enumerate USB device [ 112.999385][ T808] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.107368][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.156365][ T808] usb 4-1: device descriptor read/64, error -71 [ 113.289479][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 113.312929][ T10] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 113.338777][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.376346][ T10] usb 2-1: config 0 has no interface number 0 [ 113.391488][ T10] usb 2-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 113.425402][ T10] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 46383, setting to 1024 [ 113.445431][ T808] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.484556][ T10] usb 2-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 113.527755][ T10] usb 2-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.532786][ T6203] pim6reg: entered allmulticast mode [ 113.583460][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 113.606456][ T808] usb 4-1: device descriptor read/64, error -71 [ 113.636998][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.671901][ T10] usb 2-1: Product: syz [ 113.679409][ T10] usb 2-1: Manufacturer: syz [ 113.689782][ T10] usb 2-1: SerialNumber: syz [ 113.703108][ T10] usb 2-1: config 0 descriptor?? [ 113.715188][ T6192] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 113.729513][ T6192] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 113.737294][ T808] usb usb4-port1: attempt power cycle [ 113.977415][ T10] usb 2-1: probing VID:PID(0424:012C) [ 113.997377][ T10] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0B [ 114.014755][ T10] usb 2-1: vub300 testing BULK OUT EndPoint(1) 0F [ 114.039252][ T10] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 114.070299][ T10] vub300 2-1:0.133: probe with driver vub300 failed with error -22 [ 114.086979][ T808] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.100979][ T10] usb 2-1: USB disconnect, device number 2 [ 114.129333][ T808] usb 4-1: device descriptor read/8, error -71 [ 114.396556][ T808] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.428413][ T808] usb 4-1: device descriptor read/8, error -71 [ 114.496240][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 114.546732][ T808] usb usb4-port1: unable to enumerate USB device [ 114.704075][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.721178][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.742412][ T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 114.765325][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.795671][ T10] usb 1-1: config 0 descriptor?? [ 114.821431][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 114.839211][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 114.864972][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 114.911257][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 114.929079][ T6231] netlink: 76 bytes leftover after parsing attributes in process `syz.2.77'. [ 114.944651][ T10] usb 1-1: media controller created [ 114.974663][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.050987][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 115.085536][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 115.117120][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 115.179838][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 115.224045][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 115.308299][ T10] usb 1-1: USB disconnect, device number 3 [ 115.503497][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 115.556439][ T5906] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.731897][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 115.759246][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.773807][ T5906] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.788971][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.804574][ T5906] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 115.877564][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.059495][ T5906] usb 2-1: config 0 descriptor?? [ 116.123864][ T5906] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 116.211094][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 116.211110][ T30] audit: type=1326 audit(1773807603.534:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b49f9c799 code=0x7ffc0000 [ 116.270672][ T30] audit: type=1326 audit(1773807603.574:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b49f9c799 code=0x7ffc0000 [ 116.309751][ T30] audit: type=1326 audit(1773807603.574:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b49f9c799 code=0x7ffc0000 [ 116.382289][ T30] audit: type=1326 audit(1773807603.574:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b49f9c799 code=0x7ffc0000 [ 116.455541][ T30] audit: type=1326 audit(1773807603.574:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b49f9c799 code=0x7ffc0000 [ 116.522720][ T30] audit: type=1326 audit(1773807603.584:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8b49f9c799 code=0x7ffc0000 [ 116.570781][ T5906] usb 2-1: USB disconnect, device number 3 [ 116.605588][ T30] audit: type=1326 audit(1773807603.584:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b49f9c799 code=0x7ffc0000 [ 116.648133][ T30] audit: type=1326 audit(1773807603.584:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b49f9c799 code=0x7ffc0000 [ 116.728515][ T30] audit: type=1326 audit(1773807603.584:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8b49f9c799 code=0x7ffc0000 [ 116.837830][ T30] audit: type=1326 audit(1773807603.584:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.4.