last executing test programs: 7.898656083s ago: executing program 3 (id=312): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) semget$private(0x0, 0x4, 0x100) 4.82540544s ago: executing program 3 (id=326): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 4.82257877s ago: executing program 0 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf62, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x1}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x0, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x7, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) 4.552787066s ago: executing program 0 (id=328): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="38002d0002020a02020200000a005f"], 0x54}}, 0x800) 4.40196731s ago: executing program 0 (id=331): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 4.141116197s ago: executing program 3 (id=333): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x66ad, 0xc000, 0x1, 0x800000bf}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r0, 0x0, 0x20000000000002, 0x2) 4.096896188s ago: executing program 3 (id=334): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) semget$private(0x0, 0x4, 0x100) 2.781258331s ago: executing program 3 (id=338): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x2, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x7ff) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.948974032s ago: executing program 3 (id=346): r0 = syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r4, &(0x7f0000001300)='7', 0x1) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000200)="952bb3e006"}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x300, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_connect$hid(0x3, 0x36, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x7, 0x80140) r8 = syz_open_dev$hidraw(&(0x7f0000000640), 0x100000000, 0x420082) write$hidraw(r8, &(0x7f00000008c0)="88277b25593416685e8965e458f831d73642e99fd8157b596a50cac4536db431746698ed10ad4e006ef159dd017501364c21ed5b825090db34e72dac11017aca24367855587820736efb09c40497b7631e1d2a5591bad595e88801ba6ab3dc9e7d2a0305a4219ae7527734e9a40948223dc03b590c8fb1b94321b727520fef7fc9dc1ec0a911f89b393aed5ba4c865bb7e7d43b55b0a1b75531443661ee39e4e3991d4019818bd723801f312ed91ac0ed6cac75dcd3b48da05b2e333ac60c0ee3f73cec2097e464942e4697fb77854fca7151b21a18e0cd35f65268e79c04eb8d57edf40a3dc490994becc50ccfe9e3e8e", 0xf1) ioctl$HIDIOCGVERSION(r7, 0x80044801, &(0x7f0000000240)) syz_usb_connect$uac2(0x2, 0x98, &(0x7f0000000000)=ANY=[], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x6, [{0xc4, &(0x7f0000000100)=@string={0xc4, 0x3, "08b5bb1b30286f80b7591098afb82cc465c603a8bfb5c09c14e0dabb354574fc9bf5e94e76e0e0bb0dab081461f3087313937deadcc4135372044def4b15ae2706bd397e3f7dca7812cb1dfac88eeb54116c5dcdd72c6f76d7c1e7fc793443229e4aec66e4e84625792d0af820e1bb97c3507fd2419c278efb9cde7feb7b02fa5668111563373cc773032c6850e1817c7db5ed652e685e34c078b67eb645a536e9b9daf92f2de43fbbba71becfef0110640fcbabc06208f7d5b644e30d5645a89ff6"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c29}}, {0xf, &(0x7f00000004c0)=@string={0xf, 0x3, "4ffcf52c2451fee524c8f1b5e1"}}, {0xc5, &(0x7f0000000500)=@string={0xc5, 0x3, "5c2fdb8e2affa3fbc190294800cdf57da0a8af3fa15f6219db90f1f579760805b861fe022b08a001a27ba62a2e348c2659e916eebbe1b9d156b59b4b430dd4ed61ff8e24bca407dd2e7fed841b6c931613e616e891038b8f270050e1076af4984b5482b1ab49a060e350a5f12aaf4fb036c5b569e5d1e4b43b066609aa7bfa6c6649c8d3c72cecdfb51a95e9f52ce0f6bb68783e8cb2b63eaa53312954f96436cabec236a5192606498f92daf7c0527b9f1fea70a807d27c75f956588694647fe08630"}}, {0xbf, &(0x7f0000000740)=@string={0xbf, 0x3, "6e1bb824291728df23976a2ce9375f2a47092b9f1b86bb686648bcfe654b06ac7a08c8dde6b90f940de64f446c7c4d9fedf687ddf8920aa33d79e81e1e5ac6f6ade1e6cb51e6e11f003eb0570ce0ed082a29ef5e0879847334e54de6285b395b49087430b034e7c7d5a7630e673bd44bc104849effe4796f34af2ebe8db15f1affbad4ae676dcd25b52bab95448c3f2a416bdcd088ac635cf4e2f888f05d5958b313ceac34ba83f80e8c86b0a22014ababe4c14b3db5c5d693233db980"}}]}) r9 = syz_open_dev$evdev(&(0x7f0000005bc0), 0x4, 0x100) ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000000040)={0x8, 0x12, 0xf, 0xfffffe00, "20d5907eab8a72ce0d1da80da3f1dcb6f73cbbc8af6df1cc7a71b3fd92a5cd22"}) 1.266490869s ago: executing program 2 (id=349): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac", 0x53}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d", 0xc6}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.183966361s ago: executing program 2 (id=351): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa2040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.037986934s ago: executing program 2 (id=352): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) 981.169646ms ago: executing program 2 (id=353): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 870.866879ms ago: executing program 0 (id=355): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x1) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14090, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 753.621152ms ago: executing program 2 (id=356): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 646.156464ms ago: executing program 2 (id=357): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000e80)={0x24, &(0x7f0000000040)={0x20, 0xb, 0x62, {0x62, 0x0, "050e607c903a1da172cc936a17c4af5713e8df8c0c275724eadf955b29701bb9c232121951f704ad46c53243084dc490e7f63c5e5283ed116538974844b6fc25da0ebf94c1c0b6615072591b37f36782ce3441337173969b614802854185943b"}}, 0x0, &(0x7f0000000e00), &(0x7f0000000e40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x14e}}}}, &(0x7f0000001200)={0x2c, 0x0, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001100), &(0x7f0000001140)={0x20, 0x3, 0x1, 0x7}}) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x83, 0x2, 'W7'}, 0x0, 0x0}) syz_usb_connect$uac2(0x4, 0xf4, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000008820516004000010203010902e20003014d0003080b00000105200b0904000000010120000924010600ff42000c09240d04000006010008240901ff07092908240a7f0000040110240203030403a00804000000b10902092407020200010000072406010101000904010000010220000904010101010220000905010940000403e9082501023f04050009040200000102200009040201010102200009240201090189109b1024"], 0x0) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x0, 0xb, 0x62, {0x62, 0x22, "a2dd7e1f8aefcd302eefabba31cdce40841225e7c65720487791eecea15d2dd2ca8dbc0a931acae3db79e236ef7bfbbfba43524bbef2ca79f3b36cff1906b833548485f0a3e560a8ce04d6453c54e30672db1312a81494ff56fed9e6ef5cca5d"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000480)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xce, 0x60, 0x10, 0x8, 0x5, 0x1, 0xfff7}}}, &(0x7f0000000b40)={0x84, 0x0, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xc}, 0x0, 0x0, &(0x7f0000000700)=ANY=[], &(0x7f0000000780)={0x40, 0x7, 0x2, 0x2}, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x13, 0x6, @remote}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x19, 0x2, 'SK'}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0xfb}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x822b01) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0}) 