last executing test programs: 15.74788452s ago: executing program 2 (id=455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r8, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 14.279914038s ago: executing program 2 (id=460): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_io_uring_setup(0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0) 12.412424933s ago: executing program 2 (id=462): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x402) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) pselect6(0x40, &(0x7f00000010c0)={0x3, 0x3, 0x7f, 0x8000000000000000, 0x6e, 0x1000, 0x3, 0x240000000000000}, 0x0, &(0x7f0000001140)={0x8, 0x1, 0x3, 0x6, 0x5, 0x9, 0x8}, &(0x7f0000001180), 0x0) 11.978332186s ago: executing program 2 (id=465): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) ftruncate(r0, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x8400, 0x40, 0x1c}, 0x18) 11.635119301s ago: executing program 2 (id=469): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 7.212367348s ago: executing program 2 (id=488): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x210200, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, &(0x7f0000000000)) 6.429826813s ago: executing program 4 (id=494): socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 5.898231043s ago: executing program 3 (id=495): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x5, 0x4) 5.514445153s ago: executing program 1 (id=496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x140}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000200aefffffff000000000000020000000c00054000000000020000020900010073797a30"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 5.463010393s ago: executing program 4 (id=498): r0 = socket(0x15, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c000000040000701feff"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$unix(r0, &(0x7f00000003c0)=@abs={0xa}, 0x6e) getsockname$llc(r0, 0x0, &(0x7f0000000040)) 5.134425821s ago: executing program 4 (id=499): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000007c0)={0x200000, 0x200000}) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.109479177s ago: executing program 3 (id=500): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 5.073442636s ago: executing program 0 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@rand_addr=0x64010100, 0x4e22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x3, 0x2, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x2, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x3}, 0x1c) r1 = getpid() r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080), 0x4) r3 = socket$packet(0x11, 0x2, 0x300) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aa"], 0x20) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) symlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=ANY=[@ANYBLOB="38010000100063d10000000000000000ff010000000000000000000000000001fe80000000000b0000000000000000aa00080000000000000000000000000000024f7a050f6f5843339b1240f9b225080539c509541bd2d102731c61df36179d751bd2b7472ff37ad8c82e051b5e05f1961bacd26441bb1dd540f1da2cec", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, 0x0) 4.807145306s ago: executing program 3 (id=502): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f00000001c0)=@udp=r1, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 4.750600499s ago: executing program 1 (id=503): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x3) 4.682583653s ago: executing program 4 (id=504): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) 4.025689666s ago: executing program 0 (id=505): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.401916051s ago: executing program 3 (id=506): writev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f00000007c0)}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0xb}, {0x1b, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2.245984216s ago: executing program 0 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x679}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2}, 0x100) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) 1.747457443s ago: executing program 1 (id=508): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000140)="9c91d7798c7f1b4ca046b42f0c3d", 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 1.277698916s ago: executing program 3 (id=509): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0x70b, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1371}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400d1}, 0x8084) 1.030009771s ago: executing program 0 (id=510): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz1\x00', 0x53}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x22) 812.474564ms ago: executing program 1 (id=511): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000400)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000cc0)={{@local, 0x7}, {@hyper}, 0x400, "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"}, 0x418}) 811.604362ms ago: executing program 3 (id=512): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb27", 0x8a}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a950", 0x5c}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681", 0xb0}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 429.965521ms ago: executing program 0 (id=513): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bffff3, 0x12, r0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 429.715768ms ago: executing program 1 (id=514): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local, 0x200001}, @local, 0x8, 0x6, 0x401, 0x80000004, 0x24d, 0x10001, 0x9}) 301.976124ms ago: executing program 4 (id=515): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12161) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 103.224106ms ago: executing program 1 (id=516): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 764.092µs ago: executing program 0 (id=517): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc000000010902"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0xeffc}, &(0x7f0000000080)=0x90) 0s ago: executing program 4 (id=518): r0 = eventfd2(0x8, 0x0) ppoll(&(0x7f0000000500)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r0, &(0x7f0000000480)=""/82, 0x52) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. [ 91.970667][ T821] cfg80211: failed to load regulatory.db [ 93.692297][ T5592] cgroup: Unknown subsys name 'net' [ 93.935187][ T5592] cgroup: Unknown subsys name 'cpuset' [ 93.988682][ T5592] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.968721][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.728997][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.730024][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.731154][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.746247][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.789959][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.790867][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.791436][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.792445][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.794776][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.794919][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.795035][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.795154][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.816205][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.851576][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.886844][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.902976][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.918985][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.925726][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.930448][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.941534][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.947464][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.958264][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.966202][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.974343][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.976945][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.060867][ T5624] Bluetooth: hci4: command tx timeout [ 101.069655][ T5624] Bluetooth: hci1: command tx timeout [ 101.218959][ T5624] Bluetooth: hci2: command tx timeout [ 101.219069][ T5624] Bluetooth: hci3: command tx timeout [ 101.219147][ T5624] Bluetooth: hci0: command tx timeout [ 101.635229][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.635326][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.635455][ T5614] bridge_slave_0: entered allmulticast mode [ 101.644059][ T5614] bridge_slave_0: entered promiscuous mode [ 101.681220][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.681332][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.681709][ T5611] bridge_slave_0: entered allmulticast mode [ 101.683525][ T5611] bridge_slave_0: entered promiscuous mode [ 101.729311][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.729393][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.729525][ T5614] bridge_slave_1: entered allmulticast mode [ 101.731306][ T5614] bridge_slave_1: entered promiscuous mode [ 101.761806][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.762286][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.763167][ T5611] bridge_slave_1: entered allmulticast mode [ 101.772289][ T5611] bridge_slave_1: entered promiscuous mode [ 101.964331][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.964595][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.964796][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.965300][ T5612] bridge_slave_0: entered allmulticast mode [ 101.967156][ T5612] bridge_slave_0: entered promiscuous mode [ 102.006374][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.006621][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.006740][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.007313][ T5613] bridge_slave_0: entered allmulticast mode [ 102.039070][ T5613] bridge_slave_0: entered promiscuous mode [ 102.066828][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.067088][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.067209][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.067545][ T5612] bridge_slave_1: entered allmulticast mode [ 102.076599][ T5612] bridge_slave_1: entered promiscuous mode [ 102.095171][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.095812][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.096117][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.096552][ T5613] bridge_slave_1: entered allmulticast mode [ 102.105021][ T5613] bridge_slave_1: entered promiscuous mode [ 102.126338][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.126755][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.127271][ T5615] bridge_slave_0: entered allmulticast mode [ 102.135435][ T5615] bridge_slave_0: entered promiscuous mode [ 102.224007][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.224128][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.224245][ T5615] bridge_slave_1: entered allmulticast mode [ 102.226105][ T5615] bridge_slave_1: entered promiscuous mode [ 102.325395][ T5614] team0: Port device team_slave_0 added [ 102.334871][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.337161][ T5611] team0: Port device team_slave_0 added [ 102.357300][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.383861][ T5614] team0: Port device team_slave_1 added [ 102.386416][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.391443][ T5611] team0: Port device team_slave_1 added [ 102.402631][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.419240][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.497819][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.581509][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.581522][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.581543][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.584947][ T5612] team0: Port device team_slave_0 added [ 102.585830][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.585844][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.585870][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.602932][ T5613] team0: Port device team_slave_0 added [ 102.683179][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.683232][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.683313][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.703087][ T5612] team0: Port device team_slave_1 added [ 102.713532][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.713576][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.713648][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.735210][ T5613] team0: Port device team_slave_1 added [ 102.753525][ T5615] team0: Port device team_slave_0 added [ 102.836679][ T5615] team0: Port device team_slave_1 added [ 102.894044][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.894058][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.894078][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.896230][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.896241][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.896261][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.996946][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.996959][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.996983][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.046382][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.046395][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.046415][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.047445][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.047457][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.047477][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.138460][ T5624] Bluetooth: hci4: command tx timeout [ 103.138658][ T5618] Bluetooth: hci1: command tx timeout [ 103.298255][ T5624] Bluetooth: hci3: command tx timeout [ 103.298291][ T5624] Bluetooth: hci2: command tx timeout [ 103.298442][ T5618] Bluetooth: hci0: command tx timeout [ 103.525749][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.525762][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.525782][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.566701][ T5614] hsr_slave_0: entered promiscuous mode [ 103.574374][ T5614] hsr_slave_1: entered promiscuous mode [ 103.592182][ T5611] hsr_slave_0: entered promiscuous mode [ 103.593168][ T5611] hsr_slave_1: entered promiscuous mode [ 103.593887][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 103.593971][ T5611] Cannot create hsr debugfs directory [ 103.745068][ T5612] hsr_slave_0: entered promiscuous mode [ 103.746007][ T5612] hsr_slave_1: entered promiscuous mode [ 103.746710][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 103.746727][ T5612] Cannot create hsr debugfs directory [ 103.773643][ T5613] hsr_slave_0: entered promiscuous mode [ 103.774585][ T5613] hsr_slave_1: entered promiscuous mode [ 103.775252][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 103.775269][ T5613] Cannot create hsr debugfs directory [ 103.866146][ T5615] hsr_slave_0: entered promiscuous mode [ 103.867602][ T5615] hsr_slave_1: entered promiscuous mode [ 103.877027][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 103.877100][ T5615] Cannot create hsr debugfs directory [ 104.774665][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.823148][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.841687][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.882552][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.887012][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.932456][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.959914][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.993653][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.122651][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.167914][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.180789][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.218209][ T5618] Bluetooth: hci1: command tx timeout [ 105.218242][ T5618] Bluetooth: hci4: command tx timeout [ 105.222910][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.225989][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.259228][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.287864][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.312946][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.380421][ T5618] Bluetooth: hci0: command tx timeout [ 105.380453][ T5618] Bluetooth: hci2: command tx timeout [ 105.380475][ T5618] Bluetooth: hci3: command tx timeout [ 105.441448][ T5614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.474132][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.493521][ T5614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.533939][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.552579][ T5614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.593905][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.619871][ T5614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.654725][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.814422][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.832176][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.837081][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.863986][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.877342][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.902427][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.957570][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.992781][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.059219][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.157327][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.192425][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.197409][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.252548][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.270802][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.311322][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.329781][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.352082][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.363732][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.435280][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.435439][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.466089][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.530869][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.531022][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.644049][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.688927][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.689077][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.747785][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.767654][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.767778][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.873680][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.922929][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.994976][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.995185][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.047880][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.064585][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.145930][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.205181][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.205287][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.247694][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.297937][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.298197][ T5629] Bluetooth: hci1: command tx timeout [ 107.298225][ T5629] Bluetooth: hci4: command tx timeout [ 107.318200][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.458943][ T5618] Bluetooth: hci3: command tx timeout [ 107.458979][ T5618] Bluetooth: hci2: command tx timeout [ 107.459002][ T5618] Bluetooth: hci0: command tx timeout [ 107.470278][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.554026][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.556574][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.660931][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.661177][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.153810][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.589002][ T5611] veth0_vlan: entered promiscuous mode [ 108.682918][ T5611] veth1_vlan: entered promiscuous mode [ 108.764539][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.902179][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.981851][ T5611] veth0_macvtap: entered promiscuous mode [ 109.056112][ T5611] veth1_macvtap: entered promiscuous mode [ 109.244595][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.247715][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.253801][ T5612] veth0_vlan: entered promiscuous mode [ 109.350385][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.407665][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.423561][ T5612] veth1_vlan: entered promiscuous mode [ 109.441568][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.447461][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.486682][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.540831][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.913299][ T5615] veth0_vlan: entered promiscuous mode [ 109.931892][ T5612] veth0_macvtap: entered promiscuous mode [ 110.015703][ T5612] veth1_macvtap: entered promiscuous mode [ 110.033641][ T5615] veth1_vlan: entered