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b49f9c799 code=0x7ffc0000 [ 118.174331][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 118.260994][ T6273] PKCS7: Unknown OID: [4] 4.2.137581095.2.17.17.6757.42.118.403037(bad) [ 118.272772][ T6273] PKCS7: Only support pkcs7_signedData type [ 118.438380][ T5906] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.458285][ T1241] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 118.576374][ T5906] usb 5-1: device descriptor read/64, error -71 [ 118.628299][ T1241] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.648217][ T1241] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.666803][ T5907] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.672920][ T1241] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 118.698796][ T1241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.724917][ T1241] usb 1-1: config 0 descriptor?? [ 118.757395][ T1241] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 118.775936][ T1241] dvb-usb: bulk message failed: -22 (3/0) [ 118.794935][ T1241] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 118.826919][ T1241] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 118.843906][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.845608][ T1241] usb 1-1: media controller created [ 118.851623][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 118.874081][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.892412][ T1241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.903942][ T5907] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.921417][ T5907] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.940623][ T1241] dvb-usb: bulk message failed: -22 (6/0) [ 118.955698][ T5907] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 118.976468][ T1241] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 118.978272][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.011541][ T1241] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 119.027760][ T5906] usb 5-1: device descriptor read/64, error -71 [ 119.054224][ T1241] dvb-usb: schedule remote query interval to 150 msecs. [ 119.071756][ T5907] usb 3-1: config 0 descriptor?? [ 119.075589][ T1241] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 119.117094][ T1241] usb 1-1: USB disconnect, device number 4 [ 119.135404][ T5907] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 119.165409][ T5906] usb usb5-port1: attempt power cycle [ 119.200261][ T1241] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 119.487566][ T1241] usb 3-1: USB disconnect, device number 8 [ 119.566690][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.682958][ T5906] usb 5-1: device descriptor read/8, error -71 [ 119.886364][ T1241] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.936206][ T5906] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.959294][ T5906] usb 5-1: device descriptor read/8, error -71 [ 120.049842][ T1241] usb 1-1: Using ep0 maxpacket: 32 [ 120.087522][ T5906] usb usb5-port1: unable to enumerate USB device [ 120.094065][ T1241] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 120.129996][ T1241] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.185797][ T1241] usb 1-1: config 0 has no interface number 0 [ 120.202234][ T1241] usb 1-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 120.236420][ T1241] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 46383, setting to 1024 [ 120.236919][ T1241] usb 1-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 120.236947][ T1241] usb 1-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.244625][ T1241] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 120.244645][ T1241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.244657][ T1241] usb 1-1: Product: syz [ 120.244665][ T1241] usb 1-1: Manufacturer: syz [ 120.244673][ T1241] usb 1-1: SerialNumber: syz [ 120.253225][ T1241] usb 1-1: config 0 descriptor?? [ 120.253780][ T6291] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 120.253886][ T6291] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 120.500730][ T1241] usb 1-1: probing VID:PID(0424:012C) [ 120.501817][ T1241] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0B [ 120.501832][ T1241] usb 1-1: vub300 testing BULK OUT EndPoint(1) 0F [ 120.501842][ T1241] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 120.501887][ T1241] vub300 1-1:0.133: probe with driver vub300 failed with error -22 [ 120.513240][ T1241] usb 1-1: USB disconnect, device number 5 [ 120.584577][ T6292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.93'. [ 120.946225][ T5906] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.118182][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.142165][ T5906] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.230693][ T5906] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.277373][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.309673][ T5906] usb 3-1: config 0 descriptor?? [ 122.176192][ T5906] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 122.348903][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.369495][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 122.394733][ T5906] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 122.429780][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.458176][ T5906] usb 4-1: config 0 descriptor?? [ 122.481204][ T5906] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 122.496940][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 