last executing test programs: 8.37276183s ago: executing program 4 (id=9): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xba, 0x2, 0x3, 0x0, 0x0, 0x4, 0xfc, 0xfd, 0x0, 0x0, 0xff}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000100)) 8.031952635s ago: executing program 4 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x1fffffffff, 0xb, 0x80006, 0x4000000000000e51, 0x7, 0x547a, 0x103d, 0x200000000006, 0x0, 0x5861, 0x5, 0x1, 0x0, 0x40000000009, 0x40000000080a8d, 0x800000068], 0x30000, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) 6.816707137s ago: executing program 3 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x25d, 0x0, 0x7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.445048764s ago: executing program 1 (id=20): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_connect(0x3, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109023600010000000009040000040de67a0009050300000400000009050000ebff09030509050402d08fb68d0009058102"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x81, 0x14, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a") 6.385064348s ago: executing program 4 (id=21): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.989821129s ago: executing program 4 (id=22): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 5.704776713s ago: executing program 2 (id=25): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r5, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 5.508380578s ago: executing program 2 (id=26): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0xaaaac24, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r4, 0x3554000) 4.907999922s ago: executing program 2 (id=27): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 4.70597567s ago: executing program 3 (id=28): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000808}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x20000010) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 4.316075994s ago: executing program 1 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0xaaaac24, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r3, 0x3554000) 4.146799246s ago: executing program 4 (id=30): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902"], 0x0) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) 4.116260922s ago: executing program 3 (id=31): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="ff7f0e3f2617d1f42ab5a1db8511", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x1d) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="050427c67002fcdbdf250100000008000100", @ANYRES32=r3], 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20004080) 3.786508165s ago: executing program 3 (id=32): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000014c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.98202866s ago: executing program 0 (id=33): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2", 0x2) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000050002000000000020000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a4000000000090002"], 0x90}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="01002bbd7000fcdbdf25020000000900030073797a30000000000900030073797a3200000000050004000200000005000400010000000900030073797a31"], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x44) r5 = socket(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt(r5, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000007, 0x3032, 0xffffffffffffffff, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000006180100002020782500000000002020207b1af8ff0000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 2.861777405s ago: executing program 1 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2.653450716s ago: executing program 2 (id=35): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x7}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffff}, {}, {}, @quote}], 0x38) write$sndseq(r1, 0x0, 0x0) 2.484791629s ago: executing program 2 (id=36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x1fffffffff, 0xb, 0x80006, 0x4000000000000e51, 0x7, 0x547a, 0x103d, 0x200000000006, 0x0, 0x5861, 0x5, 0x1, 0x0, 0x40000000009, 0x40000000080a8d, 0x800000068], 0x30000, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) 2.468909783s ago: executing program 1 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cecb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2", 0x51}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x44, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.402774583s ago: executing program 4 (id=38): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f0000000880)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000700)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0}) 2.224503062s ago: executing program 0 (id=39): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, 0x0, 0x0, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0xaaaac24, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r4, 0x3554000) 1.921540765s ago: executing program 2 (id=40): syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01020301090212"], 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffe, 0x80002) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x6036}], 0x1, 0x0, 0x0, 0xfffffffffffffc92) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.914553643s ago: executing program 1 (id=41): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0xbc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.72159974s ago: executing program 1 (id=42): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x20, 0x15, 0x1, "d0"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000014c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.646664325s ago: executing program 3 (id=43): r0 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000700)={0xffffff61, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 1.531595707s ago: executing program 0 (id=44): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x7}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffff}, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xa8) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) 1.461868293s ago: executing program 0 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cecb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c", 0x98}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x44, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.186053236s ago: executing program 0 (id=46): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x7}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffff}, {}, {}, @quote}], 