last executing test programs: 7m3.794855404s ago: executing program 3 (id=316): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) syz_open_dev$sg(0x0, 0x0, 0x40000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x160243) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20081, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000200)=ANY=[]) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 7m0.387877616s ago: executing program 3 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x5, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0x8, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r2, 0x6700000000000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 6m59.181788675s ago: executing program 3 (id=323): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) 6m55.839565505s ago: executing program 3 (id=326): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x84) openat$kvm(0xffffffffffffff9c, 0x0, 0x10200, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xb6a, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/crypto\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000140)=""/55, 0x37, 0x2a0005c1) 6m48.316778191s ago: executing program 3 (id=334): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) 6m44.702431889s ago: executing program 3 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) syz_open_dev$vbi(0x0, 0x0, 0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb861ea6000a97a751eccb080001fe8000000000000000000000000000bbfc000000000000000000000000000001223427d5c9a46b9f000000fdf886b3da4a4291de2861502ebcb42e63a1efec5613e972cea86af007e975201b4d87d32cf9348d9bdf1ebf5e6b32e03805208e230bdeedf4653c40e9e5936ed572b6596073bf3cc183b0d44c774b4b4b0cefb92dd21bef31957ae301ed6fccf60f032ec34bd5e9a869af07e23ab5e44451b1230b9c434ab4674bab13f787fe8024edef0b41e13d1cc8d0112790fa36674b07ba45977155376de56276f2ccaeb16a30263619fc9040ea789351f6c885db70811365d2392991343fded383f457831c01c9fc1f1e52bd0117a2f46e2f12c3852f288d77483c5ee100430551bedce2cc3286859ca018e64f23"], 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10) close(r3) 6m29.579557664s ago: executing program 32 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) syz_open_dev$vbi(0x0, 0x0, 0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10) close(r3) 11.396630657s ago: executing program 4 (id=947): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000000680)=""/199, 0x11f, 0x8) io_uring_setup(0x30aa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@bridge_dellink={0xf0, 0x11, 0x200, 0x70bd29, 0x25dfdbf8, {0x7, 0x0, 0x0, r6, 0x40002, 0x8}, [@IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x13, 0x0, 0x0, 0x1}]}}, @AF_BRIDGE={0x4}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0x10002}, {0x8, 0x4, 0x0, 0x0, 0xffffffff}, {0x8, 0x13, 0x0, 0x0, 0x1}, {0x8, 0x20, 0x0, 0x0, 0x1}, {0x8, 0x17}, {0x8, 0x0, 0x0, 0x0, 0x80}, {0x8, 0x1}, {0x8, 0x11, 0x0, 0x0, 0x7}, {0x8, 0x11, 0x0, 0x0, 0x3ff}]}}, @AF_MPLS={0x4}]}, @IFLA_PHYS_SWITCH_ID={0x9, 0x24, "474a2b3aac"}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xa}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @IFLA_IFNAME={0x14, 0x3, 'dvmrp1\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008018}, 0x24000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) 11.233655063s ago: executing program 4 (id=950): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x4040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[], 0xf0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7c}}, 0x2000c450) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x2522, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x40014}, 0x0) 10.109305109s ago: executing program 0 (id=953): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0xaa00, 0x0) read$rfkill(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, 0x0, 0x0) 10.039175591s ago: executing program 1 (id=954): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000340)) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x49}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0xac}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2, r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) r7 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f00000003c0)={0x8, {"c23b585272aca28d9cad01a3cdd1e3a9", "d40000007dcbfb5d3cf7c2cac100", "b0e953ee24cbee8739aa9f2a423b3429"}, 0x4, 0x6}) chdir(&(0x7f00000000c0)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x800, 0x100000000, 0x7fffffff, 0x3, 0x1, 0x6, 0x6, 0xffffffffffffffff, 0x4}) 9.644122014s ago: executing program 0 (id=955): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002"], 0x80}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x51c6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'io'}, {0x2b, 'devices'}, {0x2b, 'net'}, {0x2b, 'blkio'}, {0x2d, 'net'}]}, 0x1e) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) 8.397799385s ago: executing program 4 (id=956): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 8.301558608s ago: executing program 1 (id=957): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) syz_open_dev$sg(0x0, 0x0, 0x40000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x160243) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20081, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000200)=ANY=[]) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 8.167100763s ago: executing program 4 (id=959): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x28) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x4b4b, 0x6000000000000041) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) epoll_pwait(r4, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r10 = accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000340)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r9, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 7.140603776s ago: executing program 0 (id=960): syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[], 0x0) 5.071423704s ago: executing program 4 (id=962): r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x2000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000008, 0x8010, r0, 0xe4477000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_create_ruleset(&(0x7f0000000040)={0x400b, 0x2}, 0x18, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) pipe(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = geteuid() r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300030000000800", @ANYRES16], 0x84}}, 0x20008040) statx(0xffffffffffffffff, 0x0, 0x2000, 0x400, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf8, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, r5}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x2, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xf8}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) splice(r8, 0x0, r7, 0x0, 0x20000000000002, 0x2) fremovexattr(r1, &(0x7f0000000140)=@random={'user.', 'system.sockprotoname\x00'}) syz_usb_connect$uac3(0x2, 0x85, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000400c200b10400001020301090273000301f70005080b01010122300a0904000000010130000a2401050f007000000005240c7f00090401000001023000090401010101022000090501"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0xffff, 0x4) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r10 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) 4.842510892s ago: executing program 0 (id=963): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0xaa00, 0x0) read$rfkill(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, 0x0, 0x0) 4.670035657s ago: executing program 1 (id=965): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000340)) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x49}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0xac}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2, r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) r7 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f00000003c0)={0x8, {"c23b585272aca28d9cad01a3cdd1e3a9", "d40000007dcbfb5d3cf7c2cac100", "b0e953ee24cbee8739aa9f2a423b3429"}, 0x4, 0x6}) chdir(&(0x7f00000000c0)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x800, 0x100000000, 0x7fffffff, 0x3, 0x1, 0x6, 0x6, 0xffffffffffffffff, 0x4}) 3.604713882s ago: executing program 1 (id=967): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 3.443518257s ago: executing program 0 (id=968): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002"], 0x80}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x51c6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'io'}, {0x2b, 'devices'}, {0x2b, 'net'}, {0x2b, 'blkio'}, {0x2d, 'net'}]}, 0x1e) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) 3.431952627s ago: executing program 2 (id=969): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) pread64(0xffffffffffffffff, &(0x7f0000000680)=""/199, 0x11f, 0x8) io_uring_setup(0x30aa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@bridge_dellink={0xf0, 0x11, 0x200, 0x70bd29, 0x25dfdbf8, {0x7, 0x0, 0x0, r6, 0x40002, 0x8}, [@IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x13, 0x0, 0x0, 0x1}]}}, @AF_BRIDGE={0x4}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0x10002}, {0x8, 0x4, 0x0, 0x0, 0xffffffff}, {0x8, 0x13, 0x0, 0x0, 0x1}, {0x8, 0x20, 0x0, 0x0, 0x1}, {0x8, 0x17}, {0x8, 0x0, 0x0, 0x0, 0x80}, {0x8, 0x1}, {0x8, 0x11, 0x0, 0x0, 0x7}, {0x8, 0x11, 0x0, 0x0, 0x3ff}]}}, @AF_MPLS={0x4}]}, @IFLA_PHYS_SWITCH_ID={0x9, 0x24, "474a2b3aac"}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xa}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @IFLA_IFNAME={0x14, 0x3, 'dvmrp1\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008018}, 0x24000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) 3.288409032s ago: executing program 1 (id=970): kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc5", 0xbf, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea9", 0x96}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce679", 0x1a}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.241814194s ago: executing program 2 (id=971): syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[], 0x0) 2.280501725s ago: executing program 2 (id=972): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$loop(0x0, 0x8, 0x101002) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000080}, 0x4042) io_submit(0x0, 0x0, &(0x7f00000001c0)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.280226265s ago: executing program 4 (id=973): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) syz_open_dev$sg(0x0, 0x0, 0x40000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x160243) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20081, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000200)=ANY=[]) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 717.284516ms ago: executing program 0 (id=974): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8100) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000000080)=[{0x2b5, 0x0, 0x0, 0x0}], 0x1}) 643.649689ms ago: executing program 1 (id=975): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000340)) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x49}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0xac}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2, r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) r7 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f00000003c0)={0x8, {"c23b585272aca28d9cad01a3cdd1e3a9", "d40000007dcbfb5d3cf7c2cac100", "b0e953ee24cbee8739aa9f2a423b3429"}, 0x4, 0x6}) chdir(&(0x7f00000000c0)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x800, 0x100000000, 0x7fffffff, 0x3, 0x1, 0x6, 