122.539020][ T5906] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 122.567644][ T5906] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 122.609490][ T5906] usb 4-1: media controller created [ 122.754377][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.775399][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 122.781396][ T5906] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 122.812555][ T5906] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 122.836983][ T5906] dvb-usb: schedule remote query interval to 150 msecs. [ 122.844843][ T5906] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 122.857687][ T5906] usb 4-1: USB disconnect, device number 7 [ 122.980057][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 123.007572][ T6323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.105'. [ 123.025933][ T5906] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 123.536243][ T1241] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.696278][ T1241] usb 4-1: Using ep0 maxpacket: 16 [ 123.715174][ T1241] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.749776][ T5926] usb 3-1: USB disconnect, device number 9 [ 123.768289][ T1241] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.794741][ T1241] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.804905][ T1241] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 123.815803][ T1241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.852575][ T1241] usb 4-1: config 0 descriptor?? [ 123.887005][ T1241] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 124.328829][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 124.347188][ T1241] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 124.427013][ T5906] usb 4-1: USB disconnect, device number 8 [ 124.496160][ T1241] usb 3-1: device descriptor read/64, error -71 [ 124.509604][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.541929][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 124.571250][ T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 124.585461][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.609899][ T10] usb 1-1: config 0 descriptor?? [ 124.637705][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 124.646953][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 124.665843][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 124.695119][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 124.707405][ T10] usb 1-1: media controller created [ 124.722529][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.746244][ T1241] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 124.763974][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 124.776333][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 124.824606][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 124.868684][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 124.881035][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 124.907948][ T1241] usb 3-1: device descriptor read/64, error -71 [ 124.951039][ T10] usb 1-1: USB disconnect, device number 6 [ 125.038686][ T1241] usb usb3-port1: attempt power cycle [ 125.061093][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 125.426187][ T1241] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 125.443763][ T5906] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 125.458174][ T1241] usb 3-1: device descriptor read/8, error -71 [ 125.649638][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 125.670337][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.698467][ T5906] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.717839][ T5906] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 125.727532][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.729313][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 125.735769][ T5906] usb 4-1: Product: syz [ 125.753580][ T1241] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 125.774255][ T5906] usb 4-1: Manufacturer: syz [ 125.788030][ T1241] usb 3-1: device descriptor read/8, error -71 [ 125.794271][ T5906] usb 4-1: SerialNumber: syz [ 125.810693][ T6365] PKCS7: Unknown OID: [4] 4.2.137581095.2.17.17.6757.42.118.403037(bad) [ 125.817557][ T5906] usb 4-1: config 0 descriptor?? [ 125.830720][ T6365] PKCS7: Only support pkcs7_signedData type [ 125.937363][ T1241] usb usb3-port1: unable to enumerate USB device [ 126.128650][ T5906] usb 4-1: USB disconnect, device number 9 [ 126.737592][ T10] IPVS: starting estimator thread 0... [ 126.850990][ T6384] IPVS: using max 49 ests per chain, 117600 per kthread [ 127.247036][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.380135][ T6398] syzkaller1: entered promiscuous mode [ 127.388926][ T6398] syzkaller1: entered allmulticast mode [ 127.406422][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 127.417209][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.427722][ T10] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.441147][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.453398][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 127.471254][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.506199][ T5926] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 127.506676][ T10] usb 2-1: config 0 descriptor?? [ 127.548575][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 127.678502][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.698684][ T5926] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 127.719076][ T5926] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 