promiscuous mode [ 110.057196][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.057217][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.123998][ T5614] veth0_vlan: entered promiscuous mode [ 110.189512][ T5613] veth0_vlan: entered promiscuous mode [ 110.195548][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.212673][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.212692][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.241373][ T5614] veth1_vlan: entered promiscuous mode [ 110.257230][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.336860][ T5613] veth1_vlan: entered promiscuous mode [ 110.361161][ T1003] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.367771][ T1003] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.406977][ T1003] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.433420][ T1003] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.449755][ T5615] veth0_macvtap: entered promiscuous mode [ 110.527712][ T5615] veth1_macvtap: entered promiscuous mode [ 110.829364][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.857384][ T5614] veth0_macvtap: entered promiscuous mode [ 110.872951][ T5613] veth0_macvtap: entered promiscuous mode [ 110.925506][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.013542][ T5613] veth1_macvtap: entered promiscuous mode [ 111.015590][ T5614] veth1_macvtap: entered promiscuous mode [ 111.046949][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.053725][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.069694][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.074031][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.074049][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.075005][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.251710][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.293596][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.366604][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 111.413076][ T3426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.413096][ T3426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.456766][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.505743][ T5804] ipvlan1: entered promiscuous mode [ 111.507239][ T5804] ipvlan1: left promiscuous mode [ 111.626810][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.896558][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.907925][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.973893][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.997039][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.997571][ T150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.033014][ T150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.085077][ T150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.134195][ T150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.197107][ T3426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.197127][ T3426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.814379][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.814399][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.980997][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.981018][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.050047][ T5812] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8'. [ 113.185071][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.185092][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.385174][ T3426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.385195][ T3426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.545977][ T5817] CUSE: info not properly terminated [ 113.607970][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.608217][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.428804][ T5830] capability: warning: `syz.1.2' uses deprecated v2 capabilities in a way that may be insecure [ 115.276570][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 115.946858][ T5853] batadv0: entered promiscuous mode [ 115.971737][ T5853] macvlan2: entered allmulticast mode [ 115.971780][ T5853] batadv0: entered allmulticast mode [ 115.976445][ T5853] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.001817][ T5853] batadv0: left allmulticast mode [ 116.001907][ T5853] batadv0: left promiscuous mode [ 116.971842][ T5868] netlink: 'syz.1.29': attribute type 2 has an invalid length. [ 117.161269][ T5872] ipvlan2: entered allmulticast mode [ 117.161292][ T5872] syz_tun: entered allmulticast mode [ 118.281760][ T5891] usb usb7: usbfs: process 5891 (syz.2.40) did not claim interface 0 before use [ 119.050533][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.283956][ T5924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.55'. [ 119.286927][ T5924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.55'. [ 120.131991][ T5943] netlink: 3 bytes leftover after parsing attributes in process `syz.0.63'. [ 120.132116][ T5943] netlink: 3 bytes leftover after parsing attributes in process `syz.0.63'. [ 121.402897][ T5974] usb usb8: usbfs: process 5974 (syz.1.79) did not claim interface 0 before use [ 122.122780][ T5988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.376557][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 125.376581][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 125.376608][ T6024] netlink: 'syz.1.99': attribute type 12 has an invalid length. [ 125.429929][ T6022] pim6reg: entered allmulticast mode [ 125.527832][ T5826] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.531917][ T5826] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.532037][ T5826] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.532139][ T5826] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.925824][ T6034] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 125.925824][ T6034] program syz.1.104 not setting count and/or reply_len properly [ 126.302851][ T38] audit: type=1326 audit(1781008442.636:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6040 comm="syz.0.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 126.304245][ T38] audit: type=1326 audit(1781008442.636:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6040 comm="syz.0.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f394e45d68e code=0x7ffc0000 [ 126.304909][ T38] audit: type=1326 audit(1781008442.636:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6040 comm="syz.0.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f394e45d68e code=0x7ffc0000 [ 126.305434][ T38] audit: type=1326 audit(1781008442.636:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6040 comm="syz.0.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 126.306002][ T38] audit: type=1326 audit(1781008442.636:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6040 comm="syz.0.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 127.161817][ T38] audit: type=1326 audit(1781008443.486:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6040 comm="syz.0.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 127.161874][ T38] audit: type=1326 audit(1781008443.486:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6040 comm="syz.0.