last executing test programs: 11.139377281s ago: executing program 0 (id=81): syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x10b701) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x28) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r0, &(0x7f0000000000)='L', 0x1, 0x7ffffffa) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 10.07684998s ago: executing program 4 (id=85): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) open(&(0x7f0000000180)='./bus\x00', 0x8517e, 0x8b) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x84880) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000340), 0xffff7fff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x205f41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec300059191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 9.468100952s ago: executing program 4 (id=86): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) recvfrom$inet(r1, &(0x7f0000000100)=""/11, 0xb, 0xc9100120, 0x0, 0x0) 9.449171414s ago: executing program 0 (id=87): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @loopback, 0x77f, 0xffffffff}, 0x20) 9.123789856s ago: executing program 0 (id=89): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) r1 = timerfd_create(0x0, 0x0) read(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1}}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20004040) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) sendmsg$rds(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0xc0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0xe, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0xfe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x4000}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x7000000}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x4, 0x0, 0x3}}, 0x2e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) 8.884597582s ago: executing program 2 (id=90): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), 0x0, 0x0, 0x3a, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 8.066060714s ago: executing program 4 (id=91): openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @rand_addr=0x64010181}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x101b}) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0xe0}, {&(0x7f0000000340)='[', 0x1}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x23, 0x200000b, r2}}], 0x20, 0x404a055}, 0x0) 8.036649552s ago: executing program 1 (id=92): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x73622a85, 0x1100, 0x3}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 6.811453609s ago: executing program 0 (id=94): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f00000000c0)="ba694655361a99542ba4585ef08520e8bfffff002100005f79bb", 0x1a}], 0x2}}], 0x1, 0x64008800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 6.659354122s ago: executing program 2 (id=95): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00"], 0x1c}, 0x1, 0x0, 0x0, 0x40009060}, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x9, 0x7f, 0x8000, 0x4, "42341f00"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 6.62675267s ago: executing program 1 (id=96): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) open(&(0x7f0000000180)='./bus\x00', 0x8517e, 0x8b) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x84880) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x4009, 0x801) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x205f41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 6.578552907s ago: executing program 3 (id=97): syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x10b701) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x28) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r0, &(0x7f0000000000)='L', 0x1, 0x7ffffffa) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 6.489636062s ago: executing program 0 (id=98): unshare(0x2c020400) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902"], 0x0) unshare(0x8000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$inet_sctp(0x2, 0x3, 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009050da203002a000009050502000000000009058b"], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) clock_gettime(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xd1, 0x8e, &(0x7f0000000600)="f8fd52f4a8aba018f772f1707050149cdce377bd77dae16b1bb8661b6c6534f642a357570b294e496202835ab347b5e3dbbe81703b0f79505a182faf1d1fd0c9b883ba8937f5560cfe53e36594662520270ad29982e07e2b668e6139b8ca07790347f42668db1c7e2957aa83802c3250f835abc3d79eae6c596c44ca55ea92baa7db1341ccf952d060b1ec26f882ec3a349f98b0468bedf3117f8cbe523dbbdc529e3ed0f8d1ab822099ae97a41e82764b5593b1bc5595fad624e80de61c50377c888335d9940ab89be392f8f609fbaa9b", &(0x7f0000000700)=""/142, 0x5, 0x0, 0x44, 0x58, &(0x7f00000007c0)="a77f6326dff04a4a2a8f292b97b0d1527efc4acffacffc52960ed18234815cb32230432e52039d86c3e54cc7b07cd04501ec44005c132e9cbfa3de2454c6aa4485201a52", &(0x7f0000000840)="0c780a3e2c784c73b69ea51f0ce08c9571df0be6eb416e4793a9c147ab4fdd10c6fd0554414c4ecc00eecfbea2887cb2d625fdbdd54a9dcc4adefb76719c842292c5c356fd2b9794466a1853357294d575aed81f6bc0b294", 0x4, 0x0, 0x8}, 0x4c) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) close_range(r1, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103200009"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.280137846s ago: executing program 1 (id=99): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x8, 0x0, 0x0) 6.00160702s ago: executing program 4 (id=100): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000010000000cd0000000000000095"], 0x0}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x9, 0x1ff, 0x7d, 0x0, 0x8000, 0xffffffffffffffb6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.858781264s ago: executing program 1 (id=101): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x9, 0xfff, &(0x7f0000001840)=""/4095, 0x40f00, 0x64}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/203, 0xcb}], 0x1, 0x93, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r3, 0x0, 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) r4 = syz_open_dev$usbmon(0x0, 0xa, 0x0) ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffc9b}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0xec, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4e22, 0x0, 0x4e23, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in=@remote, {0x0, 0x0, 0x8, 0xa, 0x6, 0xfffffffffffffffd, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) bind$tipc(r3, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x1}}, 0x10) socket$kcm(0x29, 0x6, 0x0) 5.070629109s ago: executing program 3 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x101) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchownat(r3, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x2020) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x800, 0x1, "80"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r5, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x80000001, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) 3.212208679s ago: executing program 3 (id=103): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000300010001", 0x7) 3.175047122s ago: executing program 4 (id=104): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) r1 = timerfd_create(0x0, 0x0) read(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1}}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20004040) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) sendmsg$rds(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0xc0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0xe, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0xfe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x4000}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x7000000}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x4, 