127.739910][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.802889][ T5926] usb 1-1: config 0 descriptor?? [ 127.844326][ T5926] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 127.862317][ T5926] dvb-usb: bulk message failed: -22 (3/0) [ 127.913091][ T5926] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 127.974108][ T5926] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 127.986824][ T5906] usb 2-1: USB disconnect, device number 4 [ 128.014443][ T5926] usb 1-1: media controller created [ 128.032350][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.087687][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 128.117499][ T5926] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 128.193775][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 128.210711][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 128.247138][ T5926] dvb-usb: schedule remote query interval to 150 msecs. [ 128.265123][ T6407] PKCS7: Unknown OID: [4] 4.2.137581095.2.17.17.6757.42.118.403037(bad) [ 128.286994][ T5926] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 128.287005][ T6407] PKCS7: Only support pkcs7_signedData type [ 128.320063][ T5926] usb 1-1: USB disconnect, device number 7 [ 128.447966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 128.497532][ T5926] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 128.852067][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.133'. [ 128.956151][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 129.137784][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 129.146293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.171304][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.247605][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.299165][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 129.334444][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.376219][ T10] usb 3-1: Product: syz [ 129.390918][ T10] usb 3-1: Manufacturer: syz [ 129.409608][ T10] usb 3-1: SerialNumber: syz [ 129.432571][ T10] usb 3-1: config 0 descriptor?? [ 129.759996][ T10] usb 3-1: USB disconnect, device number 14 [ 129.926351][ T5926] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.074019][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 130.087121][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 130.100463][ T5926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.118162][ T6436] PKCS7: Unknown OID: [4] 4.2.137581095.2.17.17.6757.42.118.403037(bad) [ 130.127078][ T5926] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.136887][ T6436] PKCS7: Only support pkcs7_signedData type [ 130.143960][ T5926] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 130.162476][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.189173][ T5926] usb 5-1: config 0 descriptor?? [ 130.440606][ T10] usb 5-1: USB disconnect, device number 7 [ 130.506272][ T993] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.666401][ T993] usb 2-1: Using ep0 maxpacket: 16 [ 130.685368][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.710109][ T993] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.752744][ T993] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.834335][ T993] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 130.877408][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.961252][ T993] usb 2-1: config 0 descriptor?? [ 131.018691][ T993] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 131.551096][ T808] usb 2-1: USB disconnect, device number 5 [ 131.621303][ T6466] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 131.734046][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 131.780873][ T6470] PKCS7: Unknown OID: [4] 4.2.137581095.2.17.17.6757.42.118.403037(bad) [ 131.789797][ T6470] PKCS7: Only support pkcs7_signedData type [ 132.106258][ T5926] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 132.266531][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 132.292968][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.340780][ T5926] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.389857][ T5926] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 132.433734][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.468485][ T5926] usb 4-1: Product: syz [ 132.509268][ T5926] usb 4-1: Manufacturer: syz [ 132.549581][ T5926] usb 4-1: SerialNumber: syz [ 132.592128][ T5926] usb 4-1: config 0 descriptor?? [ 132.926914][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.937028][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.990956][ T5926] usb 4-1: USB disconnect, device number 10 [ 133.316318][ T993] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.476264][ T993] usb 2-1: Using ep0 maxpacket: 16 [ 133.508837][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.544497][ T993] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.592293][ T993] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 133.627166][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.678538][ T993] usb 2-1: config 0 descriptor?? [ 133.856257][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 133.925336][ T993] usb 2-1: USB disconnect, device number 6 [ 134.067051][ T10] usb 3-1: no configurations [ 134.074396][ T10] usb 3-1: can't read configurations, error -22 [ 134.229118][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 134.397053][ T10] usb 3-1: no configurations [ 134.402190][ T10] usb 3-1: can't read configurations, error -22 [ 134.417591][ T10] usb usb3-port1: attempt power cycle [ 134.776406][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 134.807790][ T10] usb 