645.288514ms ago: executing program 0 (id=358): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="38002d0002020a02020200000a005f"], 0x54}}, 0x800) 500.980628ms ago: executing program 0 (id=359): setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) shutdown(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$tun(r0, 0x0, 0xfdef) openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x1092c0, 0x0) r1 = memfd_create(0x0, 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x182) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "ba0c435cf2c4100731137be3cbea62b6474d49f809bbd95684e02955b9fc7a17"}) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) syz_usb_connect(0x2, 0x4e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[], 0x0) syz_open_dev$evdev(0x0, 0x9, 0x400000) 471.372779ms ago: executing program 1 (id=360): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa2040, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 311.663873ms ago: executing program 1 (id=361): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) 252.369844ms ago: executing program 1 (id=362): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="083c88a8"], 0xfdef) 134.673537ms ago: executing program 1 (id=363): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) 25.80732ms ago: executing program 1 (id=364): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) lsetxattr(&(0x7f0000001100)='./mnt\x00', &(0x7f0000001140)=@random={'security.', '@{\x00'}, &(0x7f0000001180)='\x00', 0x1, 0x1) 0s ago: executing program 1 (id=365): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 75.321267][ T5764] cgroup: Unknown subsys name 'net' [ 75.481150][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.976872][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.477471][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.486023][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.494207][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.502219][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.510677][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.518050][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.526979][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.554462][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.574782][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.580746][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.584050][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.591721][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.597235][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.604142][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.611841][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.619722][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.624556][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.638226][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.644142][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.650196][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.654468][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.666440][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.666495][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.681471][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.091337][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 79.151261][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 79.196621][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 79.247566][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 79.290395][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.297696][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.305654][ T5776] bridge_slave_0: entered allmulticast mode [ 79.312525][ T5776] bridge_slave_0: entered promiscuous mode [ 79.358730][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.368611][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.376476][ T5776] bridge_slave_1: entered allmulticast mode [ 79.383451][ T5776] bridge_slave_1: entered promiscuous mode [ 79.438062][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.445914][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.453044][ T5778] bridge_slave_0: entered allmulticast mode [ 79.461725][ T5778] bridge_slave_0: entered promiscuous mode [ 79.489534][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.499702][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.507918][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.515725][ T5778] bridge_slave_1: entered allmulticast mode [ 79.522555][ T5778] bridge_slave_1: entered promiscuous mode [ 79.559020][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.578165][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.585518][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.592633][ T5779] bridge_slave_0: entered allmulticast mode [ 79.600090][ T5779] bridge_slave_0: entered promiscuous mode [ 79.617764][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.624936][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.632245][ T5777] bridge_slave_0: entered allmulticast mode [ 79.639969][ T5777] bridge_slave_0: entered promiscuous mode [ 79.658444][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.668587][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.677944][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.685348][ T5779] bridge_slave_1: entered allmulticast mode [ 79.692132][ T5779] bridge_slave_1: entered promiscuous mode [ 79.708891][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.716203][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.723366][ T5777] bridge_slave_1: entered allmulticast mode [ 79.730383][ T5777] bridge_slave_1: entered promiscuous mode [ 79.750099][ T5776] team0: Port device team_slave_0 added [ 79.758861][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.789165][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.810475][ T5776] team0: Port device team_slave_1 added [ 79.834820][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.874143][ T5778] team0: Port device team_slave_0 added [ 79.891834][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.902162][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.909488][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.935792][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.949006][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.956056][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.982245][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.995038][ T5778] team0: Port device team_slave_1 added [ 80.009297][ T5779] team0: Port device team_slave_0 added [ 80.016997][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.040100][ T5779] team0: Port device team_slave_1 added [ 80.093885][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.100858][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.127055][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.150124][ T5777] team0: Port device team_slave_0 added [ 80.158328][ T5777] team0: Port device team_slave_1 added [ 80.177738][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.184933][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.210871][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.223304][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.230730][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.258134][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.299976][ T5776] hsr_slave_0: entered promiscuous mode [ 80.306447][ T5776] hsr_slave_1: entered promiscuous mode [ 80.314193][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.321157][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.347666][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.418327][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.428076][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.454573][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.501696][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.508747][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.535406][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.550533][ T5779] hsr_slave_0: entered promiscuous mode [ 80.557212][ T5779] hsr_slave_1: entered promiscuous mode [ 80.563341][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.571704][ T5779] Cannot create hsr debugfs directory [ 80.587500][ T5778] hsr_slave_0: entered promiscuous mode [ 80.594153][ T5778] hsr_slave_1: entered promiscuous mode [ 80.600428][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.608110][ T5778] Cannot create hsr debugfs directory [ 80.714330][ T5783] Bluetooth: hci0: command tx timeout [ 80.714570][ T5792] Bluetooth: hci2: command tx timeout [ 80.725789][ T51] Bluetooth: hci3: command tx timeout [ 80.793878][ T5792] Bluetooth: hci1: command tx timeout [ 80.812063][ T5777] hsr_slave_0: entered promiscuous mode [ 80.818529][ T5777] hsr_slave_1: entered promiscuous mode [ 80.825195][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.832784][ T5777] Cannot create hsr debugfs directory [ 81.029427][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.049990][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.060017][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.076145][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.135749][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.161503][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.172776][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.182393][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.245919][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.262716][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.278148][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.320271][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.360455][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.377709][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.389289][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.399893][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.481737][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.542510][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.579723][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.600795][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.614045][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.621346][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.641689][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.659004][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.666145][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.700157][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.707312][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.722468][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.729599][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.754088][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.805491][ T5776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.816703][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.831103][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.846956][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.854075][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.871812][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.878977][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.952929][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.002948][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.010145][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.046027][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.053174][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.136961][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.349191][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.409958][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.473252][ T5779] veth0_vlan: entered promiscuous mode [ 82.502835][ T5779] veth1_vlan: entered promiscuous mode [ 82.541117][ T5776] veth0_vlan: entered promiscuous mode [ 82.553573][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.600331][ T5776] veth1_vlan: entered promiscuous mode [ 82.613051][ T5779] veth0_macvtap: entered promiscuous mode [ 82.626561][ T5779] veth1_macvtap: entered promiscuous mode [ 82.649335][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.681057][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.706634][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.717611][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.726922][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.736103][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.748910][ T5778] veth0_vlan: entered promiscuous mode [ 82.761387][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.786270][ T5778] veth1_vlan: entered promiscuous mode [ 82.794166][ T5792] Bluetooth: hci0: command tx timeout [ 82.799609][ T5792] Bluetooth: hci2: command tx timeout [ 82.805511][ T51] Bluetooth: hci3: command tx timeout [ 82.860245][ T5776] veth0_macvtap: entered promiscuous mode [ 82.875197][ T5783] Bluetooth: hci1: command tx timeout [ 82.883459][ T5776] veth1_macvtap: entered promiscuous mode [ 82.972001][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.984499][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.996332][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.999136][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.011782][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.022861][ T5778] veth0_macvtap: entered promiscuous mode [ 83.063524][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.074677][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.086514][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.096947][ T5778] veth1_macvtap: entered promiscuous mode [ 83.117498][ T5777] veth0_vlan: entered promiscuous mode [ 83.119825][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.126841][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.140346][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.149577][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.151737][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.166729][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.219376][ T5777] veth1_vlan: entered promiscuous mode [ 83.233227][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.244358][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.254418][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.264936][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.278173][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.315904][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.331088][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.342139][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.353134][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.365096][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.403052][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.423672][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.432664][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.442536][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.530945][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.552465][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.588908][ T5777] veth0_macvtap: entered promiscuous mode [ 83.634327][ T5777] veth1_macvtap: entered promiscuous mode [ 83.668178][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.689840][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.701593][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.724844][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.754178][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.768393][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.778537][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.789673][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.806411][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.835929][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.848799][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.863051][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.880261][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.890696][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.905459][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.918828][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.938934][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.959609][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.002569][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.012528][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.024667][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.032263][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.048297][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.057715][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.263141][ T5853] syz.1.2[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.280321][ T5853] loop1: detected capacity change from 0 to 512 [ 84.399461][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.435699][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.454817][ T5858] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.564918][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.604826][ T5853] EXT4-fs (loop1): Test dummy encryption mode enabled [ 84.605672][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.650181][ T5853] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2: inode has both inline data and extents flags [ 84.667822][ T5853] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 84.690552][ T5853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.874039][ T5783] Bluetooth: hci2: command tx timeout [ 84.879599][ T5783] Bluetooth: hci3: command tx timeout [ 84.885292][ T5783] Bluetooth: hci0: command tx timeout [ 85.030549][ T5792] Bluetooth: hci1: command tx timeout [ 85.113127][ T5853] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 85.387235][ T5881] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 85.709700][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.033435][ T5897] mmap: syz.1.14 (5897) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.231581][ T5902] loop1: detected capacity change from 0 to 16 [ 86.246259][ T5902] ======================================================= [ 86.246259][ T5902] WARNING: The mand mount option has been deprecated and [ 86.246259][ T5902] and is ignored by this kernel. Remove the mand [ 86.246259][ T5902] option from the mount to silence this warning. [ 86.246259][ T5902] ======================================================= [ 86.547923][ T5902] erofs: (device loop1): mounted with root inode @ nid 36. [ 86.973792][ T5792] Bluetooth: hci0: command tx timeout [ 86.979252][ T5792] Bluetooth: hci3: command tx timeout [ 86.984793][ T5783] Bluetooth: hci2: command tx timeout [ 87.114059][ T51] Bluetooth: hci1: command tx timeout [ 87.144583][ T5907] loop0: detected capacity change from 0 to 512 [ 89.623501][ T5955] loop1: detected capacity change from 0 to 512 [ 90.341514][ T5979] loop1: detected capacity change from 0 to 512 [ 91.592999][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.608462][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.921270][ T9] cfg80211: failed to load regulatory.db [ 92.334278][ T6041] sctp: [Deprecated]: syz.0.67 (pid 6041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.334278][ T6041] Use struct sctp_sack_info instead [ 94.108158][ T6072] Zero length message leads to an empty skb [ 94.181926][ T28] audit: type=1326 audit(1786133642.630:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.2.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 94.244557][ T28] audit: type=1326 audit(1786133642.630:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.2.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 94.310791][ T28] audit: type=1326 audit(1786133642.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.2.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 94.403720][ T28] audit: type=1326 audit(1786133642.670:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.2.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 94.479968][ T28] audit: type=1326 audit(1786133642.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.2.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 94.567432][ T28] audit: type=1326 audit(1786133642.680:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.2.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 94.918055][ T28] audit: type=1326 audit(1786133643.370:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.2.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 94.995304][ T28] audit: type=1326 audit(1786133643.370:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.2.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 95.039668][ T28] audit: type=1326 audit(1786133643.460:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.2.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 95.065108][ T28] audit: type=1326 audit(1786133643.460:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6073 comm="syz.2.