0x0, 0x3}}, 0x2e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) 3.100540987s ago: executing program 2 (id=105): r0 = dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48043) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 1.975365602s ago: executing program 3 (id=106): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000580)={0x110, 0x0, 0x403, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0xf}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x10, 0x7f, [@cf={0x4, 0x6, {0xcd, 0x6, 0x5, 0x8}}, @ibss={0x6, 0x2}]}, @NL80211_ATTR_FTM_RESPONDER={0x6c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5d, 0x2, "f03026d3e0a7ad25f980a8e1ed015dc5bbe01570237bf9ff75416e9b41fe62a49d04aa01362cfd18e8805bf90c9ae77fe026e4140c8736b8dead311bbd7f2bde04696e56c4895d8cc115b27e9f2cebf3a81c16b5a04e23a067"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x9, 0x80, [@random={0x8, 0x3, "70d285"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1b, 0x7f, [@rann={0x7e, 0x15, {{0x0, 0x9}, 0x8a, 0xcf, @device_a, 0x8, 0x4, 0x23b4}}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x8b, 0x9b17}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_HE_OBSS_PD={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0x110}, 0x1, 0x0, 0x0, 0x280c0}, 0x8800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.236893898s ago: executing program 2 (id=107): epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 1.154214009s ago: executing program 4 (id=108): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000001c0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x19, 0x2, "afab"}, 0x0, 0x0, 0x0, 0x0}) 865.176441ms ago: executing program 3 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac05, 0xfac06]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) 861.875245ms ago: executing program 1 (id=110): openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb200400a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x8}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x101b}) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0xe0}, {&(0x7f0000000340)='[', 0x1}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x23, 0x200000b, r2}}], 0x20, 0x404a055}, 0x0) 731.216918ms ago: executing program 2 (id=111): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000780)={0x1, 0x0, [{0x400000f5, 0x0, 0x200000000005}]}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r3, 0x0, r4, 0x0, 0x7c1d, 0x8) unshare(0x20000400) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x8, 0x0, 0x0) 563.906958ms ago: executing program 3 (id=112): syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x10b701) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x28) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r0, &(0x7f0000000000)='L', 0x1, 0x7ffffffa) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 554.818765ms ago: executing program 1 (id=113): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x48c, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x3c4, 0x2e0, 0x2e0, 0x3c4, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x0, 0x0, 0x4}, {0xfffe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006) setsockopt$sock_int(r6, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r6, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 422.137947ms ago: executing program 0 (id=114): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000000000010000000cd0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x9, 0x1ff, 0x7d, 0x0, 0x8000, 0xffffffffffffffb6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=115): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003cca49ac6a76fb38fa1180cb7f23ff000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af00", 0x8e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 77.681938][ T5591] cgroup: Unknown subsys name 'net' [ 77.922445][ T5591] cgroup: Unknown subsys name 'cpuset' [ 77.998371][ T5591] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.643550][ T5591] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.102630][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.114332][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.122493][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.146606][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.147713][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.177589][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.188419][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.196214][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.210264][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.220323][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.229453][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.237189][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.244683][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.246257][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.246567][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.247325][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.249767][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.262359][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.263319][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.272718][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.273090][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.283645][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.285353][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.298119][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.306249][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.349367][ T4919] Bluetooth: hci4: command tx timeout [ 84.349372][ T5611] Bluetooth: hci1: command tx timeout [ 84.427943][ T4919] Bluetooth: hci3: command tx timeout [ 84.427950][ T5614] Bluetooth: hci0: command tx timeout [ 84.428140][ T5611] Bluetooth: hci2: command tx timeout [ 84.562360][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.563074][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.563177][ T5608] bridge_slave_0: entered allmulticast mode [ 84.564949][ T5608] bridge_slave_0: entered promiscuous mode [ 84.623049][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.623112][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.623201][ T5608] bridge_slave_1: entered allmulticast mode [ 84.624526][ T5608] bridge_slave_1: entered promiscuous mode [ 84.664684][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.664802][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.664892][ T5607] bridge_slave_0: entered allmulticast mode [ 84.666244][ T5607] bridge_slave_0: entered promiscuous mode [ 84.698671][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.698745][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.698839][ T5606] bridge_slave_0: entered allmulticast mode [ 84.700178][ T5606] bridge_slave_0: entered promiscuous mode [ 84.702025][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.702132][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.702267][ T5605] bridge_slave_0: entered allmulticast mode [ 84.704058][ T5605] bridge_slave_0: entered promiscuous mode [ 84.725249][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.725367][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.725506][ T5607] bridge_slave_1: entered allmulticast mode [ 