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 127.161922][ T38] audit: type=1326 audit(1781008443.486:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6040 comm="syz.0.107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 128.343887][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 128.560054][ T821] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 128.825668][ T821] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 128.825876][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 128.825907][ T821] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 128.825951][ T821] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 128.825974][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.916022][ T821] usb 3-1: config 0 descriptor?? [ 128.980181][ T6060] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.272578][ T6089] kernel read not supported for file /!sel (pid: 6089 comm: syz.0.128) [ 129.296508][ T38] audit: type=1800 audit(1781008445.606:10): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.128" name="!sel" dev="mqueue" ino=8900 res=0 errno=0 [ 129.329553][ T821] usbhid 3-1:0.0: can't add hid device: -71 [ 129.329685][ T821] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 129.557379][ T821] usb 3-1: USB disconnect, device number 2 [ 130.265011][ T38] audit: type=1326 audit(1781008446.596:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6114 comm="syz.1.140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc23e44e1d9 code=0x7ffc0000 [ 130.640613][ T6127] netlink: 16114 bytes leftover after parsing attributes in process `syz.4.145'. [ 130.927351][ T6135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.980118][ T6137] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 132.330294][ T6152] netlink: 56 bytes leftover after parsing attributes in process `syz.1.158'. [ 132.330420][ T6152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.158'. [ 132.332686][ T6153] capability: warning: `syz.0.157' uses 32-bit capabilities (legacy support in use) [ 132.594084][ T6153] input: syz0 as /devices/virtual/input/input5 [ 132.930549][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.930644][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.404401][ T6172] Zero length message leads to an empty skb [ 135.188105][ T5800] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 135.581965][ T5800] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 135.581994][ T5800] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 135.582013][ T5800] usb 2-1: config 0 has no interface number 0 [ 135.582058][ T5800] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 135.582087][ T5800] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.582122][ T5800] usb 2-1: config 0 interface 52 has no altsetting 0 [ 135.583439][ T5800] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 135.583467][ T5800] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 135.583489][ T5800] usb 2-1: Manufacturer: syz [ 136.340962][ T5800] usb 2-1: config 0 descriptor?? [ 136.596159][ T5800] hub 2-1:0.52: bad descriptor, ignoring hub [ 136.596201][ T5800] hub 2-1:0.52: probe with driver hub failed with error -5 [ 136.743399][ T6237] netlink: 252 bytes leftover after parsing attributes in process `syz.0.196'. [ 136.785004][ T5800] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input6 [ 136.946846][ T6242] netlink: 104 bytes leftover after parsing attributes in process `syz.4.198'. [ 137.168753][ T6244] macsec1: entered promiscuous mode [ 137.170541][ T6244] macsec1: entered allmulticast mode [ 137.271920][ T5800] usb 2-1: USB disconnect, device number 2 [ 137.907102][ T6261] ======================================================= [ 137.907102][ T6261] WARNING: The mand mount option has been deprecated and [ 137.907102][ T6261] and is ignored by this kernel. Remove the mand [ 137.907102][ T6261] option from the mount to silence this warning. [ 137.907102][ T6261] ======================================================= [ 137.976157][ T6261] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.380533][ T6266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.398948][ T6269] bond1: (slave geneve2): Enslaving as a backup interface with an up link [ 138.480034][ T3293] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 138.640370][ T1175] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 139.295808][ T6297] warning: `syz.0.223' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.884510][ T6315] ipvlan2: entered allmulticast mode [ 139.884531][ T6315] batadv0: entered allmulticast mode [ 139.902174][ T6315] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 140.202622][ T6317] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 141.851941][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 142.067268][ T6339] tipc: Started in network mode [ 142.067291][ T6339] tipc: Node identity , cluster identity 4711 [ 142.235975][ T6347] vivid-000: disconnect [ 142.236654][ T6346] vivid-000: reconnect [ 143.933617][ T38] kauditd_printk_skb: 49 callbacks suppressed [ 143.933637][ T38] audit: type=1326 audit(1781008460.266:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.0.251" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 143.935458][ T38] audit: type=1326 audit(1781008460.266:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.0.251" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 143.937221][ T38] audit: type=1326 audit(1781008460.266:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.0.251" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 143.937651][ T38] audit: type=1326 audit(1781008460.266:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.0.251" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 143.937939][ T38] audit: type=1326 audit(1781008460.266:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.0.251" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 143.977133][ T38] audit: type=1326 audit(1781008460.306:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.0.251" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 143.977279][ T38] audit: type=1326 audit(1781008460.306:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.0.251" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 143.977410][ T38] audit: type=1326 audit(1781008460.306:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.0.251" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394e49ce59 code=0x7ffc0000 [ 145.318217][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 145.481060][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.481096][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.481138][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 145.481163][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.663521][ T9] usb 4-1: config 0 descriptor?? [ 145.746214][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 146.110529][ T9] hid (null): invalid report_size 57649 [ 146.261384][ T822] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 146.280106][ T6344] syz.1.244 (6344): drop_caches: 1 [ 146.378842][ T9] usb 4-1: string descriptor 0 read error: -71 [ 146.379396][ T9] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 146.379442][ T9] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 146.379455][ T9] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 146.379528][ T9] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 146.379617][ T9] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 146.445715][ T9] usb 4-1: USB disconnect, device number 2 [ 146.482787][ T822] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 146.482827][ T822] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.482846][ T822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.482870][ T822] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 146.482887][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.573833][ T822] usb 3-1: config 0 descriptor?? [ 146.583675][ T6396] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 147.033043][ T822] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 147.033087][ T822] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 147.033114][ T822] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 147.033142][ T822] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 147.033169][ T822] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 147.033196][ T822] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 147.033223][ T822] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 147.033249][ T822] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 147.033275][ T822] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 147.033302][ T822] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 147.047723][ T822] samsung 0003:0419:0001.0002: hidraw0: USB HID v0.04 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 147.181903][ T6411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.273'. [ 147.286359][ T822] usb 3-1: USB disconnect, device number 3 [ 147.287081][ T6414] overlay: Unknown parameter '\' [ 147.716767][ T6412] fido_id[6412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 148.070633][ T38] audit: type=1326 audit(1781008464.416:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6425 comm="syz.4.281" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106293ce59 code=0x7ffc0000 [ 148.071104][ T38] audit: type=1326 audit(1781008464.416:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6425 comm="syz.4.281" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f106293ce59 code=0x7ffc0000 [ 148.450999][ T6432] netlink: 'syz.2.282': attribute type 2 has an invalid length. [ 148.735480][ T6436] netlink: 'syz.1.280': attribute type 3 has an invalid length. [ 149.748090][ T5799] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 149.878153][ T5799] usb 2-1: device descriptor read/64, error -71 [ 150.424138][ T6447] bond0: entered promiscuous mode [ 150.424219][ T6447] bond_slave_0: entered promiscuous mode [ 150.431441][ T6447] bond_slave_1: entered promiscuous mode [ 150.613592][ T6447] batadv_slave_0: entered promiscuous mode [ 150.661710][ T5799] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 150.740348][ T6447] batadv_slave_0: left promiscuous mode [ 150.798208][ T5799] usb 2-1: device descriptor read/64, error -71 [ 150.907916][ T6447] bond0: left promiscuous mode [ 150.907940][ T6447] bond_slave_0: left promiscuous mode [ 150.908430][ T6447] bond_slave_1: left promiscuous mode [ 150.935496][ T5799] usb usb2-port1: attempt power cycle [ 151.283183][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.290'. [ 151.627948][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.295'. [ 151.924577][ T6472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.298'. [ 152.183761][ T6480] mmap: syz.4.303 (6480) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 152.394812][ T6486] netlink: 88 bytes leftover after parsing attributes in process `syz.2.306'. [ 152.557742][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 153.318163][ T5799] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.428206][ T37] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 153.471638][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.471674][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.471697][ T5799] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.471740][ T5799] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 153.471765][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.542638][ T5799] usb 2-1: config 0 descriptor?? [ 153.648158][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 153.665662][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 153.665731][ T37] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 153.665762][ T37] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 153.665778][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.804269][ T37] usb 1-1: config 0 descriptor?? [ 153.805861][ T6509] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 154.087416][ T6524] netlink: 'syz.2.323': attribute type 11 has an invalid length. [ 154.087452][ T6524] netlink: 56 bytes leftover after parsing attributes in process `syz.2.323'. [ 154.149130][ T5799] hid_parser_main: 30 callbacks suppressed [ 154.149279][ T5799] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 154.149373][ T5799] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 154.149401][ T5799] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 154.149426][ T5799] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 154.149451][ T5799] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 154.149476][ T5799] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 154.149554][ T5799] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 154.149581][ T5799] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 154.149607][ T5799] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 154.149632][ T5799] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 154.292501][ T5799] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 154.311966][ T37] stadia 0003:18D1:9400.0004: unexpected long global item [ 154.312710][ T37] stadia 0003:18D1:9400.0004: parse failed [ 154.312784][ T37] stadia 0003:18D1:9400.0004: probe with driver stadia failed with error -22 [ 154.368656][ T5799] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device [ 154.368714][ T5799] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse [ 154.443863][ T5799] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -71 [ 154.462495][ T5799] usb 2-1: USB disconnect, device number 6 [ 154.508946][ T37] usb 1-1: USB disconnect, device number 2 [ 154.523205][ T6525] fido_id[6525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 155.021518][ T6537] sock: sock_set_timeout: `syz.4.328' (pid 6537) tries to set negative timeout [ 155.441022][ T6545] netlink: 'syz.0.331': attribute type 2 has an invalid length. [ 156.489709][ T6563] tun0: tun_chr_ioctl cmd 1074025677 [ 156.489906][ T6563] tun0: linktype set to 8 [ 159.349509][ T5711] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.508250][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 159.513121][ T5711] usb 2-1: config 0 has no interfaces? [ 159.513157][ T5711] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 159.513180][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.605599][ T5711] usb 2-1: config 0 descriptor?? [ 159.904453][ T5711] usb 2-1: USB disconnect, device number 7 [ 161.701149][ T6642] IPVS: persistence engine