3-1: no configurations [ 134.817669][ T10] usb 3-1: can't read configurations, error -22 [ 134.826165][ T993] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.967452][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 134.996252][ T993] usb 2-1: Using ep0 maxpacket: 16 [ 135.007981][ T10] usb 3-1: no configurations [ 135.017558][ T10] usb 3-1: can't read configurations, error -22 [ 135.029177][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.046804][ T10] usb usb3-port1: unable to enumerate USB device [ 135.061093][ T993] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.098204][ T993] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.120930][ T993] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 135.148344][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.180154][ T993] usb 2-1: config 0 descriptor?? [ 135.189886][ T993] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 135.269406][ T6512] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI [ 135.281451][ T6512] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 135.290075][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.0.165 Not tainted syzkaller #0 PREEMPT(full) [ 135.299351][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.309511][ T6512] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 135.314743][ T6512] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 c5 ee e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 a9 ee e4 fe 49 81 3c 24 80 28 09 8c [ 135.334536][ T6512] RSP: 0018:ffffc9000edbfa68 EFLAGS: 00010206 [ 135.340713][ T6512] RAX: 0000000000000009 RBX: ffff88801caa4800 RCX: 0000000000080000 [ 135.348720][ T6512] RDX: ffffc90005bd1000 RSI: 00000000000005e2 RDI: 00000000000005e3 [ 135.356789][ T6512] RBP: dffffc0000000000 R08: ffffffff824b142a R09: ffffffff8e75d6a0 [ 135.364777][ T6512] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 135.372745][ T6512] R13: 0000000000000002 R14: 0000000000000000 R15: ffff888031362480 [ 135.380716][ T6512] FS: 00007fc508ba66c0(0000) GS:ffff888125535000(0000) knlGS:0000000000000000 [ 135.389647][ T6512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.396236][ T6512] CR2: 00007fc507d85900 CR3: 000000002a578000 CR4: 00000000003526f0 [ 135.404387][ T6512] Call Trace: [ 135.407689][ T6512] [ 135.410647][ T6512] fuse_parse_param+0x69b/0xa80 [ 135.415520][ T6512] ? __pfx_fuse_parse_param+0x10/0x10 [ 135.420997][ T6512] ? static_key_count+0x41/0x70 [ 135.425949][ T6512] vfs_parse_fs_param+0x1a9/0x420 [ 135.430975][ T6512] vfs_parse_monolithic_sep+0x283/0x360 [ 135.436611][ T6512] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 135.442332][ T6512] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 135.448489][ T6512] ? alloc_fs_context+0x9e9/0xd50 [ 135.453522][ T6512] do_new_mount+0x304/0xd30 [ 135.458126][ T6512] ? apparmor_capable+0x126/0x170 [ 135.463174][ T6512] ? security_capable+0x7e/0x2c0 [ 135.468235][ T6512] ? __pfx_do_new_mount+0x10/0x10 [ 135.473364][ T6512] ? ns_capable+0x89/0xe0 [ 135.477784][ T6512] ? path_mount+0x690/0x10e0 [ 135.482379][ T6512] ? user_path_at+0xd4/0x160 [ 135.486974][ T6512] __se_sys_mount+0x31d/0x420 [ 135.491745][ T6512] ? __pfx___se_sys_mount+0x10/0x10 [ 135.497039][ T6512] ? __secure_computing+0xe1/0x2a0 [ 135.502163][ T6512] ? __x64_sys_mount+0x20/0xc0 [ 135.506929][ T6512] do_syscall_64+0x14d/0xf80 [ 135.511518][ T6512] ? trace_irq_disable+0x3b/0x150 [ 135.516714][ T6512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.522779][ T6512] ? clear_bhb_loop+0x40/0x90 [ 135.527542][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.533441][ T6512] RIP: 0033:0x7fc507d9da0a [ 135.537889][ T6512] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.557586][ T6512] RSP: 002b:00007fc508ba5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.566211][ T6512] RAX: ffffffffffffffda RBX: 00007fc508ba5ee0 RCX: 00007fc507d9da0a [ 135.574193][ T6512] RDX: 0000200000002040 RSI: 0000200000002080 RDI: 0000000000000000 [ 135.582251][ T6512] RBP: 0000200000002040 R08: 00007fc508ba5ee0 R09: 0000000000000000 [ 135.590221][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000002080 [ 135.598277][ T6512] R13: 00007fc508ba5ea0 R14: 0000000000000000 R15: 0000200000000080 [ 135.606253][ T6512] [ 135.609272][ T6512] Modules linked in: [ 135.614106][ T6512] ---[ end trace 0000000000000000 ]--- [ 135.687556][ T6512] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 135.697896][ T29] usb 2-1: USB disconnect, device number 7 [ 135.710080][ T6512] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 c5 ee e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 a9 ee e4 fe 49 81 3c 24 80 28 09 8c [ 135.733861][ T6512] RSP: 0018:ffffc9000edbfa68 EFLAGS: 00010206 [ 135.742475][ T6512] RAX: 0000000000000009 RBX: ffff88801caa4800 RCX: 0000000000080000 [ 135.753077][ T6512] RDX: ffffc90005bd1000 RSI: 00000000000005e2 RDI: 00000000000005e3 [ 135.763332][ T6512] RBP: dffffc0000000000 R08: ffffffff824b142a R09: ffffffff8e75d6a0 [ 135.771581][ T6512] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 135.780070][ T6512] R13: 0000000000000002 R14: 0000000000000000 R15: ffff888031362480 [ 135.793766][ T6512] FS: 00007fc508ba66c0(0000) GS:ffff888125535000(0000) knlGS:0000000000000000 [ 135.803413][ T6512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.810257][ T6512] CR2: 00007fa766be92f8 CR3: 000000002a578000 CR4: 00000000003526f0 [ 135.818324][ T6512] Kernel panic - not syncing: Fatal exception [ 135.824829][ T6512] Kernel Offset: disabled [ 135.829148][ T6512] Rebooting in 86400 seconds..