84.728540][ T5607] bridge_slave_1: entered promiscuous mode [ 84.751936][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.752064][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.752563][ T5606] bridge_slave_1: entered allmulticast mode [ 84.759704][ T5606] bridge_slave_1: entered promiscuous mode [ 84.761104][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.761210][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.761641][ T5605] bridge_slave_1: entered allmulticast mode [ 84.766051][ T5605] bridge_slave_1: entered promiscuous mode [ 84.805878][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.878416][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.940825][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.961994][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.965797][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.966017][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.966210][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.966355][ T5604] bridge_slave_0: entered allmulticast mode [ 84.968637][ T5604] bridge_slave_0: entered promiscuous mode [ 84.975666][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.001250][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.011975][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.012199][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.012545][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.012685][ T5604] bridge_slave_1: entered allmulticast mode [ 85.014980][ T5604] bridge_slave_1: entered promiscuous mode [ 85.270954][ T5608] team0: Port device team_slave_0 added [ 85.319671][ T5608] team0: Port device team_slave_1 added [ 85.356983][ T5607] team0: Port device team_slave_0 added [ 85.376129][ T5606] team0: Port device team_slave_0 added [ 85.380055][ T5605] team0: Port device team_slave_0 added [ 85.386328][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.398673][ T5607] team0: Port device team_slave_1 added [ 85.424835][ T5606] team0: Port device team_slave_1 added [ 85.426698][ T5605] team0: Port device team_slave_1 added [ 85.430700][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.450751][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.450760][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.450773][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.515825][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.515840][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.515861][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.570414][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.570428][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.570449][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.582038][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.582050][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.582073][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.585490][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.585502][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.585523][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.591660][ T5604] team0: Port device team_slave_0 added [ 85.593632][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.593643][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.593665][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.596653][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.596664][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.596686][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.602855][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.602867][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.602888][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.606088][ T5604] team0: Port device team_slave_1 added [ 85.743114][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.743129][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.743150][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.802391][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.802406][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.802428][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.814354][ T5608] hsr_slave_0: entered promiscuous mode [ 85.815857][ T5608] hsr_slave_1: entered promiscuous mode [ 85.905357][ T5605] hsr_slave_0: entered promiscuous mode [ 85.906591][ T5605] hsr_slave_1: entered promiscuous mode [ 85.907538][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 85.907642][ T5605] Cannot create hsr debugfs directory [ 85.919634][ T5606] hsr_slave_0: entered promiscuous mode [ 85.920899][ T5606] hsr_slave_1: entered promiscuous mode [ 85.921713][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 85.921732][ T5606] Cannot create hsr debugfs directory [ 85.932094][ T5607] hsr_slave_0: entered promiscuous mode [ 85.935313][ T5607] hsr_slave_1: entered promiscuous mode [ 85.936210][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 85.936229][ T5607] Cannot create hsr debugfs directory [ 86.081018][ T5604] hsr_slave_0: entered promiscuous mode [ 86.081789][ T5604] hsr_slave_1: entered promiscuous mode [ 86.082263][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 86.082282][ T5604] Cannot create hsr debugfs directory [ 86.427959][ T5611] Bluetooth: hci1: command tx timeout [ 86.427989][ T5611] Bluetooth: hci4: command tx timeout [ 86.509137][ T5611] Bluetooth: hci2: command tx timeout [ 86.509167][ T5611] Bluetooth: hci3: command tx timeout [ 86.509281][ T5614] Bluetooth: hci0: command tx timeout [ 86.703187][ T1586] cfg80211: failed to load regulatory.db [ 87.099924][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.139016][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.143959][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.171889][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.176430][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.217683][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.238276][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.273758][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.397308][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.432926][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.446340][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.462308][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.464860][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.501792][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.525722][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.561057][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.672760][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.711689][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.731846][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.760454][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.780402][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.811297][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.833413][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.860972][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.020393][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.050984][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.057194][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.083106][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.090176][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.113795][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.150426][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.156027][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.174652][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.275053][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.279508][ T5604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.320253][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.324825][ T5604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.361550][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.376616][ T5604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.402953][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.415904][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.441587][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.452073][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.452233][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.501724][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.501843][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.508546][ T5614] Bluetooth: hci1: command tx timeout [ 88.508570][ T5614] Bluetooth: hci4: command tx timeout [ 88.541220][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.588310][ T4919] Bluetooth: hci0: command tx timeout [ 88.588337][ T4919] Bluetooth: hci3: command tx timeout [ 88.597937][ T5614] Bluetooth: hci2: command tx timeout [ 88.648108][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.679267][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.679400][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.682798][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.732970][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.733042][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.819533][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.892175][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.892369][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.938747][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.959113][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.959233][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.070136][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.116127][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.127373][ T1390] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.127501][ T1390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.185535][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.185703][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.275813][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.386214][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.386697][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.493709][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.493838][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.841932][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.114094][ T5608] veth0_vlan: entered promiscuous mode [ 90.198599][ T5608] veth1_vlan: entered promiscuous mode [ 90.355517][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.432629][ T5608] veth0_macvtap: entered promiscuous mode [ 90.472540][ T5608] veth1_macvtap: entered promiscuous mode [ 90.545078][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.588156][ T5614] Bluetooth: hci4: command tx timeout [ 90.588185][ T5614] Bluetooth: hci1: command tx timeout [ 90.591681][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.668089][ T4919] Bluetooth: hci2: command tx timeout [ 90.668118][ T4919] Bluetooth: hci3: command tx timeout [ 90.668136][ T4919] Bluetooth: hci0: command tx timeout [ 90.674788][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.823198][ T124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.833912][ T5605] veth0_vlan: entered promiscuous mode [ 90.856188][ T124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.863085][ T124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.881741][ T124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.023096][ T5605] veth1_vlan: entered promiscuous mode [ 91.105981][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.147467][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.353233][ T1411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.353254][ T1411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.390110][ T5605] veth0_macvtap: entered promiscuous mode [ 91.435251][ T5605] veth1_macvtap: entered promiscuous mode [ 91.473638][ T5607] veth0_vlan: entered promiscuous mode [ 91.487387][ T1411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.487404][ T1411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.490226][ T5604] veth0_vlan: entered promiscuous mode [ 91.557456][ T5606] veth0_vlan: entered promiscuous mode [ 91.577232][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.586770][ T5607] veth1_vlan: entered promiscuous mode [ 91.614898][ T5604] veth1_vlan: entered promiscuous mode [ 91.635765][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.653700][ T5606] veth1_vlan: entered promiscuous mode [ 91.674268][ T146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.675962][ T146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.684911][ T146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.698567][ T146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.000713][ T5607] veth0_macvtap: entered promiscuous mode [ 92.048080][ T5604] veth0_macvtap: entered promiscuous mode [ 92.068043][ T5607] veth1_macvtap: entered promiscuous mode [ 92.083726][ T5606] veth0_macvtap: entered promiscuous mode [ 92.107415][ T5604] veth1_macvtap: entered promiscuous mode [ 92.125565][ T5606] veth1_macvtap: entered promiscuous mode [ 92.143598][ T1411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.143615][ T1411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.258440][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.325737][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.332279][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.346344][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.387729][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.396267][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.409900][ T156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.413329][ T156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.413405][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.413417][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.417201][ T156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.452489][ T156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.463462][ T156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.479839][ T156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.490398][ T156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.491583][ T156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.492228][ T156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.492262][ T156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.492292][ T156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.492323][ T156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.613188][ T1411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.613206][ T1411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.172618][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.172636][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.307990][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.308008][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.655254][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.655271][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.806090][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.806107][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.946350][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.946369][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.935723][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.298479][ T31] usb 3-1: device descriptor read/64, error -71 [ 97.167998][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.340114][ T31] usb 3-1: device descriptor read/64, error -71 [ 97.388865][ T5593] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.463196][ T31] usb usb3-port1: attempt power cycle [ 97.551339][ T5593] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.552700][ T5593] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.555039][ T5593] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.555094][ T5593] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 97.555115][ T5593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.638273][ T5593] usb 1-1: config 0 descriptor?? [ 98.846942][ T5593] rndis_host 1-1:0.0: rndis: master #0/ffff88806444a000 slave #1/0000000000000000 [ 99.838140][ T824] usb 1-1: USB disconnect, device number 2 [ 101.267913][ T1586] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.430684][ T5873] usb usb1: usbfs: process 5873 (syz.0.17) did not claim interface 63 before use [ 101.435338][ T1586] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 101.435362][ T1586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.584654][ T1586] usb 5-1: config 0 descriptor?? [ 101.747440][ T1586] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 101.839565][ T5872] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.318343][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.327753][ T1586] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 102.378093][ T5887] binder: BINDER_SET_CONTEXT_MGR already set [ 102.378105][ T5887] binder: 5886:5887 ioctl 4018620d 200000000040 returned -16 [ 102.409305][ T36] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.476921][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.476974][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 102.476994][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.477017][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 102.477039][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 102.477057][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 102.477095][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 102.477115][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.600029][ T31] usb 2-1: config 0 descriptor?? [ 102.610390][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 102.616629][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.616671][ T36] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.616692][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.709911][ T31] appledisplay 2-1:0.0: Submitting URB failed [ 102.710076][ T31] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 102.744248][ T36] usb 3-1: config 0 descriptor?? [ 102.969168][ T5625] usb 2-1: USB disconnect, device number 2 [ 103.106252][ T36] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 103.348387][ T37] audit: type=1326 audit(1780926792.738:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5883 comm="syz.2.21" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 103.411673][ T37] audit: type=1326 audit(1780926792.748:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5883 comm="syz.2.21" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 103.412141][ T37] audit: type=1326 audit(1780926792.818:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5883 comm="syz.2.21" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 103.412459][ T37] audit: type=1326 audit(1780926792.818:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5883 comm="syz.2.21" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 103.412648][ T37] audit: type=1326 audit(1780926792.818:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5883 comm="syz.2.21" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 103.413002][ T37] audit: type=1326 audit(1780926792.818:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5883 comm="syz.2.21" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 103.439990][ T1586] gspca_cpia1: usb_control_msg 01, error -110 [ 103.440006][ T1586] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 103.461040][ T5593] usb 3-1: USB disconnect, device number 5 [ 103.497029][ T37] audit: type=1326 audit(1780926792.878:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5883 comm="syz.2.21" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 103.500506][ T37] audit: type=1326 audit(1780926792.908:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5883 comm="syz.2.21" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 103.504173][ T37] audit: type=1326 audit(1780926792.908:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5883 comm="syz.2.21" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 103.504215][ T37] audit: type=1326 audit(1780926792.908:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5883 comm="syz.2.21" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 103.803355][ T36] usb 5-1: USB disconnect, device number 2 [ 104.219150][ T1586] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.351548][ T5909] binder: 5908:5909 ioctl c0306201 0 returned -14 [ 104.367891][ T1586] usb 1-1: Using ep0 maxpacket: 32 [ 104.370189][ T1586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.370215][ T1586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.370234][ T1586] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 104.370272][ T1586] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 104.370293][ T1586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.390260][ T1586] usb 1-1: config 0 descriptor?? [ 104.467909][ T5593] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.622551][ T5593] usb 5-1: Using ep0 maxpacket: 32 [ 104.673343][ T5593] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.673360][ T5593] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.673370][ T5593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.673379][ T5593] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.750046][ T5593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.750065][ T5593] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 104.750092][ T5593] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 104.750103][ T5593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.915691][ T5593] usb 5-1: config 0 descriptor?? [ 105.679303][ T5923] netlink: 'syz.1.33': attribute type 63 has an invalid length. [ 105.679325][ T5923] netlink: 'syz.1.33': attribute type 17 has an invalid length. [ 106.127950][ T5625] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.287962][ T5625] usb 4-1: Using ep0 maxpacket: 32 [ 106.293639][ T5625] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 106.293665][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.346945][ T5625] usb 4-1: config 0 descriptor?? [ 106.557144][ T5625] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 106.618444][ T824] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.637917][ T5625] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.639752][ T5625] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 106.639816][ T5625] usb 4-1: media controller created [ 106.787880][ T824] usb 2-1: Using ep0 maxpacket: 8 [ 106.791019][ T824] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 106.825351][ T824] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 106.825378][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.825395][ T824] usb 2-1: Product: syz [ 106.825407][ T824] usb 2-1: Manufacturer: syz [ 106.825420][ T824] usb 2-1: SerialNumber: syz [ 106.825824][ T5625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.934106][ T824] usb 2-1: config 0 descriptor?? [ 106.991418][ T824] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 107.060751][ T1586] usbhid 1-1:0.0: can't add hid device: -71 [ 107.060850][ T1586] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 107.133776][ T1586] usb 1-1: USB disconnect, device number 3 [ 107.219228][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.225701][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.229885][ T5625] az6027: usb out operation failed. (-71) [ 107.232672][ T5625] az6027: usb out operation failed. (-71) [ 107.232686][ T5625] stb0899_attach: Driver disabled by Kconfig [ 107.232694][ T5625] az6027: no front-end attached [ 107.232694][ T5625] [ 107.244699][ T5625] az6027: usb out operation failed. (-71) [ 107.244714][ T5625] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 107.319361][ T5625] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 107.509471][ T824] gspca_zc3xx: reg_w_i err -110 [ 107.685099][ T5625] dvb-usb: schedule remote query interval to 400 msecs. [ 107.685135][ T5625] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 107.736646][ T5934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.831238][ T5934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.911420][ T5625] usb 4-1: USB disconnect, device number 2 [ 107.944415][ T9] usb 5-1: USB disconnect, device number 3 [ 108.107999][ T824] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 108.108087][ T824] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 108.287903][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.382186][ T5625] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 108.547877][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 108.551923][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.551959][ T31] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 108.551970][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.202931][ T31] usb 1-1: config 0 descriptor?? [ 109.439463][ T1586] usb 2-1: USB disconnect, device number 3 [ 109.512185][ T31] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 109.779887][ T37] kauditd_printk_skb: 1187 callbacks suppressed [ 109.779903][ T37] audit: type=1326 audit(1780926799.188:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5938 comm="syz.0.38" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19167ce59 code=0x7fc00000 [ 109.779943][ T37] audit: type=1326 audit(1780926799.188:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5938 comm="syz.0.38" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc19167ce59 code=0x7fc00000 [ 109.779980][ T37] audit: type=1326 audit(1780926799.188:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5938 comm="syz.0.38" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19167ce59 code=0x7fc00000 [ 109.780017][ T37] audit: type=1326 audit(1780926799.188:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5938 comm="syz.0.38" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19167ce59 code=0x7fc00000 [ 109.780053][ T37] audit: type=1326 audit(1780926799.188:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5938 comm="syz.0.38" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19167ce59 code=0x7fc00000 [ 109.780094][ T37] audit: type=1326 audit(1780926799.188:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5938 comm="syz.0.38" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19167ce59 code=0x7fc00000 [ 109.780131][ T37] audit: type=1326 audit(1780926799.188:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5938 comm="syz.0.38" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19167ce59 code=0x7fc00000 [ 109.780348][ T37] audit: type=1326 audit(1780926799.188:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5938 comm="syz.0.38" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19167ce59 code=0x7fc00000 [ 109.780395][ T37] audit: type=1326 audit(1780926799.188:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5938 comm="syz.0.38" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19167ce59 code=0x7fc00000 [ 109.780756][ T37] audit: type=1326 audit(1780926799.188:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5938 comm="syz.0.38" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19167ce59 code=0x7fc00000 [ 109.780954][ T5625] usb 1-1: USB disconnect, device number 4 [ 110.430247][ T1586] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 110.430272][ T1586] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 110.430312][ T1586] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.430327][ T1586] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.430341][ T1586] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.430354][ T1586] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.430368][ T1586] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.430382][ T1586] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.430395][ T1586] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.430409][ T1586] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 110.469485][ T5730] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.571016][ T1586] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 110.628490][ T5730] usb 3-1: Using ep0 maxpacket: 16 [ 110.629979][ T5730] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 110.630039][ T5730] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.632102][ T5730] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 110.632120][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.632130][ T5730] usb 3-1: Product: syz [ 110.632136][ T5730] usb 3-1: Manufacturer: syz [ 110.632143][ T5730] usb 3-1: SerialNumber: syz [ 110.724895][ T5730] usb 3-1: config 0 descriptor?? [ 110.810822][ T5972] capability: warning: `syz.1.49' uses 32-bit capabilities (legacy support in use) [ 110.946455][ T5975] fido_id[5975]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.453011][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.207336][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.207353][ T31] usb 5-1: config 0 has no interfaces? [ 112.207369][ T31] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 112.207380][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.216054][ T31] usb 5-1: config 0 descriptor?? [ 113.661356][ T10] usb 3-1: USB disconnect, device number 6 [ 113.995670][ T6003] batadv0: entered promiscuous mode [ 114.011507][ T6003] vlan2: entered promiscuous mode [ 114.201844][ T31] usb 5-1: USB disconnect, device number 4 [ 114.761567][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.931006][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 114.932938][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.932979][ T31] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.932999][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.145425][ T31] usb 5-1: config 0 descriptor?? [ 115.864726][ T31] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 116.092324][ T37] kauditd_printk_skb: 1518 callbacks suppressed [ 116.092340][ T37] audit: type=1326 audit(1780926805.498:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.4.60" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 116.092582][ T37] audit: type=1326 audit(1780926805.498:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.4.60" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 116.092823][ T37] audit: type=1326 audit(1780926805.498:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.4.60" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 116.093028][ T37] audit: type=1326 audit(1780926805.498:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.4.60" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 116.093242][ T37] audit: type=1326 audit(1780926805.498:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.4.60" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 116.093445][ T37] audit: type=1326 audit(1780926805.498:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.4.60" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 116.093688][ T37] audit: type=1326 audit(1780926805.498:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.4.60" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 116.093886][ T37] audit: type=1326 audit(1780926805.498:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.4.60" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 116.094091][ T37] audit: type=1326 audit(1780926805.498:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.4.60" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 116.094318][ T37] audit: type=1326 audit(1780926805.498:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6008 comm="syz.4.60" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 116.099314][ T10] usb 5-1: USB disconnect, device number 5 [ 116.487818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.517819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.527807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.537808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.547808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.557805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.567810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.577819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.587806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.597809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.522456][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'. [ 118.602440][ T6039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.68'. [ 121.708576][ T36] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.791896][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.869207][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 121.877050][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.877077][ T36] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.877088][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.918424][ T5625] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.942165][ T36] usb 3-1: config 0 descriptor?? [ 121.949370][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 121.960695][ T31] usb 1-1: config 0 has no interfaces? [ 121.960716][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.960727][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.048753][ T31] usb 1-1: config 0 descriptor?? [ 122.091631][ T5625] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.091655][ T5625] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.091689][ T5625] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 122.091709][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.169333][ T5625] usb 4-1: config 0 descriptor?? [ 122.184167][ T36] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 122.283925][ T6071] Bluetooth: MGMT ver 1.23 [ 122.283963][ T6071] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 122.318513][ T5625] usb 1-1: USB disconnect, device number 5 [ 122.483215][ T37] kauditd_printk_skb: 1078 callbacks suppressed [ 122.483231][ T37] audit: type=1326 audit(1780926811.888:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.2.80" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 122.483436][ T37] audit: type=1326 audit(1780926811.888:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.2.80" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 122.483830][ T37] audit: type=1326 audit(1780926811.888:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.2.80" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 122.484214][ T37] audit: type=1326 audit(1780926811.888:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.2.80" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 122.484699][ T37] audit: type=1326 audit(1780926811.888:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.2.80" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 122.485142][ T37] audit: type=1326 audit(1780926811.888:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.2.80" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 122.485514][ T37] audit: type=1326 audit(1780926811.888:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.2.80" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 122.485769][ T37] audit: type=1326 audit(1780926811.888:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.2.80" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 122.486007][ T37] audit: type=1326 audit(1780926811.888:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.2.80" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 122.486587][ T37] audit: type=1326 audit(1780926811.888:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6067 comm="syz.2.80" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b95ce59 code=0x7fc00000 [ 122.619893][ T5625] usb 3-1: USB disconnect, device number 7 [ 123.571492][ T6091] fuse: fd is not a fuse device [ 125.475698][ T5613] usb 4-1: USB disconnect, device number 3 [ 125.757231][ T6105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.93'. [ 126.277948][ T5746] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.427870][ T5746] usb 4-1: Using ep0 maxpacket: 16 [ 126.433993][ T5746] usb 4-1: config 0 has no interfaces? [ 126.434026][ T5746] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 126.434045][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.458029][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.485567][ T5746] usb 4-1: config 0 descriptor?? [ 126.617888][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 126.619560][ T10] usb 1-1: config 0 has no interfaces? [ 126.623172][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 126.623195][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.623212][ T10] usb 1-1: Product: syz [ 126.623223][ T10] usb 1-1: Manufacturer: syz [ 126.623235][ T10] usb 1-1: SerialNumber: syz [ 126.626793][ T10] usb 1-1: config 0 descriptor?? [ 126.692810][ T6114] Bluetooth: hci0: unsupported parameter 255 [ 126.692824][ T6114] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 126.695030][ T5613] usb 4-1: USB disconnect, device number 4 [ 126.808858][ T5746] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.950309][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.950650][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.980886][ T5746] usb 5-1: Using ep0 maxpacket: 8 [ 126.991584][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.991613][ T5746] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.991625][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.996414][ T5746] usb 5-1: config 0 descriptor?? [ 127.059161][ T1586] usb 1-1: USB disconnect, device number 6 [ 127.449542][ T5746] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 127.539132][ T37] kauditd_printk_skb: 1952 callbacks suppressed [ 127.539143][ T37] audit: type=1326 audit(1780926816.948:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.4.100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 127.539169][ T37] audit: type=1326 audit(1780926816.948:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.4.100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 127.549038][ T37] audit: type=1326 audit(1780926816.948:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.4.100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 127.549086][ T37] audit: type=1326 audit(1780926816.948:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.4.100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 127.549122][ T37] audit: type=1326 audit(1780926816.948:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.4.100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 127.549159][ T37] audit: type=1326 audit(1780926816.948:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.4.100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 127.549208][ T37] audit: type=1326 audit(1780926816.948:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.4.100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 127.549244][ T37] audit: type=1326 audit(1780926816.948:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.4.100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 127.549280][ T37] audit: type=1326 audit(1780926816.948:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.4.100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 127.549315][ T37] audit: type=1326 audit(1780926816.948:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6120 comm="syz.4.100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141f89ce59 code=0x7fc00000 [ 127.581220][ T9] usb 5-1: USB disconnect, device number 6 [ 128.271402][ T6134] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 129.691544][ T6141] Bluetooth: MGMT ver 1.23 [ 130.913467][ T6143] Zero length message leads to an empty skb [ 131.556467][ T6148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 131.877975][ T5625] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.056292][ T5625] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 132.056319][ T5625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.086296][ T5625] usb 5-1: config 0 descriptor?? [ 132.103253][ T5625] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 132.400097][ T1586] ================================================================== [ 132.400111][ T1586] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 132.400153][ T1586] Read of size 8 at addr ffffc9001091b008 by task kworker/0:2/1586 [ 132.400166][ T1586] [ 132.400187][ T1586] CPU: 0 UID: 0 PID: 1586 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.400207][ T1586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.400218][ T1586] Workqueue: usb_hub_wq hub_event [ 132.400258][ T1586] Call Trace: [ 132.400264][ T1586] [ 132.400272][ T1586] dump_stack_lvl+0xe8/0x150 [ 132.400296][ T1586] print_address_description+0x55/0x1e0 [ 132.400314][ T1586] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 132.400335][ T1586] print_report+0x58/0x70 [ 132.400351][ T1586] kasan_report+0x117/0x150 [ 132.400373][ T1586] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 132.400397][ T1586] __list_del_entry_valid_or_report+0xb5/0x190 [ 132.400420][ T1586] kcov_remote_start+0x2af/0x710 [ 132.400439][ T1586] hub_event+0x150/0x4f60 [ 132.400465][ T1586] ? __lock_acquire+0x6b5/0x2cf0 [ 132.400485][ T1586] ? look_up_lock_class+0x57/0x110 [ 132.400512][ T1586] ? __lock_acquire+0x6b5/0x2cf0 [ 132.400538][ T1586] ? lock_acquire+0x106/0x350 [ 132.400558][ T1586] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.400578][ T1586] ? __pfx_hub_event+0x10/0x10 [ 132.400599][ T1586] ? process_scheduled_works+0xa70/0x1860 [ 132.400619][ T1586] ? process_scheduled_works+0xa70/0x1860 [ 132.400634][ T1586] ? process_scheduled_works+0xa70/0x1860 [ 132.400651][ T1586] process_scheduled_works+0xb5d/0x1860 [ 132.400688][ T1586] ? __pfx_process_scheduled_works+0x10/0x10 [ 132.400708][ T1586] ? assign_work+0x3d5/0x5e0 [ 132.400726][ T1586] worker_thread+0xa53/0xfc0 [ 132.400754][ T1586] kthread+0x388/0x470 [ 132.400774][ T1586] ? __pfx_worker_thread+0x10/0x10 [ 132.400791][ T1586] ? __pfx_kthread+0x10/0x10 [ 132.400811][ T1586] ret_from_fork+0x514/0xb70 [ 132.400831][ T1586] ? __pfx_ret_from_fork+0x10/0x10 [ 132.400848][ T1586] ? __switch_to+0xc79/0x1410 [ 132.400872][ T1586] ? __pfx_kthread+0x10/0x10 [ 132.400893][ T1586] ret_from_fork_asm+0x1a/0x30 [ 132.400919][ T1586] [ 132.400926][ T1586] [ 132.400930][ T1586] The buggy address belongs to a vmalloc virtual mapping [ 132.400944][ T1586] Memory state around the buggy address: [ 132.400954][ T1586] ffffc9001091af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 132.400966][ T1586] ffffc9001091af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 132.400976][ T1586] >ffffc9001091b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 132.400985][ T1586] ^ [ 132.400994][ T1586] ffffc9001091b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 132.401005][ T1586] ffffc9001091b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 132.401013][ T1586] ================================================================== [ 132.401083][ T1586] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 132.401096][ T1586] CPU: 0 UID: 0 PID: 1586 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.401116][ T1586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.401126][ T1586] Workqueue: usb_hub_wq hub_event [ 132.401148][ T1586] Call Trace: [ 132.401154][ T1586] [ 132.401160][ T1586] vpanic+0x56c/0xa60 [ 132.401183][ T1586] ? rcu_is_watching+0x15/0xb0 [ 132.401206][ T1586] ? __pfx_vpanic+0x10/0x10 [ 132.401229][ T1586] panic+0xc5/0xd0 [ 132.401247][ T1586] ? __pfx_panic+0x10/0x10 [ 132.401266][ T1586] ? preempt_schedule_thunk+0x16/0x30 [ 132.401291][ T1586] ? preempt_schedule_thunk+0x16/0x30 [ 132.401314][ T1586] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 132.401335][ T1586] check_panic_on_warn+0x89/0xb0 [ 132.401357][ T1586] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 132.401378][ T1586] end_report+0x73/0x170 [ 132.401396][ T1586] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 132.401416][ T1586] kasan_report+0x128/0x150 [ 132.401434][ T1586] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 132.401457][ T1586] __list_del_entry_valid_or_report+0xb5/0x190 [ 132.401479][ T1586] kcov_remote_start+0x2af/0x710 [ 132.401498][ T1586] hub_event+0x150/0x4f60 [ 132.401524][ T1586] ? __lock_acquire+0x6b5/0x2cf0 [ 132.401543][ T1586] ? look_up_lock_class+0x57/0x110 [ 132.401569][ T1586] ? __lock_acquire+0x6b5/0x2cf0 [ 132.401595][ T1586] ? lock_acquire+0x106/0x350 [ 132.401615][ T1586] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 132.401635][ T1586] ? __pfx_hub_event+0x10/0x10 [ 132.401662][ T1586] ? process_scheduled_works+0xa70/0x1860 [ 132.401682][ T1586] ? process_scheduled_works+0xa70/0x1860 [ 132.401699][ T1586] ? process_scheduled_works+0xa70/0x1860 [ 132.401717][ T1586] process_scheduled_works+0xb5d/0x1860 [ 132.401747][ T1586] ? __pfx_process_scheduled_works+0x10/0x10 [ 132.401767][ T1586] ? assign_work+0x3d5/0x5e0 [ 132.401786][ T1586] worker_thread+0xa53/0xfc0 [ 132.401814][ T1586] kthread+0x388/0x470 [ 132.401834][ T1586] ? __pfx_worker_thread+0x10/0x10 [ 132.401850][ T1586] ? __pfx_kthread+0x10/0x10 [ 132.401871][ T1586] ret_from_fork+0x514/0xb70 [ 132.401890][ T1586] ? __pfx_ret_from_fork+0x10/0x10 [ 132.401907][ T1586] ? __switch_to+0xc79/0x1410 [ 132.401931][ T1586] ? __pfx_kthread+0x10/0x10 [ 132.401951][ T1586] ret_from_fork_asm+0x1a/0x30 [ 132.401977][ T1586] [ 132.402236][ T1586] Kernel Offset: disabled