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 97.001650][ T6144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.587423][ T6173] capability: warning: `syz.0.120' uses deprecated v2 capabilities in a way that may be insecure [ 97.804523][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.812356][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.954076][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.134168][ T8] usb 2-1: device descriptor read/64, error -71 [ 98.424180][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.604556][ T8] usb 2-1: device descriptor read/64, error -71 [ 98.744403][ T8] usb usb2-port1: attempt power cycle [ 99.185201][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.211116][ T6243] loop3: detected capacity change from 0 to 128 [ 99.235258][ T8] usb 2-1: device descriptor read/8, error -71 [ 99.431549][ T6247] kvm: pic: single mode not supported [ 99.431727][ T6247] kvm: pic: single mode not supported [ 99.437654][ T6247] kvm: pic: level sensitive irq not supported [ 99.514124][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.565073][ T8] usb 2-1: device descriptor read/8, error -71 [ 99.697504][ T8] usb usb2-port1: unable to enumerate USB device [ 99.704501][ T6262] loop0: detected capacity change from 0 to 128 [ 99.760967][ T6262] syz.0.154: attempt to access beyond end of device [ 99.760967][ T6262] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 99.780428][ T6262] syz.0.154: attempt to access beyond end of device [ 99.780428][ T6262] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 99.800208][ T6262] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 99.814139][ T6262] syz.0.154: attempt to access beyond end of device [ 99.814139][ T6262] loop0: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 99.836535][ T6264] bond1: entered allmulticast mode [ 99.844052][ T6262] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 99.854004][ T6262] syz.0.154: attempt to access beyond end of device [ 99.854004][ T6262] loop0: rw=2049, sector=146, nr_sectors = 2 limit=128 [ 99.868602][ T6262] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 99.876149][ T6266] syz.0.154: attempt to access beyond end of device [ 99.876149][ T6266] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 99.910499][ T6266] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 101.102919][ T6292] bond2: entered allmulticast mode [ 101.125590][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.135237][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.306548][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 102.306558][ T28] audit: type=1326 audit(1786133650.770:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.1.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44139e0d9 code=0x7ffc0000 [ 102.367281][ T28] audit: type=1326 audit(1786133650.810:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.1.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44139e0d9 code=0x7ffc0000 [ 102.395672][ T28] audit: type=1326 audit(1786133650.810:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.1.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff44139e0d9 code=0x7ffc0000 [ 102.422165][ T28] audit: type=1326 audit(1786133650.810:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.1.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44139e0d9 code=0x7ffc0000 [ 102.459814][ T28] audit: type=1326 audit(1786133650.810:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.1.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44139e0d9 code=0x7ffc0000 [ 102.878582][ T6353] device-mapper: ioctl: Invalid data size in the ioctl structure: 3858891064 [ 103.799141][ T28] audit: type=1326 audit(1786133908.255:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 103.830772][ T28] audit: type=1326 audit(1786133908.255:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 103.896623][ T28] audit: type=1326 audit(1786133908.275:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 103.944427][ T28] audit: type=1326 audit(1786133908.275:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 103.998330][ T28] audit: type=1326 audit(1786133908.275:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.2.199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 104.063375][ T6403] team0: Port device bridge0 added [ 104.943360][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.951472][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.999829][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.007287][ T6440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.015649][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.022860][ T6440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.062741][ T6440] team0: Port device bridge0 added [ 105.151781][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.207094][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.337230][ T6440] syz.1.217 (6440) used greatest stack depth: 20648 bytes left [ 105.346002][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 105.543348][ T6458] syzkaller0: entered promiscuous mode [ 105.551203][ T6458] syzkaller0: entered allmulticast mode [ 105.641220][ T6466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.225'. [ 109.423770][ T6493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.442701][ T6525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.245'. [ 110.409268][ T6551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.593690][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.742436][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 111.899105][ T6605] (null): rxe_set_mtu: Set mtu to 1024 [ 111.915629][ T6605] wg1 speed is unknown, defaulting to 1000 [ 111.933509][ T6605] wg1 speed is unknown, defaulting to 1000 [ 111.942231][ T6605] wg1 speed is unknown, defaulting to 1000 [ 112.085448][ T6605] infiniband syz2: set active [ 112.091536][ T5766] wg1 speed is unknown, defaulting to 1000 [ 112.092112][ T6605] infiniband syz2: added wg1 [ 112.142231][ T6605] RDS/IB: syz2: added [ 112.150813][ T6605] smc: adding ib device syz2 with port count 1 [ 112.157548][ T6605] smc: ib device syz2 port 1 has pnetid [ 112.172554][ T6605] wg1 speed is unknown, defaulting to 1000 [ 112.181270][ T789] wg1 speed is unknown, defaulting to 1000 [ 112.310252][ T6605] wg1 speed is unknown, defaulting to 1000 [ 112.441839][ T6605] wg1 speed is unknown, defaulting to 1000 [ 112.560280][ T6605] wg1 speed is unknown, defaulting to 1000 [ 113.045710][ T789] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.247933][ T789] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.258069][ T789] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.268317][ T789] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.280498][ T789] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 113.289697][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.297841][ T789] usb 4-1: Product: syz [ 113.302127][ T789] usb 4-1: Manufacturer: syz [ 113.306917][ T789] usb 4-1: SerialNumber: syz [ 113.326633][ T789] usb 4-1: selecting invalid altsetting 1 [ 113.335503][ T789] usb 