0x38) write$sndseq(r1, 0x0, 0x0) 1.080147164s ago: executing program 0 (id=47): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xc002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x50, 0xc9, "", [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xa, 0x77, 0x1, {0x22, 0xde1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x5, 0x48}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 0s ago: executing program 3 (id=48): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x7}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffff}, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x9, 0x308}, {}, {0xfd}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. [ 79.909597][ T5829] cgroup: Unknown subsys name 'net' [ 80.018447][ T5829] cgroup: Unknown subsys name 'cpuset' [ 80.027020][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.737425][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.913944][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.937327][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.955354][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.965735][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.976925][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.977028][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.984496][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.994581][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.002720][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.015411][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.016017][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.024195][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.032999][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.038068][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.044928][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.050883][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.067132][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.067182][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.075055][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.086610][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.091890][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.097347][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.104631][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.111088][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.131659][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.864005][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 84.900768][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 84.962925][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 85.058756][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 85.199147][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.206549][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.214038][ T5850] bridge_slave_0: entered allmulticast mode [ 85.222318][ T5850] bridge_slave_0: entered promiscuous mode [ 85.250500][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 85.275265][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.282712][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.290512][ T5850] bridge_slave_1: entered allmulticast mode [ 85.298005][ T5850] bridge_slave_1: entered promiscuous mode [ 85.325760][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.333032][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.340688][ T5841] bridge_slave_0: entered allmulticast mode [ 85.348128][ T5841] bridge_slave_0: entered promiscuous mode [ 85.407986][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.415513][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.422843][ T5841] bridge_slave_1: entered allmulticast mode [ 85.430877][ T5841] bridge_slave_1: entered promiscuous mode [ 85.503493][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.513003][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.520974][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.528325][ T5852] bridge_slave_0: entered allmulticast mode [ 85.536186][ T5852] bridge_slave_0: entered promiscuous mode [ 85.577455][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.587148][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.594554][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.601970][ T5852] bridge_slave_1: entered allmulticast mode [ 85.609699][ T5852] bridge_slave_1: entered promiscuous mode [ 85.622486][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.629864][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.637171][ T5846] bridge_slave_0: entered allmulticast mode [ 85.644547][ T5846] bridge_slave_0: entered promiscuous mode [ 85.656960][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.697694][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.705133][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.712323][ T5846] bridge_slave_1: entered allmulticast mode [ 85.720073][ T5846] bridge_slave_1: entered promiscuous mode [ 85.731039][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.817824][ T5850] team0: Port device team_slave_0 added [ 85.829395][ T5850] team0: Port device team_slave_1 added [ 85.842245][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.852427][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.860666][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.868172][ T5842] bridge_slave_0: entered allmulticast mode [ 85.876062][ T5842] bridge_slave_0: entered promiscuous mode [ 85.924056][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.933721][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.941271][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.948766][ T5842] bridge_slave_1: entered allmulticast mode [ 85.956793][ T5842] bridge_slave_1: entered promiscuous mode [ 85.968235][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.980306][ T5841] team0: Port device team_slave_0 added [ 86.038592][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.050457][ T5841] team0: Port device team_slave_1 added [ 86.072467][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.079602][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.110479][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.125438][ T5852] team0: Port device team_slave_0 added [ 86.165792][ T5845] Bluetooth: hci4: command tx timeout [ 86.165798][ T5861] Bluetooth: hci2: command tx timeout [ 86.166024][ T5861] Bluetooth: hci1: command tx timeout [ 86.172007][ T5845] Bluetooth: hci3: command tx timeout [ 86.177925][ T5856] Bluetooth: hci0: command tx timeout [ 