0x6, 0xffffffffffffffff, 0x4}) 642.337119ms ago: executing program 2 (id=976): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0xaa00, 0x0) read$rfkill(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, 0x0, 0x0) 283.407671ms ago: executing program 2 (id=977): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x26, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c603, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x74}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 2 (id=978): syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. [ 93.180303][ T5763] cgroup: Unknown subsys name 'net' [ 93.326658][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.225712][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.097359][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.109797][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.118100][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.126163][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.126667][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.136519][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.148942][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.156864][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.158436][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.167296][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.173249][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.185689][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.191338][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.201408][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.210988][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.214165][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.232971][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.235400][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.241686][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.258801][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.260791][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.278986][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.293692][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.302826][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.953456][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 98.001430][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 98.081706][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 98.096369][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 98.235051][ T788] cfg80211: failed to load regulatory.db [ 98.288163][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.297577][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.305841][ T5777] bridge_slave_0: entered allmulticast mode [ 98.315586][ T5777] bridge_slave_0: entered promiscuous mode [ 98.361558][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.369552][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.378841][ T5783] bridge_slave_0: entered allmulticast mode [ 98.386687][ T5783] bridge_slave_0: entered promiscuous mode [ 98.398342][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.408611][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.422390][ T5783] bridge_slave_1: entered allmulticast mode [ 98.430353][ T5783] bridge_slave_1: entered promiscuous mode [ 98.441598][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.450403][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.460947][ T5777] bridge_slave_1: entered allmulticast mode [ 98.469768][ T5777] bridge_slave_1: entered promiscuous mode [ 98.491819][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.500752][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.514360][ T5776] bridge_slave_0: entered allmulticast mode [ 98.524868][ T5776] bridge_slave_0: entered promiscuous mode [ 98.541976][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.550824][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.560141][ T5776] bridge_slave_1: entered allmulticast mode [ 98.571910][ T5776] bridge_slave_1: entered promiscuous mode [ 98.613958][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.678138][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.694981][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.708596][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.725549][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.739529][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.767488][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.778147][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.788128][ T5775] bridge_slave_0: entered allmulticast mode [ 98.796322][ T5775] bridge_slave_0: entered promiscuous mode [ 98.850087][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.857457][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.864955][ T5775] bridge_slave_1: entered allmulticast mode [ 98.872244][ T5775] bridge_slave_1: entered promiscuous mode [ 98.906674][ T5783] team0: Port device team_slave_0 added [ 98.917002][ T5783] team0: Port device team_slave_1 added [ 98.963926][ T5777] team0: Port device team_slave_0 added [ 98.978974][ T5777] team0: Port device team_slave_1 added [ 99.000117][ T5776] team0: Port device team_slave_0 added [ 99.029598][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.049140][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.080511][ T5776] team0: Port device team_slave_1 added [ 99.092694][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.101814][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.147213][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.199186][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.210797][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.242184][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.286849][ T5775] team0: Port device team_slave_0 added [ 99.295239][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.304965][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.338443][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.350796][ T5087] Bluetooth: hci2: command tx timeout [ 99.357384][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.366564][ T5785] Bluetooth: hci3: command tx timeout [ 99.372563][ T5785] Bluetooth: hci0: command tx timeout [ 99.379235][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.409642][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.423660][ T5785] Bluetooth: hci1: command tx timeout [ 99.445263][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.456276][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.485987][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.522162][ T5775] team0: Port device team_slave_1 added [ 99.564884][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.577553][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.606592][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.652404][ T5783] hsr_slave_0: entered promiscuous mode [ 99.661796][ T5783] hsr_slave_1: entered promiscuous mode [ 99.672412][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.680491][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.707090][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.720491][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.727904][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.755553][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.876578][ T5777] hsr_slave_0: entered promiscuous mode [ 99.887005][ T5777] hsr_slave_1: entered promiscuous mode [ 99.893603][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.902426][ T5777] Cannot create hsr debugfs directory [ 99.924414][ T5776] hsr_slave_0: entered promiscuous mode [ 99.932648][ T5776] hsr_slave_1: entered promiscuous mode [ 99.939115][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.946896][ T5776] Cannot create hsr debugfs directory [ 99.974541][ T5775] hsr_slave_0: entered promiscuous mode [ 99.982076][ T5775] hsr_slave_1: entered promiscuous mode [ 99.993994][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.007242][ T5775] Cannot create hsr debugfs directory [ 100.511364][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.540092][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.572842][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.589242][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.661092][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.678543][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.691848][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.705864][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.807275][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.837594][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.858356][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.870490][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.981183][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.995887][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.008167][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.053342][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.185725][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.217350][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.259264][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.297561][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.305066][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.330624][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.355839][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.363269][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.377232][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.385829][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.423637][ T5785] Bluetooth: hci0: command tx timeout [ 101.425728][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.430923][ T5785] Bluetooth: hci2: command tx timeout [ 101.438793][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.439974][ T51] Bluetooth: hci3: command tx timeout [ 101.499455][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.507249][ T5087] Bluetooth: hci1: command tx timeout [ 101.609234][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.671501][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.703231][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.720857][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.728319][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.767601][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.775980][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.796320][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.806025][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.871608][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.879144][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.232547][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.382944][ T5783] veth0_vlan: entered promiscuous mode [ 102.461140][ T5783] veth1_vlan: entered promiscuous mode [ 102.477542][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.574178][ T5783] veth0_macvtap: entered promiscuous mode [ 102.632430][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.641573][ T5783] veth1_macvtap: entered promiscuous mode [ 102.677510][ T5776] veth0_vlan: entered promiscuous mode [ 102.691366][ T5776] veth1_vlan: entered promiscuous mode [ 102.720225][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.739726][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.759402][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.788719][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.799396][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.809138][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.819550][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.897025][ T5775] veth0_vlan: entered promiscuous mode [ 102.909742][ T5776] veth0_macvtap: entered promiscuous mode [ 102.947166][ T5775] veth1_vlan: entered promiscuous mode [ 103.014605][ T5776] veth1_macvtap: entered promiscuous mode [ 103.044685][ T5777] veth0_vlan: entered promiscuous mode [ 103.122074][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.139198][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.155518][ T5777] veth1_vlan: entered promiscuous mode [ 103.213952][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.227136][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.241216][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.272724][ T5775] veth0_macvtap: entered promiscuous mode [ 103.302204][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.314963][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.327520][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.341383][ T5775] veth1_macvtap: entered promiscuous mode [ 103.370068][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.384813][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.400806][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.416929][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.429607][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.447087][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.484360][ T5777] veth0_macvtap: entered promiscuous mode [ 103.503828][ T5087] Bluetooth: hci2: command tx timeout [ 103.510843][ T5087] Bluetooth: hci0: command tx timeout [ 103.517959][ T5785] Bluetooth: hci3: command tx timeout [ 103.526731][ T5777] veth1_macvtap: entered promiscuous mode [ 103.597377][ T5785] Bluetooth: hci1: command tx timeout [ 103.674841][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.690152][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.701824][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.716203][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.730528][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.751778][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.769553][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.782447][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.798907][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.812581][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.831651][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.864233][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.875826][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.899764][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.924998][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.946635][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.961805][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.989231][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.009855][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.025578][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.042520][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.060946][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.075570][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.093062][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.107627][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.121488][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.158774][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.179360][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.189434][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.205002][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.236995][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.258247][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.271817][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.283781][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.413598][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.424711][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.609139][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.636853][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.721155][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 104.758764][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.778082][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.928992][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.024927][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.143591][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.282163][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.583267][ T5785] Bluetooth: hci3: command tx timeout [ 105.594026][ T5785] Bluetooth: hci0: command tx timeout [ 105.599789][ T5785] Bluetooth: hci2: command tx timeout [ 105.663513][ T5785] Bluetooth: hci1: command tx timeout [ 106.722560][ T5870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5'. [ 107.701509][ T5877] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.990389][ T5845] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.210523][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.241828][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.258146][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.300534][ T5845] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.344248][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.379703][ T5845] usb 3-1: config 0 descriptor?? [ 108.651050][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.736051][ T5885] batadv_slave_1: entered promiscuous mode [ 109.854763][ T5891] NILFS (nullb0): couldn't find nilfs on the device [ 110.752242][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 111.533484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.643054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.703039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.934805][ T5904] binder: 5900:5904 unknown command 1074553619 [ 111.941101][ T5904] binder: 5900:5904 ioctl c0306201 200000000040 returned -22 [ 112.577457][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 113.156234][ T5845] usbhid 3-1:0.0: can't add hid device: -71 [ 113.163906][ T5845] usbhid: probe of 3-1:0.0 failed with error -71 [ 113.225751][ T5909] dlm: non-version read from control device 203 [ 114.200800][ T5845] usb 3-1: USB disconnect, device number 2 [ 114.296780][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 114.311308][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 115.016616][ T5906] autofs4:pid:5906:autofs_fill_super: called with bogus options [ 115.356787][ T5927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 115.399904][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.715358][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 115.800806][ T787] usb 2-1: config 1 has an invalid interface number: 22 but max is 0 [ 115.952510][ T787] usb 2-1: config 1 has no interface number 0 [ 116.047715][ T787] usb 2-1: config 1 interface 22 has no altsetting 0 [ 116.306847][ T787] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=f3.70 [ 116.323166][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.331790][ T787] usb 2-1: Product: syz [ 116.415956][ T787] usb 2-1: can't set config #1, error -71 [ 116.444317][ T787] usb 2-1: USB disconnect, device number 2 [ 116.715702][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.753686][ T5939] batadv_slave_1: entered promiscuous mode [ 116.763249][ T5815] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.666429][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.679989][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.693871][ T5815] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.708874][ T5815] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.719023][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.741045][ T5815] usb 1-1: config 0 descriptor?? [ 117.893042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.953055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.043041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.064989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 119.213347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.623071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 120.353595][ T5815] usbhid 1-1:0.0: can't add hid device: -71 [ 120.360158][ T5815] usbhid: probe of 1-1:0.0 failed with error -71 [ 120.454468][ T5815] usb 1-1: USB disconnect, device number 2 [ 123.075658][ T5963] syz.0.33[5963]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 125.203675][ T5980] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 128.256048][ T5087] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 129.453349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 129.549160][ T6007] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 134.365122][ T6042] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 136.873206][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 137.066350][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.085290][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.105735][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.123798][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 137.139526][ T23] usb 1-1: SerialNumber: syz [ 137.153611][ T23] hub 1-1:1.0: bad descriptor, ignoring hub [ 137.161144][ T23] hub: probe of 1-1:1.0 failed with error -5 [ 137.169585][ T23] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 137.402290][ T23] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 137.801728][ T23] usb 1-1: USB disconnect, device number 3 [ 138.776231][ T6079] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 140.038213][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.045961][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.583873][ T6113] netlink: 364 bytes leftover after parsing attributes in process `syz.1.77'. [ 143.313059][ T6116] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 144.643214][ T787] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 144.847129][ T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.879723][ T5087] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 144.903151][ T787] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 144.941184][ T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.965374][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.975434][ T787] usb 4-1: SerialNumber: syz [ 144.989767][ T787] hub 4-1:1.0: bad descriptor, ignoring hub [ 144.997297][ T787] hub: probe of 4-1:1.0 failed with error -5 [ 145.012291][ T787] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 145.092711][ T28] audit: type=1326 audit(1780482122.500:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd59ce59 code=0x7ffc0000 [ 145.150572][ T28] audit: type=1326 audit(1780482122.540:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd59ce59 code=0x7ffc0000 [ 145.190785][ T28] audit: type=1326 audit(1780482122.540:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd59ce59 code=0x7ffc0000 [ 145.197654][ T787] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 145.238553][ T28] audit: type=1326 audit(1780482122.540:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f4edd59ce59 code=0x7ffc0000 [ 145.270897][ T28] audit: type=1326 audit(1780482122.540:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd59ce59 code=0x7ffc0000 [ 145.306628][ T787] usb 4-1: USB disconnect, device number 2 [ 145.315393][ T28] audit: type=1326 audit(1780482122.540:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd59ce59 code=0x7ffc0000 [ 145.352332][ T28] audit: type=1326 audit(1780482122.