4-1: unit 255 not found! [ 113.364382][ T789] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 113.398241][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.342630][ T6592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.354716][ T6609] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 114.853703][ T5766] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.042027][ T5766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.053018][ T5766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.062870][ T5766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 115.075018][ T5766] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.085130][ T5766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.102375][ T5766] usb 2-1: config 0 descriptor?? [ 115.203766][ T789] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.396834][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.407931][ T789] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.417297][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.430462][ T789] usb 1-1: config 0 descriptor?? [ 115.530157][ T5766] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 115.555058][ T5766] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 115.647210][ T789] usbhid 1-1:0.0: can't add hid device: -71 [ 115.655070][ T789] usbhid: probe of 1-1:0.0 failed with error -71 [ 115.673218][ T789] usb 1-1: USB disconnect, device number 2 [ 115.734742][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.745865][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.757497][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.766685][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.784240][ T27] usb 4-1: USB disconnect, device number 2 [ 115.978451][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.992644][ T6643] Bluetooth: MGMT ver 1.22 [ 116.006024][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.091054][ T6646] team0: Port device bridge0 added [ 116.183146][ T6650] bond2: entered allmulticast mode [ 116.224325][ T789] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.235588][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.274161][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.423931][ T789] usb 1-1: Using ep0 maxpacket: 32 [ 116.431272][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.442404][ T789] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 116.451536][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.461527][ T789] usb 1-1: config 0 descriptor?? [ 116.470305][ T789] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 116.489462][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.499003][ T789] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 116.509675][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.643835][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.846261][ T27] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 116.856559][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 116.871980][ T27] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.882525][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.890676][ T27] usb 4-1: Product: syz [ 116.894973][ T27] usb 4-1: Manufacturer: syz [ 116.899635][ T27] usb 4-1: SerialNumber: syz [ 116.982362][ T789] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 117.259373][ T27] usb 4-1: USB disconnect, device number 3 [ 117.577629][ T5766] usb 1-1: USB disconnect, device number 3 [ 117.592358][ T5766] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 118.073694][ T789] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 118.074254][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.087672][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 118.094974][ T789] ath9k_htc: Failed to initialize the device [ 118.103208][ T27] usb 4-1: ath9k_htc: USB layer deinitialized [ 118.524249][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.772314][ T8] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 118.814714][ T8] usb 1-1: config 0 has no interface number 0 [ 118.856172][ T8] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.942525][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 118.976385][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.024796][ T8] usb 1-1: Product: syz [ 119.048637][ T8] usb 1-1: Manufacturer: syz [ 119.091824][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.107804][ T8] usb 1-1: SerialNumber: syz [ 119.125676][ T8] usb 1-1: config 0 descriptor?? [ 119.142487][ T8] yurex 1-1:0.50: USB YUREX device now attached to Yurex #1 [ 119.204182][ T23] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 119.214180][ T23] usb 2-1: device reset changed ep0 maxpacket size! [ 119.228694][ T9] usb 2-1: USB disconnect, device number 6 [ 119.386122][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.414237][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.434468][ T27] usb 4-1: device descriptor read/all, error -71 [ 119.443833][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.543485][ T6682] bond3: entered allmulticast mode [ 119.653674][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 119.666775][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 119.686039][ T9] usb 2-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 119.695301][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.703377][ T9] usb 2-1: Product: syz [ 119.708288][ T9] usb 2-1: Manufacturer: syz [ 119.712958][ T9] usb 2-1: SerialNumber: syz [ 119.945642][ T9] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 119.953168][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 120.009792][ T9] usb 2-1: USB disconnect, device number 7 [ 120.124706][ T27] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 120.151047][ T6695] udevd[6695]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.308786][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 120.317157][ T27] usb 4-1: not running at top speed; connect to a high speed hub [ 120.329802][ T27] usb 4-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice= 0.40 [ 120.338915][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.347077][ T27] usb 4-1: Product: syz [ 120.351279][ T27] usb 4-1: Manufacturer: syz [ 120.356972][ T27] usb 4-1: SerialNumber: syz [ 120.589070][ T27] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 120.625942][ T27] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 120.717775][ T27] usb 4-1: USB disconnect, device number 5 [ 120.788701][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.875013][ T6698] udevd[6698]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.936052][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 120.952900][ T5771] udevd[5771]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 121.182713][ T9] usb 1-1: USB disconnect, device number 4 [ 121.216997][ T9] yurex 1-1:0.50: USB YUREX #1 now disconnected [ 121.743715][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 121.955071][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 121.980491][ T9] usb 1-1: config 3 has an invalid interface number: 52 but max