86.190082][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.201707][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.229097][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.243379][ T5852] team0: Port device team_slave_1 added [ 86.269293][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.292693][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.299903][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.326285][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.360016][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.372175][ T5846] team0: Port device team_slave_0 added [ 86.380041][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.387127][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.413792][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.438581][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.445701][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.472110][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.497074][ T5846] team0: Port device team_slave_1 added [ 86.529977][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.537447][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.564119][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.635680][ T5842] team0: Port device team_slave_0 added [ 86.642924][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.650107][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.676541][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.707750][ T5841] hsr_slave_0: entered promiscuous mode [ 86.714750][ T5841] hsr_slave_1: entered promiscuous mode [ 86.728037][ T5842] team0: Port device team_slave_1 added [ 86.753519][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.760685][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.786640][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.804386][ T5850] hsr_slave_0: entered promiscuous mode [ 86.812045][ T5850] hsr_slave_1: entered promiscuous mode [ 86.819442][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 86.825337][ T5850] Cannot create hsr debugfs directory [ 86.956196][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.963179][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.989481][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.055678][ T5852] hsr_slave_0: entered promiscuous mode [ 87.063243][ T5852] hsr_slave_1: entered promiscuous mode [ 87.070649][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 87.076664][ T5852] Cannot create hsr debugfs directory [ 87.084844][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.091918][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.138555][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.326253][ T5846] hsr_slave_0: entered promiscuous mode [ 87.333070][ T5846] hsr_slave_1: entered promiscuous mode [ 87.340684][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 87.346666][ T5846] Cannot create hsr debugfs directory [ 87.411587][ T5842] hsr_slave_0: entered promiscuous mode [ 87.418395][ T5842] hsr_slave_1: entered promiscuous mode [ 87.431554][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 87.437470][ T5842] Cannot create hsr debugfs directory [ 87.989517][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.001675][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.021588][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.042058][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.118326][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.146423][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.177551][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.203314][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.246035][ T5861] Bluetooth: hci4: command tx timeout [ 88.246086][ T51] Bluetooth: hci2: command tx timeout [ 88.252002][ T5861] Bluetooth: hci0: command tx timeout [ 88.257695][ T5845] Bluetooth: hci1: command tx timeout [ 88.263146][ T5856] Bluetooth: hci3: command tx timeout [ 88.291898][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.324483][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.340175][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.369956][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.470719][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.483608][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.500024][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.510309][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.643496][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.677899][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.693079][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.707076][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.718793][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.785846][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.829064][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.836588][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.879977][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.887195][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.942014][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.040703][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.076281][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.083518][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.111111][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.133084][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.168392][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.175809][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.213039][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.244624][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.263754][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.312023][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.319341][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.330965][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.338429][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.349722][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.357104][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.441299][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.448594][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.464606][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.503160][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.510501][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.562614][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.569974][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.681858][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.138454][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.328401][ T5856] Bluetooth: hci3: command tx timeout [ 90.334533][ T5861] Bluetooth: hci2: command tx timeout [ 90.334559][ T51] Bluetooth: hci0: command tx timeout [ 90.334592][ T51] Bluetooth: hci1: command tx timeout [ 90.341482][ T5856] Bluetooth: hci4: command tx timeout [ 90.464430][ T5850] veth0_vlan: entered promiscuous mode [ 90.517489][ T5850] veth1_vlan: entered promiscuous mode [ 90.542824][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.578734][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.589054][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.662384][ T5841] veth0_vlan: entered promiscuous mode [ 90.730837][ T5850] veth0_macvtap: entered promiscuous mode [ 90.763717][ T5850] veth1_macvtap: entered promiscuous mode [ 90.775887][ T5841] veth1_vlan: entered promiscuous mode [ 90.818594][ T5852] veth0_vlan: entered promiscuous mode [ 90.843940][ T5842] veth0_vlan: entered promiscuous mode [ 90.861765][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.902470][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.911076][ T5852] veth1_vlan: entered promiscuous mode [ 90.927658][ T5846] veth0_vlan: entered promiscuous mode [ 90.952337][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.962838][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.980616][ T5842] veth1_vlan: entered promiscuous mode [ 90.990909][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.000478][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.056000][ T5846] veth1_vlan: entered promiscuous mode [ 91.065287][ T5841] veth0_macvtap: entered promiscuous mode [ 91.098503][ T5841] veth1_macvtap: entered promiscuous mode [ 91.227062][ T5852] veth0_macvtap: entered promiscuous mode [ 91.238472][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.271141][ T5842] veth0_macvtap: entered promiscuous mode [ 91.296726][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.318481][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.318774][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.343003][ T5852] veth1_macvtap: entered promiscuous mode [ 91.352501][ T5842] veth1_macvtap: entered promiscuous mode [ 91.367970][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.378280][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.392794][ T5846] veth0_macvtap: entered promiscuous mode [ 91.412217][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.421577][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.456249][ T5846] veth1_macvtap: entered promiscuous mode [ 91.472138][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.483810][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.491736][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.570018][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.597989][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.631792][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.642809][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.669919][ T1015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.678857][ T1015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.693464][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.712853][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.731373][ T3508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.741405][ T3508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.794087][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.806602][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.839154][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.893955][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.944604][ T9] cfg80211: failed to load regulatory.db [ 91.960091][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.982604][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.028370][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.038965][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.053079][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.078580][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.092389][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.141331][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.303915][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.316001][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.405621][ T5861] Bluetooth: hci2: command tx timeout [ 92.412051][ T5856] Bluetooth: hci4: command tx timeout [ 92.417609][ T5861] Bluetooth: hci1: command tx timeout [ 92.417652][ T5853] Bluetooth: hci0: command tx timeout [ 92.430415][ T51] Bluetooth: hci3: command tx timeout [ 92.438508][ T5971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 92.455096][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.463542][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.505707][ T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.543442][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.559047][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.586462][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.598488][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.666260][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 92.686107][ T47] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.697542][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.720491][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.750232][ T47] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 92.784792][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.800784][ T47] usb 3-1: Product: syz [ 92.811122][ T47] usb 3-1: Manufacturer: syz [ 92.831465][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.847559][ T47] usb 3-1: SerialNumber: syz [ 92.861413][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.880943][ T5974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8'. [ 92.900520][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.350264][ T47] usb 3-1: unit 0 not found! [ 93.457114][ T47] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 93.561811][ T47] usb 3-1: unit 0 not found! [ 93.606594][ T47] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 93.691594][ T47] usb 3-1: unit 0 not found! [ 94.142327][ T6004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'. [ 94.247647][ T47] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 94.285050][ T5963] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 94.307670][ T47] usb 3-1: USB disconnect, device number 2 [ 94.505313][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.508306][ T5963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.605949][ T5963] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.652483][ T5963] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 94.688923][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.727794][ T5963] usb 1-1: Product: syz [ 94.744299][ T5963] usb 1-1: Manufacturer: syz [ 94.772413][ T5963] usb 1-1: SerialNumber: syz [ 94.776983][ T6015] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 94.809412][ T5963] usb 1-1: config 0 descriptor?? [ 94.930128][ T6019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18'. [ 95.077106][ T47] usb 1-1: USB disconnect, device number 2 [ 95.587150][ T5255] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.755537][ T5255] usb 2-1: Using ep0 maxpacket: 16 [ 95.780913][ T5255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 95.818465][ T5255] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.861508][ T5255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 95.898200][ T5255] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 95.920605][ T5255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12150, setting to 1024 [ 95.954019][ T5255] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 95.993071][ T5255] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 96.004130][ T5255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.012390][ T5255] usb 2-1: Product: syz [ 96.016991][ T5255] usb 2-1: Manufacturer: syz [ 96.021744][ T5255] usb 2-1: SerialNumber: syz [ 96.035081][ T5255] usb 2-1: config 0 descriptor?? [ 96.041313][ T5907] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.049006][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.049181][ T6025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.076997][ T6025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.178162][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 96.187320][ T5255] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 96.194512][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 96.289928][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 96.297407][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 96.312016][ T5907] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.323241][ T47] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 96.344557][ T5907] usb 5-1: config 0 has no interface number 0 [ 96.354550][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.364629][ T5907] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.394595][ T5907] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.408729][ T47] usb 1-1: config 0 descriptor?? [ 96.420252][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.432762][ T47] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 96.446520][ T5907] usb 5-1: config 0 descriptor?? [ 96.457491][ T5907] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 96.625016][ T6025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.647752][ T6025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.678167][ T5907] usb 2-1: USB disconnect, device number 2 [ 96.707325][ T5907] mcba_usb 2-1:0.0 can0: device disconnected [ 96.716076][ T24] usb 5-1: USB disconnect, device number 2 [ 97.114841][ T5255] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 97.356948][ T5255] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 97.366948][ T5255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.377733][ T5255] usb 3-1: Product: syz [ 97.383012][ T5255] usb 3-1: Manufacturer: syz [ 97.388443][ T5255] usb 3-1: SerialNumber: syz [ 97.401859][ T5255] usb 3-1: config 0 descriptor?? [ 97.436035][ T5255] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 97.720564][ T6067] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 97.727361][ T6067] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.759467][ T6067] vhci_hcd vhci_hcd.0: Device attached [ 97.792661][ T6073] netlink: 116 bytes leftover after parsing attributes in process `syz.3.31'. [ 98.014878][ T5923] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.022544][ T5936] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 98.060753][ T47] gspca_vc032x: reg_w err -71 [ 98.070722][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.085357][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.094837][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.107400][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.130711][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.147264][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.153689][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.164243][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.171258][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.180029][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.187183][ T5923] usb 5-1: config 0 has no interfaces? [ 98.191313][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.199340][ T5923] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 98.201291][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.218812][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.218884][ T5923] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 98.224200][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.238794][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.244318][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.263531][ T5923] usb 5-1: Manufacturer: syz [ 98.270759][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.276525][ T5907] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.286994][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.289623][ T5923] usb 5-1: config 0 descriptor?? [ 98.293388][ T47] gspca_vc032x: Unknown sensor... [ 98.306891][ T47] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 98.327910][ T47] usb 1-1: USB disconnect, device number 3 [ 98.458078][ T5255] gspca_stk1135: reg_w 0x7 err -71 [ 98.470021][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.470747][ T5255] gspca_stk1135: serial bus timeout: status=0x00 [ 98.486725][ T5907] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 98.511807][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.516492][ T5255] gspca_stk1135: Sensor write failed [ 98.555297][ T5255] gspca_stk1135: serial bus timeout: status=0x00 [ 98.555359][ T5907] usb 4-1: config 0 descriptor?? [ 98.576112][ T5255] gspca_stk1135: Sensor write failed [ 98.591936][ T5255] gspca_stk1135: serial bus timeout: status=0x00 [ 98.592244][ T47] usb 5-1: USB disconnect, device number 3 [ 98.607862][ T5255] gspca_stk1135: Sensor read failed [ 98.610462][ T6071] vhci_hcd: connection closed [ 98.616849][ T5907] pwc: Askey VC010 type 2 USB webcam detected. [ 