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd59ce59 code=0x7ffc0000 [ 145.388344][ T28] audit: type=1326 audit(1780482122.540:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4edd59ce59 code=0x7ffc0000 [ 145.429985][ T28] audit: type=1326 audit(1780482122.540:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4edd59ce59 code=0x7ffc0000 [ 145.462651][ T28] audit: type=1326 audit(1780482122.540:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4edd596bd7 code=0x7ffc0000 [ 147.665738][ T6140] fuse: Unknown parameter 'grou00000000000000000000' [ 149.537828][ T6154] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 152.623280][ T23] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 153.518094][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.533304][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.563635][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.617555][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.648983][ T23] usb 3-1: SerialNumber: syz [ 153.691348][ T23] hub 3-1:1.0: bad descriptor, ignoring hub [ 153.743162][ T23] hub: probe of 3-1:1.0 failed with error -5 [ 153.751004][ T23] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 154.132863][ T23] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 154.253325][ T23] usb 3-1: USB disconnect, device number 3 [ 155.469958][ T6191] fuse: Unknown parameter 'grou00000000000000000000' [ 156.092249][ T6194] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 162.284033][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.324304][ T6227] batadv_slave_1: entered promiscuous mode [ 163.022780][ T6231] fuse: Unknown parameter 'grou00000000000000000000' [ 163.708389][ T6235] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 164.993349][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 165.209095][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.279264][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 165.414298][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.520453][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.093086][ T9] usb 4-1: SerialNumber: syz [ 166.161428][ T9] usb 4-1: can't set config #1, error -71 [ 166.216925][ T9] usb 4-1: USB disconnect, device number 3 [ 168.226541][ T6262] Zero length message leads to an empty skb [ 169.086653][ T6269] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 171.093097][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 171.285714][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.318499][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 171.358525][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.376309][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 171.391819][ T9] usb 3-1: SerialNumber: syz [ 171.418138][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 171.430482][ T6281] fuse: Unknown parameter 'group_i00000000000000000000' [ 171.442419][ T9] hub: probe of 3-1:1.0 failed with error -5 [ 171.471442][ T9] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 171.620994][ T9] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 171.688231][ T9] usb 3-1: USB disconnect, device number 4 [ 176.362553][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 176.792655][ T6329] futex_wake_op: syz.3.135 tries to shift op by 144; fix this program [ 178.635634][ T6337] fuse: Unknown parameter 'group_i00000000000000000000' [ 179.923817][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.140'. [ 181.121046][ T5087] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 181.207905][ T6366] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 181.236593][ T5815] IPVS: starting estimator thread 0... [ 181.456282][ T6367] IPVS: using max 16 ests per chain, 38400 per kthread [ 183.801667][ T6394] fuse: Unknown parameter 'group_i00000000000000000000' [ 184.061554][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 185.996491][ T6411] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 186.398699][ T27] IPVS: starting estimator thread 0... [ 186.583814][ T6413] IPVS: using max 16 ests per chain, 38400 per kthread [ 186.813283][ T5087] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 188.234558][ T6437] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 188.248906][ T6437] PKCS7: Only support pkcs7_signedData type [ 188.256753][ T6437] tmpfs: Bad value for 'mpol' [ 188.262095][ T6437] process 'syz.2.162' launched './file0' with NULL argv: empty string added [ 189.278895][ T6447] fuse: Unknown parameter 'group_id00000000000000000000' [ 190.513539][ T5087] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 192.024866][ T6469] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 193.128476][ T6479] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 193.135480][ T6479] PKCS7: Only support pkcs7_signedData type [ 193.143084][ T6479] tmpfs: Bad value for 'mpol' [ 194.363357][ T5087] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 195.285846][ T6501] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 195.847311][ T5087] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 196.681268][ T6508] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 197.142013][ T6518] tmpfs: Bad value for 'mpol' [ 199.291779][ T5087] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 200.745462][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.759172][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.218316][ T6557] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 201.386284][ T5872] IPVS: starting estimator thread 0... [ 201.513672][ T6558] IPVS: using max 21 ests per chain, 50400 per kthread [ 204.268151][ T5087] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 205.306232][ T6590] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 205.605163][ T23] IPVS: starting estimator thread 0... [ 205.613167][ T6594] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 205.773806][ T6595] IPVS: using max 16 ests per chain, 38400 per kthread [ 206.394530][ T6597] (syz.3.204,6597,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 206.403533][ T6597] (syz.3.204,6597,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 206.475798][ T6598] netlink: 88 bytes leftover after parsing attributes in process `syz.3.204'. [ 206.558508][ T6598] ip6t_srh: unknown srh match flags FF3F [ 207.046109][ T5087] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 209.889851][ T6621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'. [ 210.558898][ T6628] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 212.636178][ T5087] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 214.848126][ T6665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.222'. [ 215.569057][ T6661] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 219.626954][ T6694] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 220.601328][ T6698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.235'. [ 221.594450][ T8] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 222.537187][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 222.545022][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 222.555880][ T8] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 222.568171][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 222.575947][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 222.866874][ T8] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 222.879287][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 222.895066][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 222.954004][ T8] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 222.983918][ T8] usb 2-1: string descriptor 0 read error: -22 [ 222.990321][ T8] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 223.025412][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.057785][ T8] adutux 2-1:168.0: interrupt endpoints not found [ 223.244247][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 223.250625][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 223.257490][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 223.259013][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 223.841602][ T5815] usb 2-1: USB disconnect, device number 3 [ 224.835022][ T6733] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 227.251580][ T6750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.297950][ T6750] batadv_slave_1: entered promiscuous mode [ 230.616305][ T6768] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 232.906402][ T6784] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 232.932707][ T6784] CIFS mount error: No usable UNC path provided in device string! [ 232.932707][ T6784] [ 232.943169][ T6784] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 233.673181][ T787] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 233.968082][ T787] usb 4-1: device descriptor read/64, error -71 [ 234.253176][ T787] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 234.423148][ T787] usb 4-1: device descriptor read/64, error -71 [ 234.853008][ C0] sched: RT throttling activated [ 235.432546][ T6811] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 235.713325][ T787] usb usb4-port1: attempt power cycle [ 236.933068][ T787] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 237.256983][ T787] usb 4-1: device descriptor read/8, error -71 [ 240.810075][ T6849] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 243.983264][ T27] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 244.153127][ T27] usb 3-1: device descriptor read/64, error -71 [ 244.426010][ T27] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 244.613059][ T27] usb 3-1: device descriptor read/64, error -71 [ 244.743649][ T27] usb usb3-port1: attempt power cycle [ 244.918647][ T6864] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 245.233054][ T27] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 245.734898][ T27] usb 3-1: device descriptor read/8, error -71 [ 246.023096][ T27] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 246.053800][ T27] usb 3-1: device descriptor read/8, error -71 [ 246.187498][ T27] usb usb3-port1: unable to enumerate USB device [ 250.263347][ T6901] dlm: non-version read from control device 0 [ 250.403841][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 250.474881][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 250.477116][ T6904] autofs4:pid:6904:autofs_fill_super: called with bogus options [ 250.732884][ T6906] netlink: 48 bytes leftover after parsing attributes in process `syz.2.292'. [ 251.863078][ T5872] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 252.113918][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 252.128117][ T5872] usb 1-1: config 1 has an invalid interface number: 22 but max is 0 [ 252.140962][ T5872] usb 1-1: config 1 has no interface number 0 [ 252.166943][ T5872] usb 1-1: config 1 interface 22 has no altsetting 0 [ 252.215294][ T5872] usb 1-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=f3.70 [ 252.243197][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.273034][ T5872] usb 1-1: Product: syz [ 252.282020][ T5872] usb 1-1: Manufacturer: syz [ 252.300216][ T5872] usb 1-1: SerialNumber: syz [ 257.454974][ T5872] gspca_main: touptek-2.14.0 probing 0547:6801 [ 257.618045][ T5845] usb 1-1: USB disconnect, device number 4 [ 258.946788][ T51] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 262.067192][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.093052][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.355903][ T6973] netem: change failed [ 263.404993][ T6978] xt_bpf: check failed: parse error [ 263.696104][ T51] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 271.443248][ T8] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 271.674624][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.705060][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 271.733259][ T8] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 271.742396][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.778141][ T8] usb 3-1: config 0 descriptor?? [ 272.085650][ T51] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 274.616057][ T787] usb 3-1: USB disconnect, device number 9 [ 279.272371][ T7060] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 281.168209][ T51] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 284.163059][ T787] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 285.882225][ T787] usb 1-1: device descriptor read/all, error -71 [ 288.197174][ T7098] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 288.206616][ T7098] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 289.164793][ T7091] syz.2.331 (7091) used greatest stack depth: 17896 bytes left [ 289.301931][ T51] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 292.053115][ T5780] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 292.395860][ T5780] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.456096][ T5780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.540375][ T5780] usb 2-1: config 0 has no interface number 0 [ 292.620199][ T5780] usb 2-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 292.741692][ T5780] usb 2-1: config 0 interface 1 has no altsetting 0 [ 292.805748][ T5780] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 292.871907][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.960308][ T5780] usb 2-1: config 0 descriptor?? [ 293.009288][ T5780] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 293.281418][ T5780] usb 2-1: USB disconnect, device number 4 [ 298.640076][ T7140] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 299.953468][ T51] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 300.586236][ T7148] netlink: 52 bytes leftover after parsing attributes in process `syz.0.354'. [ 300.681353][ T7149] netlink: 'syz.0.354': attribute type 4 has an invalid length. [ 302.844617][ T7160] NILFS (nullb0): couldn't find nilfs on the device [ 306.770574][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.782763][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.795100][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.807831][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.985395][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 306.994964][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.284059][ T2944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.409287][ T7180] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 307.643423][ T2944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.297107][ T2944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.510227][ T2944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.634442][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 308.792630][ T7187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.027402][ T51] Bluetooth: hci2: command tx timeout [ 309.559036][ T7192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.617771][ T7192] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 309.650734][ T7192] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 310.836841][ T51] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 311.113016][ T51] Bluetooth: hci2: command tx timeout [ 313.033140][ T5780] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 313.183703][ T51] Bluetooth: hci2: command tx timeout [ 313.200393][ T7174] chnl_net:caif_netlink_parms(): no params data found [ 313.278063][ T5780] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 313.361275][ T5780] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 313.427679][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.479873][ T5780] usb 2-1: Product: syz [ 313.515725][ T5780] usb 2-1: Manufacturer: syz [ 313.544823][ T5780] usb 2-1: SerialNumber: syz [ 313.895400][ T5780] usb 2-1: selecting invalid altsetting 1 [ 313.911222][ T5780] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 313.911356][ T5780] dvb_usb_lmedm04: probe of 2-1:2.0 failed with error -22 [ 313.940638][ T5780] usb 2-1: USB disconnect, device number 5 [ 314.046636][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.061543][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.153998][ T7174] bridge_slave_0: entered allmulticast mode [ 314.266592][ T7174] bridge_slave_0: entered promiscuous mode [ 314.419461][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.459891][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.506736][ T7174] bridge_slave_1: entered allmulticast mode [ 314.574407][ T7174] bridge_slave_1: entered promiscuous mode [ 314.913703][ T7238] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 314.986254][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.002188][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.281088][ T51] Bluetooth: hci2: command tx timeout [ 316.318423][ T51] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 316.527876][ T7174] team0: Port device team_slave_0 added [ 316.684345][ T7174] team0: Port device team_slave_1 added [ 316.733444][ T7262] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 317.662451][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.731233][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.823473][ T7174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.957523][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.998605][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.157279][ T7174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.343346][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 323.554080][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.561560][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.654550][ T2944] hsr_slave_0: left promiscuous mode [ 323.671540][ T2944] hsr_slave_1: left promiscuous mode [ 323.689908][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.703431][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.725774][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.753717][ T2944] bridge_slave_1: left allmulticast mode [ 323.759443][ T2944] bridge_slave_1: left promiscuous mode [ 323.776898][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.802340][ T2944] bridge_slave_0: left allmulticast mode [ 323.815513][ T2944] bridge_slave_0: left promiscuous mode [ 323.821454][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.885441][ T2944] veth1_macvtap: left promiscuous mode [ 323.891663][ T2944] veth0_macvtap: left promiscuous mode [ 323.899174][ T2944] veth1_vlan: left promiscuous mode [ 323.904968][ T2944] veth0_vlan: left promiscuous mode [ 325.464068][ T7313] netlink: 52 bytes leftover after parsing attributes in process `syz.1.386'. [ 326.536120][ T2944] team0 (unregistering): Port device team_slave_1 removed [ 326.583218][ T2944] team0 (unregistering): Port device team_slave_0 removed [ 326.630754][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.680087][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.049304][ T2944] bond0 (unregistering): Released all slaves [ 327.159334][ T7292] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 327.184522][ T7174] hsr_slave_0: entered promiscuous mode [ 327.217140][ T7174] hsr_slave_1: entered promiscuous mode [ 327.230773][ T7174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.248676][ T7174] Cannot create hsr debugfs directory [ 327.347862][ T7311] netlink: 'syz.1.386': attribute type 4 has an invalid length. [ 329.364748][ T7331] fuse: Bad value for 'fd' [ 330.339145][ T2944] IPVS: stop unused estimator thread 0... [ 330.646014][ T7174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.692803][ T7174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.721849][ T7174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.792572][ T7174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.114053][ T7355] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 332.423009][ T7362] netlink: 52 bytes leftover after parsing attributes in process `syz.1.397'. [ 332.482413][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.593678][ T7362] netlink: 'syz.1.397': attribute type 4 has an invalid length. [ 332.935933][ T7174] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.511559][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.518848][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.555920][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.563273][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.696723][ T7174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.790546][ T7379] fuse: Bad value for 'fd' [ 335.697151][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.953124][ T7415] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 337.400602][ T7421] netlink: 52 bytes leftover after parsing attributes in process `syz.1.407'. [ 337.693707][ T7421] netlink: 'syz.1.407': attribute type 4 has an invalid length. [ 338.641303][ T7428] fuse: Invalid rootmode [ 338.876729][ T7174] veth0_vlan: entered promiscuous mode [ 339.147611][ T7174] veth1_vlan: entered promiscuous mode [ 340.011264][ T7174] veth0_macvtap: entered promiscuous mode [ 340.053522][ T7174] veth1_macvtap: entered promiscuous mode [ 340.071216][ T7432] syzkaller0: entered promiscuous mode [ 340.083610][ T7432] syzkaller0: entered allmulticast mode [ 340.160811][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.192027][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.227471][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.263053][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.288897][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.379216][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.542691][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.639033][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.675754][ T7461] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 341.824799][ T7174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.861111][ T7174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.889929][ T7174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.932094][ T7174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.446621][ T7476] fuse: Bad value for 'fd' [ 343.629501][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.653357][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.792768][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.818988][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.994209][ T7493] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 345.385268][ T7503] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 346.196095][ T7499] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 346.223113][ T9] IPVS: starting estimator thread 0... [ 346.333086][ T7504] IPVS: using max 21 ests per chain, 50400 per kthread [ 346.710313][ T7516] fuse: Invalid rootmode [ 348.004881][ T7536] afs: Unknown parameter '' [ 348.184740][ T7540] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 349.546969][ T7545] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 350.400611][ T7549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.408980][ T7549] batadv_slave_1: entered promiscuous mode [ 350.448271][ T7551] netlink: 52 bytes leftover after parsing attributes in process `syz.1.438'. [ 350.780269][ T7559] fuse: Bad value for 'rootmode' [ 351.924321][ T27] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 