module ip_vs_pe_À not found [ 162.146550][ T6658] program syz.4.378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.627531][ T6670] netlink: 132 bytes leftover after parsing attributes in process `syz.1.384'. [ 162.627581][ T6670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'. [ 162.899396][ T6672] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 164.167626][ T6683] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 164.171335][ T6683] netlink: 'syz.3.390': attribute type 2 has an invalid length. [ 164.171353][ T6683] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 166.595844][ T822] kernel write not supported for file /video36 (pid: 822 comm: kworker/0:2) [ 166.608554][ T6716] vivid-007: ================= START STATUS ================= [ 166.608592][ T6716] vivid-007: Enable Output Cropping: true grabbed [ 166.608635][ T6716] vivid-007: Enable Output Composing: true grabbed [ 166.608660][ T6716] vivid-007: Enable Output Scaler: true grabbed [ 166.608685][ T6716] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 166.608711][ T6716] vivid-007: Transmit Mode: HDMI grabbed [ 166.608735][ T6716] vivid-007: Hotplug Present: 0x00000000 [ 166.608754][ T6716] vivid-007: RxSense Present: 0x00000000 [ 166.608774][ T6716] vivid-007: EDID Present: 0x00000000 [ 166.608793][ T6716] vivid-007: ================== END STATUS ================== [ 167.348130][ T5711] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 167.401526][ T6739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.412'. [ 167.401801][ T6739] netem: invalid attributes len -8 [ 167.401817][ T6739] netem: change failed [ 167.508162][ T5711] usb 4-1: Using ep0 maxpacket: 32 [ 167.513541][ T5711] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 167.513569][ T5711] usb 4-1: config 0 has no interface number 0 [ 167.516680][ T5711] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 167.516699][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.516713][ T5711] usb 4-1: Product: syz [ 167.516724][ T5711] usb 4-1: Manufacturer: syz [ 167.516734][ T5711] usb 4-1: SerialNumber: syz [ 167.584221][ T5711] usb 4-1: config 0 descriptor?? [ 167.606044][ T5711] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 167.912897][ T5711] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 167.995021][ T5711] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 168.000395][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 124 [ 168.207600][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 168.241497][ T822] usb 4-1: USB disconnect, device number 3 [ 168.410078][ T822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 168.469603][ T822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 168.471302][ T822] quatech2 4-1:0.51: device disconnected [ 170.748092][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 170.834416][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 170.958185][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 170.960634][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.960690][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 170.960715][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.965826][ T31] usb 5-1: config 0 descriptor?? [ 171.020128][ T31] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 171.798598][ T31] gspca_vc032x: reg_w err -71 [ 171.798685][ T31] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 171.859113][ T31] usb 5-1: USB disconnect, device number 2 [ 172.641167][ T6814] netlink: 204 bytes leftover after parsing attributes in process `syz.4.446'. [ 172.850768][ T6822] netlink: 232 bytes leftover after parsing attributes in process `syz.3.449'. [ 172.850796][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 173.185524][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 173.803535][ T6841] netlink: 72 bytes leftover after parsing attributes in process `syz.1.456'. [ 174.595614][ T9] IPVS: starting estimator thread 0... [ 174.888201][ T6838] IPVS: using max 7 ests per chain, 16800 per kthread [ 175.392842][ T6845] netlink: 'syz.3.457': attribute type 61 has an invalid length. [ 175.392869][ T6845] netlink: 392 bytes leftover after parsing attributes in process `syz.3.457'. [ 176.528118][ T821] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 176.678148][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 176.682096][ T821] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 176.682125][ T821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.682156][ T821] usb 1-1: config 0 has no interface number 0 [ 176.685803][ T821] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 176.685832][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.685853][ T821] usb 1-1: Product: syz [ 176.685868][ T821] usb 1-1: Manufacturer: syz [ 176.685884][ T821] usb 1-1: SerialNumber: syz [ 176.759645][ T821] usb 1-1: config 0 descriptor?? [ 176.785054][ T821] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 177.031085][ T9] usb 1-1: USB disconnect, device number 3 [ 177.589866][ T5835] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 177.686760][ T6876] netlink: 72 bytes leftover after parsing attributes in process `syz.4.470'. [ 178.082622][ T821] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 178.481079][ T821] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.481111][ T821] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 178.481136][ T821] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.485635][ T821] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 178.485665][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 178.485687][ T821] usb 3-1: Product: syz [ 178.485703][ T821] usb 3-1: Manufacturer: syz [ 178.485718][ T821] usb 3-1: SerialNumber: syz [ 178.833294][ T821] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 179.070156][ T37] usb 3-1: USB disconnect, device number 4 [ 179.428179][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 179.433689][ T5835] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 179.433722][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.433743][ T5835] usb 4-1: Product: syz [ 179.433758][ T5835] usb 4-1: Manufacturer: syz [ 179.433774][ T5835] usb 4-1: SerialNumber: syz [ 179.672320][ T6871] usblp0: removed [ 179.844770][ T5835] usb 4-1: config 0 descriptor?? [ 179.871770][ T5835] gspca_main: sq930x-2.14.0 probing 2770:930c [ 180.345103][ T6888] syz.1.475 uses obsolete (PF_INET,SOCK_PACKET) [ 180.718951][ T5835] gspca_sq930x: ucbus_write failed -71 [ 180.938204][ T5835] gspca_sq930x: Sensor ov9630 not yet treated [ 180.938306][ T5835] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 180.999503][ T5835] usb 4-1: USB disconnect, device number 4 [ 182.497806][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.527042][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.537010][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.549443][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.550654][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.915547][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.916303][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.916443][ T6922] bridge_slave_0: entered allmulticast mode [ 183.941117][ T6922] bridge_slave_0: entered promiscuous mode [ 183.943845][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.943986][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.944284][ T6922] bridge_slave_1: entered allmulticast mode [ 183.946164][ T6922] bridge_slave_1: entered promiscuous mode [ 184.293173][ T6963] netlink: 72 bytes leftover after parsing attributes in process `syz.0.501'. [ 184.865094][ T6922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.879396][ T6922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.958599][ T6922] team0: Port device team_slave_0 added [ 184.962455][ T6922] team0: Port device team_slave_1 added [ 185.025069][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.025088][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.025116][ T6922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.027867][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.081415][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.081450][ T6922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.289632][ T6922] hsr_slave_0: entered promiscuous mode [ 185.291139][ T6922] hsr_slave_1: entered promiscuous mode [ 185.292122][ T6922] debugfs: 'hsr0' already exists in 'hsr' [ 185.292148][ T6922] Cannot create hsr debugfs directory [ 185.708229][ T5629] Bluetooth: hci0: command tx timeout [ 186.663852][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 186.798094][ T5835] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 186.961938][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.961972][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.962012][ T5835] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 186.962035][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.028412][ T5835] usb 5-1: config 0 descriptor?? [ 187.125075][ T6922] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.486296][ T5835] hid_parser_main: 281 callbacks suppressed [ 187.486321][ T5835] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 187.486352][ T5835] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 187.486377][ T5835] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 187.486404][ T5835] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 187.486447][ T5835] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 187.488136][ T5835] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 187.488175][ T5835] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 187.592724][ T5835] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 187.742622][ T5835] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 187.779224][ T6922] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.780859][ T5629] Bluetooth: hci0: command tx timeout [ 187.951270][ T5835] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 188.024785][ T5835] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 188.081083][ T5835] usb 5-1: USB disconnect, device number 3 [ 188.152581][ T6986] input: syz1 as /devices/virtual/input/input7 [ 188.274865][ T6922] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.693631][ T6922] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.258343][ T822] 1024-page vmalloc region starting at 0xffffc90006871000 allocated at kcov_ioctl+0x58/0x640 [ 189.258408][ T822] list_del corruption. next->prev should be ffffc9001b720000, but was 0000000000000000. (next=ffffc90006871000) [ 189.260164][ T822] ------------[ cut here ]------------ [ 189.260172][ T822] kernel BUG at lib/list_debug.c:67! [ 189.265795][ T822] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 189.265836][ T822] CPU: 0 UID: 0 PID: 822 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.265859][ T822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.265878][ T822] Workqueue: usb_hub_wq hub_event [ 189.265917][ T822] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 189.265950][ T822] Code: 0c 9a 5f fd 43 80 3c 2c 00 74 08 4c 89 ff e8 8d ae 7f fd 49 8b 56 08 48 c7 c7 20 62 a7 8b 48 89 de 4c 89 f1 e8 27 68 7b fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 189.265969][ T822] RSP: 0018:ffffc90005077798 EFLAGS: 00010246 [ 189.265986][ T822] RAX: 000000000000006d RBX: ffffc9001b720000 RCX: 0c212104272c6c00 [ 189.266003][ T822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.266015][ T822] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 189.266028][ T822] R10: dffffc0000000000 R11: ffffed1017104923 R12: 1ffff92000d0e201 [ 189.266045][ T822] R13: dffffc0000000000 R14: ffffc90006871000 R15: ffffc90006871008 [ 189.266062][ T822] FS: 0000000000000000(0000) GS:ffff888126187000(0000) knlGS:0000000000000000 [ 189.266080][ T822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.266095][ T822] CR2: 00007f10629ef156 CR3: 0000000038704000 CR4: 00000000003526f0 [ 189.266113][ T822] Call Trace: [ 189.266120][ T822] [ 189.266131][ T822] kcov_remote_start+0x2af/0x710 [ 189.266162][ T822] hub_event+0x150/0x4f60 [ 189.266198][ T822] ? __lock_acquire+0x6b5/0x2cf0 [ 189.266225][ T822] ? look_up_lock_class+0x57/0x110 [ 189.266261][ T822] ? __lock_acquire+0x6b5/0x2cf0 [ 189.266297][ T822] ? lock_acquire+0x106/0x350 [ 189.266326][ T822] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 189.266351][ T822] ? __pfx_hub_event+0x10/0x10 [ 189.266382][ T822] ? process_scheduled_works+0xa70/0x1860 [ 189.266408][ T822] ? process_scheduled_works+0xa70/0x1860 [ 189.266431][ T822] ? process_scheduled_works+0xa70/0x1860 [ 189.266453][ T822] process_scheduled_works+0xb5d/0x1860 [ 189.266491][ T822] ? __pfx_process_scheduled_works+0x10/0x10 [ 189.266518][ T822] ? assign_work+0x3d5/0x5e0 [ 189.266541][ T822] worker_thread+0xa53/0xfc0 [ 189.266584][ T822] kthread+0x388/0x470 [ 189.266618][ T822] ? __pfx_worker_thread+0x10/0x10 [ 189.266639][ T822] ? __pfx_kthread+0x10/0x10 [ 189.266667][ T822] ret_from_fork+0x514/0xb70 [ 189.266693][ T822] ? __pfx_ret_from_fork+0x10/0x10 [ 189.266716][ T822] ? __switch_to+0xc79/0x1410 [ 189.266747][ T822] ? __pfx_kthread+0x10/0x10 [ 189.266777][ T822] ret_from_fork_asm+0x1a/0x30 [ 189.266811][ T822] [ 189.266818][ T822] Modules linked in: [ 189.266857][ T822] ---[ end trace 0000000000000000 ]--- [ 189.267006][ T822] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 189.267037][ T822] Code: 0c 9a 5f fd 43 80 3c 2c 00 74 08 4c 89 ff e8 8d ae 7f fd 49 8b 56 08 48 c7 c7 20 62 a7 8b 48 89 de 4c 89 f1 e8 27 68 7b fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 189.267053][ T822] RSP: 0018:ffffc90005077798 EFLAGS: 00010246 [ 189.267069][ T822] RAX: 000000000000006d RBX: ffffc9001b720000 RCX: 0c212104272c6c00 [ 189.267085][ T822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.267098][ T822] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 189.267112][ T822] R10: dffffc0000000000 R11: ffffed1017104923 R12: 1ffff92000d0e201 [ 189.267128][ T822] R13: dffffc0000000000 R14: ffffc90006871000 R15: ffffc90006871008 [ 189.267159][ T822] FS: 0000000000000000(0000) GS:ffff888126187000(0000) knlGS:0000000000000000 [ 189.267178][ T822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.267192][ T822] CR2: 00007f10629ef156 CR3: 0000000037b80000 CR4: 00000000003526f0 [ 189.267212][ T822] Kernel panic - not syncing: Fatal exception [ 189.267809][ T822] Kernel Offset: disabled