is 0 [ 121.993733][ T9] usb 1-1: config 3 has no interface number 0 [ 121.999871][ T9] usb 1-1: config 3 interface 52 has no altsetting 0 [ 122.026353][ T9] usb 1-1: string descriptor 0 read error: -22 [ 122.034845][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 122.034858][ T28] audit: type=1326 audit(1786135462.500:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 122.044229][ T9] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=ef.ca [ 122.084981][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.120915][ T9] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 122.146802][ T9] usb 1-1: selecting invalid altsetting 0 [ 122.147947][ T28] audit: type=1326 audit(1786135462.500:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 122.192891][ T2325] pvrusb2: Invalid write control endpoint [ 122.248056][ T28] audit: type=1326 audit(1786135462.560:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 122.353106][ T28] audit: type=1326 audit(1786135462.560:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 122.399879][ T2325] pvrusb2: Invalid write control endpoint [ 122.413636][ T28] audit: type=1326 audit(1786135462.560:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 122.449094][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.463658][ T2325] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 122.473255][ T2325] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 122.483964][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.501926][ T28] audit: type=1326 audit(1786135462.560:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 122.536038][ T2325] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 122.554744][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.573817][ T2325] pvrusb2: Device being rendered inoperable [ 122.580186][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.595391][ T2325] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 122.616731][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.626932][ T2325] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 122.636643][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.649815][ T2325] pvrusb2: Attached sub-driver cx25840 [ 122.745960][ T2325] pvrusb2: Attempted to execute control transfer when device not ok [ 122.767381][ T2325] pvrusb2: Attempted to execute control transfer when device not ok [ 122.785042][ T2325] pvrusb2: Attempted to execute control transfer when device not ok [ 122.803544][ T2325] pvrusb2: Attempted to execute control transfer when device not ok [ 122.811722][ T28] audit: type=1326 audit(1786135463.270:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 122.843639][ T2325] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 122.868905][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.878416][ T28] audit: type=1326 audit(1786135463.270:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 122.884704][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.910087][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.954133][ T28] audit: type=1326 audit(1786135463.300:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 123.027709][ T28] audit: type=1326 audit(1786135463.300:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475a59e0d9 code=0x7ffc0000 [ 123.116604][ T27] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 123.124980][ T2325] TUNER: Unable to find symbol tda829x_probe() [ 123.131282][ T27] usb 2-1: config 2 has no interface number 0 [ 123.147653][ T27] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 123.183608][ T27] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 123.203616][ T27] usb 2-1: config 2 interface 43 has no altsetting 0 [ 123.234105][ T27] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 123.263647][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.271771][ T27] usb 2-1: Product: syz [ 123.287302][ T27] usb 2-1: Manufacturer: syz [ 123.290893][ T2325] DVB: Unable to find symbol tda9887_attach() [ 123.291922][ T27] usb 2-1: SerialNumber: syz [ 123.311259][ T6747] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 123.321103][ T2325] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 123.328631][ T6747] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 123.351047][ T2325] pvrusb2: Attached sub-driver tuner [ 123.370303][ T2325] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 123.417890][ T2325] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 123.780718][ T9] usb 1-1: USB disconnect, device number 5 [ 123.821862][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.842500][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.075314][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.104105][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.143232][ T27] ums-usbat 2-1:2.43: USB Mass Storage device detected [ 124.176236][ T27] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 124.251032][ T27] ums-usbat: probe of 2-1:2.43 failed with error -5 [ 124.268992][ T27] usb 2-1: USB disconnect, device number 8 [ 124.920255][ T6782] syzkaller0: entered promiscuous mode [ 124.932351][ T6782] syzkaller0: entered allmulticast mode [ 124.997913][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 125.008011][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 125.021485][ T6786] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.030736][ T6786] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.039832][ T6786] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.048848][ T6786] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.173015][ T6790] bond3: entered allmulticast mode [ 125.214253][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.246849][ T6793] 9pnet_virtio: no channels available for device syz [ 125.427466][ T27] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 125.443624][ T27] usb 1-1: config 0 has no interface number 0 [ 125.449969][ T27] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.465963][ T27] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 125.477925][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.486400][ T27] usb 1-1: Product: syz [ 125.490613][ T27] usb 1-1: Manufacturer: syz [ 125.501421][ T27] usb 1-1: SerialNumber: syz [ 125.509360][ T27] usb 1-1: config 0 descriptor?? [ 125.526757][ T27] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 125.604171][ T5905] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 125.798351][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 125.807298][ T5905] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.818106][ T5905] usb 2-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 125.818255][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.841089][ T5905] usb 2-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 125.854126][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.864956][ T5905] usb 2-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 125.880980][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.889800][ T5905] usb 2-1: Product: syz [ 125.894765][ T5905] usb 2-1: Manufacturer: syz [ 125.899524][ T5905] usb 