352.521123][ T7578] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 353.710106][ T7582] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 353.762402][ T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 354.480969][ T27] usb 1-1: config 0 has no interface number 0 [ 354.491530][ T27] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.501647][ T27] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.514744][ T27] usb 1-1: config 0 interface 1 has no altsetting 0 [ 354.522202][ T27] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 354.532382][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.545294][ T27] usb 1-1: config 0 descriptor?? [ 354.557161][ T27] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 355.589418][ T23] usb 1-1: USB disconnect, device number 7 [ 355.733695][ T7594] netlink: 52 bytes leftover after parsing attributes in process `syz.0.449'. [ 357.879893][ T7611] netlink: 52 bytes leftover after parsing attributes in process `syz.0.452'. [ 358.093307][ T7611] netlink: 'syz.0.452': attribute type 4 has an invalid length. [ 359.032765][ T7620] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 360.806209][ T8] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 361.036271][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.075727][ T8] usb 1-1: config 0 has no interface number 0 [ 361.118900][ T8] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.451785][ T8] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.523708][ T8] usb 1-1: config 0 interface 1 has no altsetting 0 [ 361.562960][ T8] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 361.619876][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.664770][ T8] usb 1-1: config 0 descriptor?? [ 361.716249][ T8] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 362.735124][ T7644] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 363.091346][ T7650] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 364.031361][ T8] usb 1-1: USB disconnect, device number 8 [ 365.386532][ T7669] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 365.395834][ T7669] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 366.656533][ T7679] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 368.003701][ T7684] netlink: 52 bytes leftover after parsing attributes in process `syz.4.465'. [ 368.490491][ T7678] netlink: 'syz.4.465': attribute type 4 has an invalid length. [ 368.853030][ T787] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 369.099001][ T787] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.118372][ T787] usb 3-1: config 0 has no interface number 0 [ 369.134471][ T787] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.158921][ T787] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.195441][ T787] usb 3-1: config 0 interface 1 has no altsetting 0 [ 369.210257][ T787] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 369.231138][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.282823][ T787] usb 3-1: config 0 descriptor?? [ 369.327112][ T787] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 369.473674][ T7701] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 371.605761][ T787] usb 3-1: USB disconnect, device number 10 [ 371.744123][ T7725] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 371.753298][ T7725] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 374.840642][ T7740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.477'. [ 375.812522][ T7742] netlink: 'syz.1.478': attribute type 4 has an invalid length. [ 376.557315][ T7754] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 380.433015][ T8] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 380.624876][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.633343][ T8] usb 2-1: config 0 has no interface number 0 [ 380.639475][ T8] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.679643][ T8] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.782766][ T8] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.951485][ T8] usb 2-1: config 0 interface 1 has no altsetting 0 [ 381.040649][ T8] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 381.175802][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.384328][ T8] usb 2-1: config 0 descriptor?? [ 381.645672][ T8] usbhid 2-1:0.1: can't add hid device: -71 [ 381.732606][ T7788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.488'. [ 381.755730][ T8] usbhid: probe of 2-1:0.1 failed with error -71 [ 382.036619][ T8] usb 2-1: USB disconnect, device number 6 [ 382.823677][ T7794] fuse: Unknown parameter 'user_i00000000000000000000' [ 383.270363][ T7800] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 385.545680][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.552076][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.433068][ T8] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 388.444988][ T7835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.499'. [ 389.495763][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.666490][ T8] usb 5-1: config 0 has no interface number 0 [ 389.842347][ T8] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 389.872989][ T8] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.903027][ T8] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.949875][ T8] usb 5-1: config 0 interface 1 has no altsetting 0 [ 389.980329][ T8] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 390.023321][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.258506][ T8] usb 5-1: config 0 descriptor?? [ 391.334153][ T7847] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 391.943162][ T8] usbhid 5-1:0.1: can't add hid device: -71 [ 391.949265][ T8] usbhid: probe of 5-1:0.1 failed with error -71 [ 392.018317][ T8] usb 5-1: USB disconnect, device number 2 [ 393.968038][ T7878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.507'. [ 394.002105][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 396.893566][ T7885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.510'. [ 397.706397][ T7890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.511'. [ 398.495979][ T7896] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 399.927614][ T7901] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 401.594666][ T7921] fuse: Bad value for 'fd' [ 402.703100][ T7929] vcan0: tx drop: invalid sa for name 0x0000000000000010 [ 404.331556][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.520'. [ 405.226655][ T7946] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 406.990853][ T7963] fuse: Bad value for 'fd' [ 407.370215][ T787] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 408.306399][ T787] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 408.333076][ T787] usb 5-1: config 0 has no interface number 0 [ 408.339282][ T787] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 408.589445][ T787] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.600933][ T787] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.616716][ T787] usb 5-1: config 0 interface 1 has no altsetting 0 [ 408.623767][ T787] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 408.632919][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.647792][ T787] usb 5-1: config 0 descriptor?? [ 409.394398][ T51] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 409.690013][ T7991] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 412.668030][ T8002] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 413.667336][ T8011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'. [ 413.736440][ T787] usbhid 5-1:0.1: can't add hid device: -71 [ 414.507181][ T787] usbhid: probe of 5-1:0.1 failed with error -71 [ 414.519209][ T787] usb 5-1: USB disconnect, device number 3 [ 414.559120][ T8016] fuse: Bad value for 'fd' [ 416.284993][ T51] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 417.616486][ T8048] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 419.323339][ T27] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 419.526020][ T27] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.534342][ T27] usb 2-1: config 0 has no interface number 0 [ 419.550775][ T27] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 419.583071][ T27] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.617748][ T27] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.651763][ T27] usb 2-1: config 0 interface 1 has no altsetting 0 [ 419.674536][ T27] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 419.694342][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.724272][ T27] usb 2-1: config 0 descriptor?? [ 419.961550][ T8069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.544'. [ 420.804504][ T27] usbhid 2-1:0.1: can't add hid device: -71 [ 420.810602][ T27] usbhid: probe of 2-1:0.1 failed with error -71 [ 420.835668][ T27] usb 2-1: USB disconnect, device number 7 [ 420.991164][ T8081] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 421.002208][ T8081] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 423.710339][ T8102] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 425.031854][ T8106] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 426.157671][ T51] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 426.696225][ T8123] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 426.712386][ T8123] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 428.474555][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 429.383516][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.416410][ T9] usb 5-1: config 0 has no interface number 0 [ 429.422727][ T9] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 429.463365][ T9] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.493146][ T9] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.560946][ T8147] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 430.296865][ T9] usb 5-1: config 0 interface 1 has no altsetting 0 [ 430.304604][ T9] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 430.313887][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.343644][ T9] usb 5-1: config 0 descriptor?? [ 430.934792][ T51] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 431.753918][ T9] usbhid 5-1:0.1: can't add hid device: -71 [ 431.801888][ T9] usbhid: probe of 5-1:0.1 failed with error -71 [ 431.855348][ T9] usb 5-1: USB disconnect, device number 4 [ 433.118774][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 433.166386][ T8179] netlink: 52 bytes leftover after parsing attributes in process `syz.4.563'. [ 433.376429][ T8181] netlink: 'syz.4.563': attribute type 4 has an invalid length. [ 434.865007][ T8192] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 434.874055][ T8192] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 435.003025][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 436.090523][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 436.104599][ T27] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 436.113817][ T27] usb 2-1: config 0 has no interface number 0 [ 436.483247][ T27] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 436.511241][ T27] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 436.521273][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.530062][ T27] usb 2-1: Product: syz [ 436.843882][ T27] usb 2-1: Manufacturer: syz [ 436.848578][ T27] usb 2-1: SerialNumber: syz [ 436.861166][ T27] usb 2-1: config 0 descriptor?? [ 436.878431][ T27] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 436.888799][ T27] em28xx 2-1:0.132: Video interface 132 found: [ 437.636842][ T27] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 