98.643829][ T3508] vhci_hcd vhci_hcd.4: stop threads [ 98.653423][ T5255] gspca_stk1135: serial bus timeout: status=0x00 [ 98.672134][ T3508] vhci_hcd vhci_hcd.4: release socket [ 98.681960][ T5255] gspca_stk1135: Sensor read failed [ 98.701239][ T5255] gspca_stk1135: Detected sensor type unknown (0x0) [ 98.704010][ T3508] vhci_hcd vhci_hcd.4: disconnect device [ 98.715082][ T5255] gspca_stk1135: serial bus timeout: status=0x00 [ 98.741644][ T5255] gspca_stk1135: Sensor read failed [ 98.747527][ T5936] usb 41-1: device descriptor read/64, error -71 [ 98.760606][ T5255] gspca_stk1135: serial bus timeout: status=0x00 [ 98.775855][ T5255] gspca_stk1135: Sensor read failed [ 98.786411][ T5255] gspca_stk1135: serial bus timeout: status=0x00 [ 98.801127][ T5255] gspca_stk1135: Sensor write failed [ 98.810649][ T5255] gspca_stk1135: serial bus timeout: status=0x00 [ 98.824860][ T5255] gspca_stk1135: Sensor write failed [ 98.833054][ T5255] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 98.853859][ T5255] usb 3-1: USB disconnect, device number 3 [ 98.856573][ T6089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.33'. [ 98.936972][ T5936] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 98.997705][ T5907] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.008216][ T5907] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.022661][ T5907] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.047553][ T5907] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.065125][ T5907] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.080680][ T5907] pwc: recv_control_msg error -32 req 04 val 1400 [ 99.096373][ T5907] pwc: recv_control_msg error -32 req 02 val 2000 [ 99.114930][ T5907] pwc: recv_control_msg error -32 req 02 val 2100 [ 99.127918][ T5907] pwc: recv_control_msg error -32 req 04 val 1500 [ 99.146911][ T5907] pwc: recv_control_msg error -32 req 02 val 2500 [ 99.361573][ T5907] pwc: recv_control_msg error -71 req 02 val 2600 [ 99.385700][ T5907] pwc: recv_control_msg error -71 req 02 val 2900 [ 99.409416][ T5907] pwc: recv_control_msg error -71 req 02 val 2800 [ 99.437356][ T5907] pwc: recv_control_msg error -71 req 04 val 1100 [ 99.476306][ T5907] pwc: recv_control_msg error -71 req 04 val 1200 [ 99.509571][ T5907] pwc: Registered as video103. [ 99.520481][ T6105] kvm: pic: non byte write [ 99.559195][ T5907] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 99.624125][ T5907] usb 4-1: USB disconnect, device number 2 [ 99.684228][ T47] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.885806][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 99.897277][ T47] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 99.911239][ T47] usb 5-1: config 0 has no interface number 0 [ 99.924353][ T47] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.935633][ T47] usb 5-1: config 0 interface 89 has no altsetting 0 [ 99.947060][ T47] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 99.974769][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.995196][ T47] usb 5-1: Product: syz [ 100.008674][ T47] usb 5-1: Manufacturer: syz [ 100.028077][ T47] usb 5-1: SerialNumber: syz [ 100.043713][ T47] usb 5-1: config 0 descriptor?? [ 100.073660][ T47] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 100.091541][ T47] em28xx 5-1:0.89: Video interface 89 found: [ 100.096199][ T5936] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.257294][ T992] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.266721][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 100.278913][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.292428][ T5936] usb 3-1: config 0 has no interfaces? [ 100.301357][ T5936] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 100.311883][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.320603][ T5936] usb 3-1: Product: syz [ 100.325823][ T5936] usb 3-1: Manufacturer: syz [ 100.330620][ T5936] usb 3-1: SerialNumber: syz [ 100.340056][ T5936] usb 3-1: config 0 descriptor?? [ 100.354816][ T5923] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.390277][ T6124] kvm: pic: non byte write [ 100.416725][ T992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.427445][ T992] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 100.437529][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.452614][ T992] usb 2-1: config 0 descriptor?? [ 100.466112][ T992] pwc: Askey VC010 type 2 USB webcam detected. [ 100.514775][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 100.527748][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.540815][ T5923] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 100.551531][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.560910][ T5923] usb 4-1: Product: syz [ 100.584840][ T5923] usb 4-1: Manufacturer: syz [ 100.589640][ T5923] usb 4-1: SerialNumber: syz [ 100.685285][ T47] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 100.872821][ T992] pwc: recv_control_msg error -32 req 02 val 2b00 [ 100.875940][ T5922] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 100.883913][ T992] pwc: recv_control_msg error -32 req 02 val 2700 [ 100.899543][ T992] pwc: recv_control_msg error -32 req 02 val 2c00 [ 100.907172][ T992] pwc: recv_control_msg error -32 req 04 val 1000 [ 100.914273][ T992] pwc: recv_control_msg error -32 req 04 val 1300 [ 100.923901][ T992] pwc: recv_control_msg error -32 req 04 val 1400 [ 100.931823][ T992] pwc: recv_control_msg error -32 req 02 val 2000 [ 100.939520][ T992] pwc: recv_control_msg error -32 req 02 val 2100 [ 100.947446][ T992] pwc: recv_control_msg error -32 req 04 val 1500 [ 100.955239][ T992] pwc: recv_control_msg error -32 req 02 val 2500 [ 101.028220][ T5923] usb 4-1: unit 0 not found! [ 101.038302][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.044010][ T5923] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 101.047864][ T5922] usb 1-1: not running at top speed; connect to a high speed hub [ 101.062186][ T5923] usb 4-1: unit 0 not found! [ 101.071462][ T5922] usb 1-1: config 1 interface 0 has no altsetting 0 [ 101.083171][ T5923] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 101.084584][ T5922] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 101.102285][ T5923] usb 4-1: unit 0 not found! [ 101.114081][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.123655][ T5922] usb 1-1: Product: syz [ 101.130649][ T5922] usb 1-1: Manufacturer: syz [ 101.136156][ T5922] usb 1-1: SerialNumber: syz [ 101.165150][ T992] pwc: recv_control_msg error -32 req 02 val 2600 [ 101.186125][ T992] pwc: recv_control_msg error -32 req 02 val 2900 [ 101.197258][ T992] pwc: recv_control_msg error -32 req 02 val 2800 [ 101.227494][ T5923] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 101.241859][ T5923] usb 4-1: USB disconnect, device number 3 [ 101.280491][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.314297][ T47] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 101.326822][ T47] em28xx 5-1:0.89: board has no eeprom [ 101.372231][ T5922] usbhid 1-1:1.0: can't add hid device: -71 [ 101.379846][ T5922] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 101.389518][ T47] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 101.399544][ T47] em28xx 5-1:0.89: analog set to bulk mode. [ 101.401119][ T5922] usb 1-1: USB disconnect, device number 4 [ 101.418265][ T992] pwc: recv_control_msg error -71 req 04 val 1200 [ 101.422688][ T47] usb 5-1: USB disconnect, device number 4 [ 101.449706][ T992] pwc: Registered as video103. [ 101.464027][ T5907] em28xx 5-1:0.89: Registering V4L2 extension [ 101.490098][ T47] em28xx 5-1:0.89: Disconnecting em28xx [ 101.498791][ T24] usb 3-1: USB disconnect, device number 4 [ 101.504368][ T992] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 101.569227][ T992] usb 2-1: USB disconnect, device number 3 [ 101.583685][ T5907] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 101.601651][ T5907] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 101.639010][ T5907] em28xx 5-1:0.89: No AC97 audio processor [ 101.680148][ T5907] usb 5-1: Decoder not found [ 101.691208][ T5907] em28xx 5-1:0.89: failed to create media graph [ 101.707906][ T5907] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 101.728515][ T5907] em28xx 5-1:0.89: Registering snapshot button... [ 101.731517][ T6133] ================================================================== [ 101.740038][ T5907] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input7 [ 101.743050][ T6133] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0 [ 101.743086][ T6133] Read of size 4 at addr ffff8880222b8810 by task v4l_id/6133 [ 101.743099][ T6133] [ 101.743109][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 101.743125][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.743134][ T6133] Call Trace: [ 101.743140][ T6133] [ 101.743146][ T6133] dump_stack_lvl+0xe8/0x150 [ 101.743169][ T6133] print_address_description+0x55/0x1e0 [ 101.743190][ T6133] ? v4l2_open+0x395/0x3a0 [ 101.743208][ T6133] print_report+0x58/0x70 [ 101.743225][ T6133] kasan_report+0x117/0x150 [ 101.743243][ T6133] ? v4l2_open+0x395/0x3a0 [ 101.743265][ T6133] v4l2_open+0x395/0x3a0 [ 101.743288][ T6133] chrdev_open+0x4cd/0x5e0 [ 101.743306][ T6133] ? __pfx_chrdev_open+0x10/0x10 [ 101.743323][ T6133] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 101.743349][ T6133] ? __pfx_chrdev_open+0x10/0x10 [ 101.743366][ T6133] do_dentry_open+0x785/0x14e0 [ 101.743389][ T6133] vfs_open+0x3b/0x340 [ 101.743407][ T6133] ? path_openat+0x2df0/0x3860 [ 101.743423][ T6133] path_openat+0x2e08/0x3860 [ 101.743444][ T6133] ? __pfx_stack_trace_save+0x10/0x10 [ 101.743465][ T6133] ? stack_depot_save_flags+0x33/0x810 [ 101.743486][ T6133] ? __pfx_path_openat+0x10/0x10 [ 101.743500][ T6133] ? __x64_sys_openat+0x138/0x170 [ 101.743519][ T6133] ? do_syscall_64+0x14d/0xf80 [ 101.743537][ T6133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.743566][ T6133] ? __lock_acquire+0x6b5/0x2cf0 [ 101.743592][ T6133] do_file_open+0x23e/0x4a0 [ 101.743609][ T6133] ? __pfx_do_file_open+0x10/0x10 [ 101.743632][ T6133] ? _raw_spin_unlock+0x28/0x50 [ 101.743649][ T6133] ? alloc_fd+0x64b/0x6c0 [ 101.743673][ T6133] do_sys_openat2+0x113/0x200 [ 101.743694][ T6133] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.743715][ T6133] ? exc_page_fault+0x6a/0xc0 [ 101.743734][ T6133] ? do_user_addr_fault+0xc6f/0x1340 [ 101.743758][ T6133] __x64_sys_openat+0x138/0x170 [ 101.743780][ T6133] do_syscall_64+0x14d/0xf80 [ 101.743798][ T6133] ? trace_irq_disable+0x3b/0x150 [ 101.743815][ T6133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.743828][ T6133] ? clear_bhb_loop+0x40/0x90 [ 101.743844][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.743860][ T6133] RIP: 0033:0x7fd0d54a7407 [ 101.743875][ T6133] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 101.743889][ T6133] RSP: 002b:00007ffe6f9f2540 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 101.743907][ T6133] RAX: ffffffffffffffda RBX: 00007fd0d5c82880 RCX: 00007fd0d54a7407 [ 101.743919][ T6133] RDX: 0000000000000000 RSI: 00007ffe6f9f2f1d RDI: ffffffffffffff9c [ 101.743931][ T6133] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 101.743940][ T6133] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 101.743950][ T6133] R13: 00007ffe6f9f2790 R14: 00007fd0d5de9000 R15: 00005644847274d8 [ 101.743968][ T6133] [ 101.743974][ T6133] [ 101.768992][ T5907] em28xx 5-1:0.89: Remote control support is not available for this card. [ 101.771183][ T6133] Allocated by task 5907: [ 101.771196][ T6133] kasan_save_track+0x3e/0x80 [ 101.771225][ T6133] __kasan_kmalloc+0x93/0xb0 [ 101.780772][ T47] em28xx 5-1:0.89: Closing input extension [ 101.790396][ T6133] __kmalloc_cache_noprof+0x31c/0x660 [ 101.790424][ T6133] em28xx_v4l2_init+0x10b/0x2e70 [ 101.790441][ T6133] em28xx_init_extension+0x120/0x1c0 [ 101.790462][ T6133] process_one_work+0x9ab/0x1780 [ 101.790484][ T6133] worker_thread+0xba8/0x11e0 [ 101.790499][ T6133] kthread+0x388/0x470 [ 101.790517][ T6133] ret_from_fork+0x51e/0xb90 [ 101.790539][ T6133] ret_from_fork_asm+0x1a/0x30 [ 101.797126][ T47] em28xx 5-1:0.89: Deregistering snapshot button [ 101.801634][ T6133] [ 101.801644][ T6133] Freed by task 5907: [ 101.801655][ T6133] kasan_save_track+0x3e/0x80 [ 102.136946][ T6133] kasan_save_free_info+0x46/0x50 [ 102.141982][ T6133] __kasan_slab_free+0x5c/0x80 [ 102.146836][ T6133] kfree+0x1c5/0x650 [ 102.150735][ T6133] em28xx_v4l2_init+0x1683/0x2e70 [ 102.155756][ T6133] em28xx_init_extension+0x120/0x1c0 [ 102.161054][ T6133] process_one_work+0x9ab/0x1780 [ 102.166002][ T6133] worker_thread+0xba8/0x11e0 [ 102.170695][ T6133] kthread+0x388/0x470 [ 102.174769][ T6133] ret_from_fork+0x51e/0xb90 [ 102.179384][ T6133] ret_from_fork_asm+0x1a/0x30 [ 102.184142][ T6133] [ 102.186484][ T6133] The buggy address belongs to the object at ffff8880222b8000 [ 102.186484][ T6133] which belongs to the cache kmalloc-8k of size 8192 [ 102.200706][ T6133] The buggy address is located 2064 bytes inside of [ 102.200706][ T6133] freed 8192-byte region [ffff8880222b8000, ffff8880222ba000) [ 102.214674][ T6133] [ 102.217741][ T6133] The buggy address belongs to the physical page: [ 102.224246][ T6133] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x222b8 [ 102.233091][ T6133] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 102.241677][ T6133] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 102.249306][ T6133] page_type: f5(slab) [ 102.253286][ T6133] raw: 00fff00000000040 ffff88801b042280 dead000000000100 dead000000000122 [ 102.261863][ T6133] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 102.270444][ T6133] head: 00fff00000000040 ffff88801b042280 dead000000000100 dead000000000122 [ 102.279394][ T6133] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 102.288320][ T6133] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 102.297188][ T6133] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 102.306127][ T6133] page dumped because: kasan: bad access detected [ 102.312651][ T6133] page_owner tracks the page as allocated [ 102.318365][ T6133] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5499, tgid 5499 (sh), ts 52144116740, free_ts 51927196358 [ 102.338345][ T6133] post_alloc_hook+0x231/0x280 [ 102.343296][ T6133] get_page_from_freelist+0x2418/0x24b0 [ 102.348840][ T6133] __alloc_frozen_pages_noprof+0x233/0x3d0 [ 102.354788][ T6133] allocate_slab+0x77/0x660 [ 102.359313][ T6133] refill_objects+0x339/0x3d0 [ 102.364039][ T6133] __pcs_replace_empty_main+0x321/0x720 [ 102.369609][ T6133] __kmalloc_cache_noprof+0x392/0x660 [ 102.375074][ T6133] tomoyo_init_log+0x112e/0x1fb0 [ 102.380099][ T6133] tomoyo_supervisor+0x353/0x1570 [ 102.385117][ T6133] tomoyo_env_perm+0x151/0x1f0 [ 102.389878][ T6133] tomoyo_find_next_domain+0x15cb/0x1aa0 [ 102.395508][ T6133] tomoyo_bprm_check_security+0x11b/0x180 [ 102.401231][ T6133] security_bprm_check+0x85/0x240 [ 102.406255][ T6133] bprm_execve+0x8a2/0x1470 [ 102.410760][ T6133] do_execveat_common+0x50d/0x690 [ 102.415788][ T6133] __x64_sys_execve+0x97/0xc0 [ 102.420550][ T6133] page last free pid 5495 tgid 5495 stack trace: [ 102.426874][ T6133] __free_frozen_pages+0xbf0/0xd00 [ 102.431990][ T6133] __slab_free+0x274/0x2c0 [ 102.436414][ T6133] qlist_free_all+0x99/0x100 [ 102.441095][ T6133] kasan_quarantine_reduce+0x148/0x160 [ 102.446555][ T6133] __kasan_slab_alloc+0x22/0x80 [ 102.451402][ T6133] __kmalloc_noprof+0x316/0x760 [ 102.456333][ T6133] tomoyo_supervisor+0xc22/0x1570 [ 102.461353][ T6133] tomoyo_env_perm+0x151/0x1f0 [ 102.466207][ T6133] tomoyo_find_next_domain+0x15cb/0x1aa0 [ 102.471837][ T6133] tomoyo_bprm_check_security+0x11b/0x180 [ 102.477637][ T6133] security_bprm_check+0x85/0x240 [ 102.482755][ T6133] bprm_execve+0x8a2/0x1470 [ 102.487363][ T6133] do_execveat_common+0x50d/0x690 [ 102.492385][ T6133] __x64_sys_execve+0x97/0xc0 [ 102.497059][ T6133] do_syscall_64+0x14d/0xf80 [ 102.501649][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.507540][ T6133] [ 102.509860][ T6133] Memory state around the buggy address: [ 102.515578][ T6133] ffff8880222b8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.523735][ T6133] ffff8880222b8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.532006][ T6133] >ffff8880222b8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.540753][ T6133] ^ [ 102.545359][ T6133] ffff8880222b8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.553580][ T6133] ffff8880222b8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.561634][ T6133] ================================================================== [ 102.618613][ T6133] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.626211][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 102.635342][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.645529][ T6133] Call Trace: [ 102.648814][ T6133] [ 102.651802][ T6133] vpanic+0x56c/0xa60 [ 102.655799][ T6133] ? __pfx_vpanic+0x10/0x10 [ 102.660402][ T6133] ? __pfx___schedule+0x10/0x10 [ 102.665294][ T6133] panic+0xc5/0xd0 [ 102.669120][ T6133] ? __pfx_panic+0x10/0x10 [ 102.673536][ T6133] ? preempt_schedule_thunk+0x16/0x30 [ 102.678925][ T6133] ? v4l2_open+0x395/0x3a0 [ 102.683440][ T6133] check_panic_on_warn+0x89/0xb0 [ 102.688468][ T6133] ? v4l2_open+0x395/0x3a0 [ 102.692888][ T6133] end_report+0x73/0x180 [ 102.697237][ T6133] ? v4l2_open+0x395/0x3a0 [ 102.701753][ T6133] kasan_report+0x128/0x150 [ 102.706432][ T6133] ? v4l2_open+0x395/0x3a0 [ 102.710874][ T6133] v4l2_open+0x395/0x3a0 [ 102.715297][ T6133] chrdev_open+0x4cd/0x5e0 [ 102.719734][ T6133] ? __pfx_chrdev_open+0x10/0x10 [ 102.724681][ T6133] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 102.731022][ T6133] ? __pfx_chrdev_open+0x10/0x10 [ 102.735958][ T6133] do_dentry_open+0x785/0x14e0 [ 102.740727][ T6133] vfs_open+0x3b/0x340 [ 102.744803][ T6133] ? path_openat+0x2df0/0x3860 [ 102.749657][ T6133] path_openat+0x2e08/0x3860 [ 102.754249][ T6133] ? __pfx_stack_trace_save+0x10/0x10 [ 102.759720][ T6133] ? stack_depot_save_flags+0x33/0x810 [ 102.765294][ T6133] ? __pfx_path_openat+0x10/0x10 [ 102.770339][ T6133] ? __x64_sys_openat+0x138/0x170 [ 102.775391][ T6133] ? do_syscall_64+0x14d/0xf80 [ 102.780161][ T6133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.786404][ T6133] ? __lock_acquire+0x6b5/0x2cf0 [ 102.791368][ T6133] do_file_open+0x23e/0x4a0 [ 102.795873][ T6133] ? __pfx_do_file_open+0x10/0x10 [ 102.800901][ T6133] ? _raw_spin_unlock+0x28/0x50 [ 102.805864][ T6133] ? alloc_fd+0x64b/0x6c0 [ 102.810221][ T6133] do_sys_openat2+0x113/0x200 [ 102.814917][ T6133] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.820211][ T6133] ? exc_page_fault+0x6a/0xc0 [ 102.824986][ T6133] ? do_user_addr_fault+0xc6f/0x1340 [ 102.830301][ T6133] __x64_sys_openat+0x138/0x170 [ 102.835256][ T6133] do_syscall_64+0x14d/0xf80 [ 102.840108][ T6133] ? trace_irq_disable+0x3b/0x150 [ 102.845314][ T6133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.851564][ T6133] ? clear_bhb_loop+0x40/0x90 [ 102.856328][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.862311][ T6133] RIP: 0033:0x7fd0d54a7407 [ 102.866724][ T6133] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 102.886501][ T6133] RSP: 002b:00007ffe6f9f2540 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 102.895270][ T6133] RAX: ffffffffffffffda RBX: 00007fd0d5c82880 RCX: 00007fd0d54a7407 [ 102.903242][ T6133] RDX: 0000000000000000 RSI: 00007ffe6f9f2f1d RDI: ffffffffffffff9c [ 102.911210][ T6133] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 102.919263][ T6133] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 102.927234][ T6133] R13: 00007ffe6f9f2790 R14: 00007fd0d5de9000 R15: 00005644847274d8 [ 102.935299][ T6133] [ 102.938781][ T6133] Kernel Offset: disabled [ 102.943134][ T6133] Rebooting in 86400 seconds..