2-1: SerialNumber: syz [ 126.354244][ T5905] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 127.075105][ T5905] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 127.208952][ T6821] bond1: entered allmulticast mode [ 127.348535][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.374668][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.407769][ T5905] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.431585][ T5905] usb 2-1: device firmware changed [ 127.440813][ T5905] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 127.456463][ T5841] usb 2-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 127.467934][ T5905] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 127.475867][ T5841] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 127.489496][ T5905] usb 2-1: USB disconnect, device number 9 [ 127.653663][ T5786] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.834077][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 127.846799][ T5786] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 127.848521][ T789] usb 1-1: USB disconnect, device number 6 [ 127.867198][ T789] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 127.878041][ T5786] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 127.899060][ T5786] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 127.910643][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.919396][ T5786] usb 4-1: Product: syz [ 127.924491][ T5786] usb 4-1: Manufacturer: syz [ 127.929113][ T5786] usb 4-1: SerialNumber: syz [ 127.955225][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.214520][ T6836] syzkaller0: entered promiscuous mode [ 128.218261][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.233903][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.233973][ T6836] syzkaller0: entered allmulticast mode [ 128.431079][ T6842] bond2: entered allmulticast mode [ 128.462766][ T789] usb 4-1: USB disconnect, device number 6 [ 128.572750][ T6851] warning: `syz.2.356' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.043937][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 129.064245][ T9] ath9k_htc: Failed to initialize the device [ 129.079301][ T789] usb 4-1: ath9k_htc: USB layer deinitialized [ 129.242540][ T6872] jffs2: notice: (6872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.287746][ T5776] ------------[ cut here ]------------ [ 129.293449][ T5776] kernel BUG at fs/jffs2/nodelist.c:462! [ 129.302244][ T5776] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 129.308348][ T5776] CPU: 1 PID: 5776 Comm: syz-executor Not tainted syzkaller #0 [ 129.315893][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.325968][ T5776] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 129.331875][ T5776] Code: 08 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 72 00 08 ff e9 42 fe ff ff e8 18 7e af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 129.351507][ T5776] RSP: 0018:ffffc9000465fa98 EFLAGS: 00010293 [ 129.357591][ T5776] RAX: ffffffff82d7f368 RBX: ffff88802d6fa000 RCX: ffff8880303c3c00 [ 129.365581][ T5776] RDX: 0000000000000000 RSI: ffff88802d6fa000 RDI: ffff88805c392000 [ 129.373612][ T5776] RBP: 0000000000000006 R08: ffff88805c39236b R09: 1ffff1100b87246d [ 129.381602][ T5776] R10: dffffc0000000000 R11: ffffed100b87246e R12: ffff88802d6fa000 [ 129.389590][ T5776] R13: dffffc0000000000 R14: ffff88802d6fa020 R15: ffff88805c392000 [ 129.397590][ T5776] FS: 000055555a20e500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 129.406538][ T5776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.413152][ T5776] CR2: 00007ffc36b5dce0 CR3: 000000006191e000 CR4: 00000000003506e0 [ 129.421140][ T5776] Call Trace: [ 129.424446][ T5776] [ 129.427415][ T5776] ? jffs2_do_clear_inode+0x314/0x390 [ 129.432832][ T5776] jffs2_do_clear_inode+0x31f/0x390 [ 129.438061][ T5776] ? jffs2_statfs+0x370/0x370 [ 129.442766][ T5776] evict+0x4b7/0x8a0 [ 129.446692][ T5776] ? xa_load+0x64/0x2e0 [ 129.450871][ T5776] ? proc_nr_inodes+0x230/0x230 [ 129.455753][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 129.461014][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 129.466255][ T5776] evict_inodes+0x64a/0x6e0 [ 129.470760][ T5776] ? clear_inode+0x150/0x150 [ 129.475349][ T5776] ? jffs2_sync_fs+0x97/0xa0 [ 129.479937][ T5776] generic_shutdown_super+0x97/0x2b0 [ 129.485229][ T5776] kill_mtd_super+0x23/0x70 [ 129.489754][ T5776] jffs2_kill_sb+0x96/0xb0 [ 129.494169][ T5776] deactivate_locked_super+0x97/0x100 [ 129.499539][ T5776] cleanup_mnt+0x3d7/0x460 [ 129.503968][ T5776] task_work_run+0x1d4/0x260 [ 129.508592][ T5776] ? task_work_cancel+0x220/0x220 [ 129.513649][ T5776] ? exit_to_user_mode_loop+0x3b/0x110 [ 129.519133][ T5776] exit_to_user_mode_loop+0xe6/0x110 [ 129.524441][ T5776] exit_to_user_mode_prepare+0xee/0x180 [ 129.530006][ T5776] syscall_exit_to_user_mode+0x1a/0x50 [ 129.535487][ T5776] do_syscall_64+0x61/0xb0 [ 129.539907][ T5776] ? clear_bhb_loop+0x40/0x90 [ 129.544612][ T5776] ? clear_bhb_loop+0x40/0x90 [ 129.549315][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.555247][ T5776] RIP: 0033:0x7ff44139f317 [ 129.559685][ T5776] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 129.579374][ T5776] RSP: 002b:00007ffc36b5e338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 129.587791][ T5776] RAX: 0000000000000000 RBX: 00007ff441434474 RCX: 00007ff44139f317 [ 129.595768][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc36b5e3f0 [ 129.603753][ T5776] RBP: 00007ffc36b5e3f0 R08: 00007ffc36b5f3f0 R09: 00000000ffffffff [ 129.611744][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc36b5f480 [ 129.619742][ T5776] R13: 00007ff441434474 R14: 000000000001f8cb R15: 00007ffc36b5f4c0 [ 129.627744][ T5776] [ 129.630767][ T5776] Modules linked in: [ 129.636937][ T5776] ---[ end trace 0000000000000000 ]--- [ 129.642434][ T5776] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 129.651516][ T5776] Code: 08 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 72 00 08 ff e9 42 fe ff ff e8 18 7e af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 129.671988][ T5776] RSP: 0018:ffffc9000465fa98 EFLAGS: 00010293 [ 129.678119][ T5776] RAX: ffffffff82d7f368 RBX: ffff88802d6fa000 RCX: ffff8880303c3c00 [ 129.686694][ T5776] RDX: 0000000000000000 RSI: ffff88802d6fa000 RDI: ffff88805c392000 [ 129.694799][ T5776] RBP: 0000000000000006 R08: ffff88805c39236b R09: 1ffff1100b87246d [ 129.702855][ T5776] R10: dffffc0000000000 R11: ffffed100b87246e R12: ffff88802d6fa000 [ 129.710957][ T789] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.718747][ T5776] R13: dffffc0000000000 R14: ffff88802d6fa020 R15: ffff88805c392000 [ 129.726982][ T5776] FS: 000055555a20e500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 129.736192][ T5776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.743090][ T5776] CR2: 00007ffc36b5dce0 CR3: 000000006191e000 CR4: 00000000003506e0 [ 129.751235][ T5776] Kernel panic - not syncing: Fatal exception [ 129.757886][ T5776] Kernel Offset: disabled [ 129.762212][ T5776] Rebooting in 86400 seconds..