437.776800][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.807330][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.821810][ T8208] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 437.975352][ T51] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 438.079579][ T23] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 438.969578][ T27] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 438.996981][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.027290][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 439.045046][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.069473][ T27] em28xx 2-1:0.132: board has no eeprom [ 439.077570][ T23] usb 3-1: config 0 has no interface number 0 [ 439.091397][ T23] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 439.144006][ T23] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.154576][ T27] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 439.509204][ T27] em28xx 2-1:0.132: analog set to bulk mode. [ 439.687461][ T23] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.733329][ T5780] em28xx 2-1:0.132: Registering V4L2 extension [ 439.807930][ T27] usb 2-1: USB disconnect, device number 8 [ 439.814283][ T23] usb 3-1: config 0 interface 1 has no altsetting 0 [ 439.820959][ T23] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 439.865229][ T27] em28xx 2-1:0.132: Disconnecting em28xx [ 439.945080][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.995467][ T23] usb 3-1: config 0 descriptor?? [ 440.200709][ T8240] netlink: 52 bytes leftover after parsing attributes in process `syz.0.575'. [ 440.241247][ T8240] netlink: 'syz.0.575': attribute type 4 has an invalid length. [ 440.831963][ T8242] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 443.081374][ T5780] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 443.103254][ T23] usbhid 3-1:0.1: can't add hid device: -71 [ 443.110669][ T23] usbhid: probe of 3-1:0.1 failed with error -71 [ 443.128293][ T5780] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 443.162922][ T5780] em28xx 2-1:0.132: No AC97 audio processor [ 443.238448][ T8252] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 443.247751][ T8252] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 443.433918][ T23] usb 3-1: USB disconnect, device number 11 [ 444.024524][ T5780] usb 2-1: Decoder not found [ 444.030253][ T5780] em28xx 2-1:0.132: failed to create media graph [ 444.038317][ T5780] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 444.050717][ T5780] em28xx 2-1:0.132: Remote control support is not available for this card. [ 444.062111][ T27] em28xx 2-1:0.132: Closing input extension [ 444.089119][ T27] em28xx 2-1:0.132: Freeing device [ 444.954539][ T8256] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 445.115788][ T51] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 446.675238][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.695326][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.543558][ T8285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'. [ 447.867161][ T8283] netlink: 'syz.2.586': attribute type 4 has an invalid length. [ 450.250641][ T8311] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 450.259813][ T8311] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 450.559645][ T8312] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 450.789937][ T51] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 452.068279][ T8327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.596'. [ 453.356038][ T8339] netlink: 52 bytes leftover after parsing attributes in process `syz.2.597'. [ 453.555974][ T5872] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 453.575267][ T8340] netlink: 'syz.2.597': attribute type 4 has an invalid length. [ 453.946118][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 453.960432][ T5872] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 17, changing to 7 [ 453.989914][ T5872] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 113, changing to 7 [ 454.008116][ T5872] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 454.018358][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.054728][ T5872] usb 2-1: Product: syz [ 454.099380][ T5872] usb 2-1: Manufacturer: syz [ 454.125775][ T5872] usb 2-1: SerialNumber: syz [ 454.377705][ T5872] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 454.790311][ T5872] usb 2-1: USB disconnect, device number 9 [ 455.500411][ T8361] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 455.509514][ T8361] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 456.328508][ T51] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 456.712154][ T8370] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 458.232698][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.607'. [ 458.435351][ T8389] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 461.163197][ T5872] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 462.453043][ T5872] usb 2-1: device not accepting address 10, error -71 [ 462.556219][ T8417] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 462.565389][ T8417] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 464.425186][ T51] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 466.044753][ T8443] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 466.361517][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.617'. [ 466.395138][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 469.125454][ T8464] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 469.823512][ T8462] netlink: 48 bytes leftover after parsing attributes in process `syz.4.610'. [ 470.588330][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.624'. [ 473.003324][ T51] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 474.545842][ T8498] gtp0: entered promiscuous mode [ 474.613415][ T8498] gtp0: entered allmulticast mode [ 474.721963][ T8498] team0: Device gtp0 is of different type [ 474.828821][ T8503] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 477.754828][ T8516] netlink: 48 bytes leftover after parsing attributes in process `syz.4.632'. [ 478.193099][ T8529] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 478.569702][ T8534] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 479.942931][ T51] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 482.723112][ T5872] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 482.998228][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.016970][ T5872] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 483.030287][ T5872] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 483.046686][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.564274][ T5872] usb 3-1: config 0 descriptor?? [ 484.954754][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.637'. [ 485.553138][ T5872] usb 3-1: can't set config #0, error -71 [ 485.565719][ T5872] usb 3-1: USB disconnect, device number 12 [ 485.635021][ T8581] netlink: 48 bytes leftover after parsing attributes in process `syz.2.641'. [ 485.968470][ T8594] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 486.047078][ T8596] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 486.155920][ T51] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 489.280470][ T8622] netlink: 'syz.4.649': attribute type 1 has an invalid length. [ 489.978698][ T8636] netlink: 48 bytes leftover after parsing attributes in process `syz.0.651'. [ 491.208021][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 493.087676][ T8657] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 495.380855][ T8678] netlink: 52 bytes leftover after parsing attributes in process `syz.1.658'. [ 495.458512][ T8679] netlink: 'syz.1.658': attribute type 4 has an invalid length. [ 496.352748][ T8687] netlink: 48 bytes leftover after parsing attributes in process `syz.4.660'. [ 497.149002][ T8695] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 497.526866][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 499.932248][ T8718] fuse: Unknown parameter 'grou00000000000000000000' [ 500.359094][ T8729] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 500.480043][ T8727] netlink: 'syz.2.671': attribute type 4 has an invalid length. [ 505.023768][ T8753] fuse: Unknown parameter 'grou00000000000000000000' [ 505.664543][ T8752] [U]  [ 506.823111][ T8766] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 507.160044][ T8770] netlink: 52 bytes leftover after parsing attributes in process `syz.2.685'. [ 507.262000][ T8769] netlink: 'syz.2.685': attribute type 4 has an invalid length. [ 507.634390][ T8772] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 509.313556][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.319945][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.658720][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 513.069957][ T8792] smc: net device wlan0 applied user defined pnetid SYZ1 [ 515.634786][ T8814] fuse: Unknown parameter 'grou00000000000000000000' [ 515.715071][ T8815] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 515.940764][ T8819] netlink: 52 bytes leftover after parsing attributes in process `syz.4.696'. [ 516.052955][ T8820] netlink: 'syz.4.696': attribute type 4 has an invalid length. [ 522.341896][ T8849] fuse: Unknown parameter 'group_i00000000000000000000' [ 523.048265][ T8860] fuse: Invalid rootmode [ 523.580688][ T8862] netlink: 52 bytes leftover after parsing attributes in process `syz.1.707'. [ 523.696659][ T8864] netlink: 'syz.1.707': attribute type 4 has an invalid length. [ 523.953220][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'. [ 530.081638][ T8903] ======================================================= [ 530.081638][ T8903] WARNING: The mand mount option has been deprecated and [ 530.081638][ T8903] and is ignored by this kernel. Remove the mand [ 530.081638][ T8903] option from the mount to silence this warning. [ 530.081638][ T8903] ======================================================= [ 530.185091][ T8903] option changes via remount are deprecated (pid=8902 comm=syz.2.717) [ 531.227877][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 533.188957][ T8916] fuse: Unknown parameter 'group_i00000000000000000000' [ 533.717550][ T8928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.721'. [ 533.833792][ T8929] netlink: 'syz.0.721': attribute type 4 has an invalid length. [ 537.733718][ T8955] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 539.355615][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'. [ 539.368164][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'. [ 540.567288][ T8976] netlink: 52 bytes leftover after parsing attributes in process `syz.2.732'. [ 541.703379][ T8976] netlink: 'syz.2.732': attribute type 4 has an invalid length. [ 550.354605][ T9042] netlink: 52 bytes leftover after parsing attributes in process `syz.2.745'. [ 550.440792][ T9043] netlink: 'syz.2.745': attribute type 4 has an invalid length. [ 555.111125][ T9084] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 555.117992][ T9084] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 555.127885][ T9084] vhci_hcd vhci_hcd.0: Device attached [ 555.743151][ T9085] vhci_hcd: connection closed [ 556.131089][ T9083] netlink: 52 bytes leftover after parsing attributes in process `syz.0.762'. [ 556.136712][ T9088] netlink: 'syz.0.762': attribute type 4 has an invalid length. [ 556.357882][ T9] usb 38-1: SetAddress Request (2) to port 0 [ 556.365921][ T2944] vhci_hcd: stop threads [ 556.382751][ T2944] vhci_hcd: release socket [ 556.393510][ T2944] vhci_hcd: disconnect device [ 556.494173][ T9] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 556.633937][ T9] usb 38-1: enqueue for inactive port 0 [ 557.084204][ T9] usb usb38-port1: attempt power cycle [ 557.974083][ T9] usb usb38-port1: unable to enumerate USB device [ 561.135279][ T9115] [U]  [ 562.075736][ T9132] netlink: 52 bytes leftover after parsing attributes in process `syz.0.774'. [ 569.085640][ T9167] netlink: 52 bytes leftover after parsing attributes in process `syz.2.787'. [ 569.284420][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.291205][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.567147][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 575.824552][ T9190] [U]  [ 576.220247][ T9201] netlink: 52 bytes leftover after parsing attributes in process `syz.4.796'. [ 582.306699][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 586.687161][ T9249] netlink: 52 bytes leftover after parsing attributes in process `syz.1.806'. [ 591.469123][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 595.653175][ T9307] netlink: 52 bytes leftover after parsing attributes in process `syz.0.818'. [ 599.303084][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 601.652101][ T9338] tipc: Started in network mode [ 601.663634][ T9338] tipc: Node identity f65b5d490107, cluster identity 4711 [ 601.686819][ T9338] tipc: Enabled bearer , priority 0 [ 601.881340][ T9338] syzkaller0: entered promiscuous mode [ 601.931575][ T9338] syzkaller0: entered allmulticast mode [ 601.953685][ T9338] tipc: Resetting bearer [ 602.099386][ T9337] tipc: Resetting bearer [ 608.045656][ T9337] tipc: Disabling bearer [ 608.055734][ T8230] tipc: Node number set to 4150025545 [ 609.486465][ T9382] XFS (nullb0): Invalid superblock magic number [ 619.910351][ T9471] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 626.140734][ T9511] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 631.410518][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.416980][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.634604][ T9566] netlink: 'syz.1.877': attribute type 4 has an invalid length. [ 660.833363][ T9686] netlink: 48 bytes leftover after parsing attributes in process `syz.4.911'. [ 660.926734][ T9685] [U]  [ 667.676601][ T9723] netlink: 48 bytes leftover after parsing attributes in process `syz.2.922'. [ 668.584529][ T9722] [U]  [ 670.545192][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.928'. [ 672.595276][ T9754] capability: warning: `syz.1.923' uses deprecated v2 capabilities in a way that may be insecure [ 672.611594][ T9754] overlayfs: upper fs does not support tmpfile. [ 673.621459][ T9760] netlink: 48 bytes leftover after parsing attributes in process `syz.4.934'. [ 673.743620][ T9759] [U]  [ 677.383118][ T5872] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 677.593133][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 677.914638][ T5872] usb 3-1: config 0 has no interfaces? [ 678.014671][ T5872] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 678.032981][ T5872] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 678.053405][ T5872] usb 3-1: Manufacturer: syz [ 678.101130][ T5872] usb 3-1: config 0 descriptor?? [ 678.475608][ T9791] binder: 9788:9791 unknown command 1074553619 [ 678.481915][ T9791] binder: 9788:9791 ioctl c0306201 200000000040 returned -22 [ 679.221088][ T9793] netlink: 48 bytes leftover after parsing attributes in process `syz.4.943'. [ 679.396671][ T9792] [U]  [ 681.214797][ T5872] usb 3-1: USB disconnect, device number 13 [ 684.948765][ T9844] program syz.4.959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 684.959396][ T9844] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 685.086026][ T9845] netlink: 'syz.4.959': attribute type 39 has an invalid length. [ 687.213166][ T9856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.962'. [ 687.222112][ T9856] netlink: 32 bytes leftover after parsing attributes in process `syz.4.962'. [ 687.483240][ T9861] netlink: 48 bytes leftover after parsing attributes in process `syz.1.965'. [ 687.642945][ T8230] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 687.968152][ T8230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 687.981247][ T8230] usb 5-1: not running at top speed; connect to a high speed hub [ 688.000345][ T8230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.012493][ T8230] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 688.404798][ T8230] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 688.433289][ T8230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.472845][ T8230] usb 5-1: Product: syz [ 688.477098][ T8230] usb 5-1: Manufacturer: syz [ 688.481730][ T8230] usb 5-1: SerialNumber: syz [ 688.926531][ T8230] usb 5-1: USB disconnect, device number 5 [ 689.686696][ T9374] udevd[9374]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.574907][ T9897] netlink: 48 bytes leftover after parsing attributes in process `syz.1.975'. [ 691.713690][ T5872] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 691.947610][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 691.961633][ T5872] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 691.986661][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.033078][ T5872] usb 1-1: config 0 descriptor?? [ 692.081701][ T5872] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 692.128321][ T5872] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 692.154033][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.162976][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.191362][ T5872] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 692.221737][ T5872] usb 1-1: media controller created [ 692.291740][ T9894] general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN [ 692.303681][ T9894] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 692.312255][ T9894] CPU: 0 PID: 9894 Comm: syz.0.974 Not tainted syzkaller #0 [ 692.319556][ T9894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 692.329639][ T9894] RIP: 0010:__mutex_lock+0xf2/0xcc0 [ 692.335158][ T9894] Code: 0f b6 04 30 84 c0 0f 85 cd 0a 00 00 83 3d b5 48 9c 0c 00 75 2a 48 8d 7b 60 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 c3 6f 4e f7 48 39 5b 60 0f 85 30 0a 00 00 bf [ 692.354861][ T9894] RSP: 0018:ffffc9000c2e73a0 EFLAGS: 00010202 [ 692.361014][ T9894] RAX: 0000000000000019 RBX: 0000000000000068 RCX: dffffc0000000000 [ 692.369007][ T9894] RDX: ffff88802cb13c00 RSI: ffffffff8acadd60 RDI: 00000000000000c8 [ 692.376993][ T9894] RBP: ffffc9000c2e74f8 R08: ffffffff871badb6 R09: 000000000000001e [ 692.384996][ T9894] R10: dffffc0000000000 R11: ffffed100f759d2c R12: 0000000000000000 [ 692.392995][ T9894] R13: 1ffff9200185ce84 R14: dffffc0000000000 R15: 0000000000000000 [ 692.401002][ T9894] FS: 00007f4ede4036c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 692.409952][ T9894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.416616][ T9894] CR2: 0000000000000000 CR3: 0000000021332000 CR4: 00000000003506f0 [ 692.424608][ T9894] Call Trace: [ 692.427979][ T9894] [ 692.430992][ T9894] ? __mutex_lock+0x315/0xcc0 [ 692.435764][ T9894] ? dvb_usbv2_generic_write+0x26/0x50 [ 692.441334][ T9894] ? mutex_lock_nested+0x20/0x20 [ 692.446289][ T9894] ? mutex_lock_nested+0x20/0x20 [ 692.451243][ T9894] ? trace_raw_output_contention_end+0xd0/0xd0 [ 692.457455][ T9894] ? mark_lock+0x94/0x320 [ 692.461809][ T9894] ? rcu_is_watching+0x15/0xb0 [ 692.466705][ T9894] dvb_usbv2_generic_write+0x26/0x50 [ 692.472030][ T9894] mxl111sf_ctrl_msg+0x162/0x2c0 [ 692.477007][ T9894] mxl111sf_write_reg+0xaa/0x180 [ 692.481975][ T9894] ? mxl111sf_read_reg+0x270/0x270 [ 692.487108][ T9894] ? check_noncircular+0x18a/0x400 [ 692.492254][ T9894] ? look_up_lock_class+0x75/0x140 [ 692.497505][ T9894] mxl111sf_i2c_xfer+0x497/0x50d0 [ 692.502571][ T9894] ? mxl111sf_idac_config+0x1d0/0x1d0 [ 692.507966][ T9894] ? verify_lock_unused+0x140/0x140 [ 692.513183][ T9894] ? _find_first_zero_bit+0xd3/0x100 [ 692.518527][ T9894] ? __lock_acquire+0x2b81/0x7d40 [ 692.523568][ T9894] ? mark_lock+0x94/0x320 [ 692.527931][ T9894] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 692.533930][ T9894] ? lock_chain_count+0x20/0x20 [ 692.538790][ T9894] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 692.544717][ T9894] ? lockdep_hardirqs_on+0x98/0x150 [ 692.549949][ T9894] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 692.555867][ T9894] ? _raw_spin_unlock+0x40/0x40 [ 692.560734][ T9894] ? try_to_take_rt_mutex+0x7f7/0xaa0 [ 692.566304][ T9894] ? rt_mutex_slowlock+0x368/0x610 [ 692.571431][ T9894] ? mxl111sf_idac_config+0x1d0/0x1d0 [ 692.576830][ T9894] __i2c_transfer+0x884/0x20c0 [ 692.581637][ T9894] ? i2c_cmd+0x110/0x110 [ 692.585906][ T9894] ? i2c_transfer+0x11b/0x3a0 [ 692.590595][ T9894] i2c_transfer+0x261/0x3a0 [ 692.595117][ T9894] ? __i2c_transfer+0x20c0/0x20c0 [ 692.600326][ T9894] ? __might_fault+0xc6/0x120 [ 692.605042][ T9894] ? __might_fault+0xaa/0x120 [ 692.609747][ T9894] ? _copy_from_user+0xa5/0xe0 [ 692.614541][ T9894] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 692.619533][ T9894] i2cdev_ioctl+0x6a0/0x840 [ 692.624053][ T9894] ? i2cdev_write+0x120/0x120 [ 692.628746][ T9894] ? bpf_lsm_file_ioctl+0x9/0x10 [ 692.633727][ T9894] ? security_file_ioctl+0x80/0xa0 [ 692.638986][ T9894] ? i2cdev_write+0x120/0x120 [ 692.643690][ T9894] __se_sys_ioctl+0xfd/0x170 [ 692.648340][ T9894] do_syscall_64+0x55/0xb0 [ 692.652806][ T9894] ? clear_bhb_loop+0x40/0x90 [ 692.657581][ T9894] ? clear_bhb_loop+0x40/0x90 [ 692.662305][ T9894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.668386][ T9894] RIP: 0033:0x7f4edd59ce59 [ 692.672832][ T9894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.692674][ T9894] RSP: 002b:00007f4ede403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 692.701159][ T9894] RAX: ffffffffffffffda RBX: 00007f4edd815fa0 RCX: 00007f4edd59ce59 [ 692.709150][ T9894] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 692.717140][ T9894] RBP: 00007f4edd632d6f R08: 0000000000000000 R09: 0000000000000000 [ 692.725123][ T9894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.733104][ T9894] R13: 00007f4edd816038 R14: 00007f4edd815fa0 R15: 00007ffcc4dcfa88 [ 692.741095][ T9894] [ 692.744124][ T9894] Modules linked in: [ 692.750347][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 692.781908][ T5872] usb 1-1: selecting invalid altsetting 1 [ 692.788738][ T5872] set interface failed [ 692.790272][ T9894] ---[ end trace 0000000000000000 ]--- [ 692.800047][ T9894] RIP: 0010:__mutex_lock+0xf2/0xcc0 [ 692.805768][ T9894] Code: 0f b6 04 30 84 c0 0f 85 cd 0a 00 00 83 3d b5 48 9c 0c 00 75 2a 48 8d 7b 60 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 c3 6f 4e f7 48 39 5b 60 0f 85 30 0a 00 00 bf [ 692.837354][ T9894] RSP: 0018:ffffc9000c2e73a0 EFLAGS: 00010202 [ 692.843917][ T9894] RAX: 0000000000000019 RBX: 0000000000000068 RCX: dffffc0000000000 [ 692.852184][ T9894] RDX: ffff88802cb13c00 RSI: ffffffff8acadd60 RDI: 00000000000000c8 [ 692.860488][ T9894] RBP: ffffc9000c2e74f8 R08: ffffffff871badb6 R09: 000000000000001e [ 692.879898][ T9894] R10: dffffc0000000000 R11: ffffed100f759d2c R12: 0000000000000000 [ 692.889116][ T9894] R13: 1ffff9200185ce84 R14: dffffc0000000000 R15: 0000000000000000 [ 692.897521][ T9894] FS: 00007f4ede4036c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 692.910322][ T9894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.917185][ T9894] CR2: 00007f064f3ea2f8 CR3: 0000000021332000 CR4: 00000000003506e0 [ 692.925541][ T9894] Kernel panic - not syncing: Fatal exception [ 692.932240][ T9894] Kernel Offset: disabled [ 692.936754][ T9894] Rebooting in 86400 seconds..