last executing test programs: 4m31.412973323s ago: executing program 2 (id=711): syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000004000000001465e62ea134534135882ebaa694000000e104000000e4000000f9ff0000850000000700000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) 4m24.478232819s ago: executing program 2 (id=722): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000280)='./sys\x00', 0xd931d3864d39dd9b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000240), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r6, r4, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x22, &(0x7f0000000600)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x3, 0x14, 0x68, 0x0, 0x5, 0x5e, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) 4m23.860213626s ago: executing program 2 (id=726): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000080)={0x0, 0x7978, 0x10000, 0xfffffffe, 0xfffffffa}, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0xc02, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x2, 0x26d}}], 0x1, 0x0, 0x0) 4m22.223379476s ago: executing program 2 (id=730): r0 = socket$packet(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_delrule={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x2}, [@FRA_DST={0x14, 0x7, @loopback}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044004}, 0x20044884) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) socket$kcm(0x2, 0xa, 0x2) r1 = socket(0x28, 0x5, 0x0) listen(r1, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r5, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, &(0x7f00000000c0)) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140), 0x0) 4m21.551470168s ago: executing program 2 (id=734): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x68420, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r2 = io_uring_setup(0x1b73, &(0x7f0000000200)={0x0, 0xc685, 0x14, 0x3, 0x2}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0xb3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x27) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f00000000c0)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x11d402, 0x0) 4m14.386305397s ago: executing program 2 (id=742): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff7fff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) 3m58.330681468s ago: executing program 32 (id=742): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff7fff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) 25.769692113s ago: executing program 1 (id=1120): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write(r2, &(0x7f0000000040)="05000000", 0x4) syz_pidfd_open(r1, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000280)='net/protocols\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000a1a000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r0, 0x5f3b7000) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @desc1}, &(0x7f0000000dc0)={0x0, "09a3d7852d6d6d5837c59634fd0c2d63c3a8765d6c395f94da643b5fd0c61d3f85e51561f6bdeb0c1663e8fb6a4800930647d126bbe4ada2bfd6a7ccd5e73de9", 0x3a}, 0x48, 0xfffffffffffffffb) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r9 = add_key$keyring(&(0x7f0000000e80), &(0x7f0000000ec0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r9, 0x0, &(0x7f00000022c0)={'syz', 0x0}, r8) write$uinput_user_dev(r0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x8, 0x0) r10 = openat$zero(0xffffffffffffff9c, 0x0, 0x80c42, 0x0) read(r10, 0x0, 0x0) 23.454188689s ago: executing program 1 (id=1121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0x8, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 15.611505211s ago: executing program 1 (id=1140): socket$kcm(0x2, 0xa, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 15.143046066s ago: executing program 1 (id=1141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x44080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r2, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0x9}, 0x10}}}, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00003bf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) 11.739298971s ago: executing program 3 (id=1149): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x4, r2, 0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)={0xa000201e}) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) socket$inet(0x2, 0x4000000000000001, 0x0) 10.614430467s ago: executing program 3 (id=1151): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 10.559639345s ago: executing program 0 (id=1152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x587081, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000030900010073797a300000004064000000060a01040000000000000000010000000900020073797a32000000000900010073797a300000000038000480340001800c0001007061796c6f61640024000280080001400000000e08000440000000040800024000000000080003"], 0xec}, 0x1, 0x0, 0x0, 0x20050000}, 0x8090) 10.441921284s ago: executing program 4 (id=1153): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 9.072474067s ago: executing program 0 (id=1154): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) open(&(0x7f0000000280)='.\x00', 0x400, 0x0) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0xc841}, 0x4004000) semctl$IPC_RMID(0x0, 0x0, 0x0) 8.582957345s ago: executing program 1 (id=1155): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000085507262600000000000109022400010000800609092102000901222800090581034000002b020000000000000000"], 0x0) socket(0x80000000000000a, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1, r0}) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000080)={0x1, 0x5}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) close(0x3) socket$nl_route(0x10, 0x3, 0x0) 7.933028871s ago: executing program 0 (id=1156): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x4, r2, 0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)={0xa000201e}) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, 0x0) ioprio_get$pid(0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) socket$inet(0x2, 0x4000000000000001, 0x0) 7.716748043s ago: executing program 0 (id=1157): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x587081, 0x4) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) 6.535930611s ago: executing program 0 (id=1158): r0 = socket$rxrpc(0x21, 0x2, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000b8"], 0x28}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x80003, 0xff) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x6, 0x7fffffffffffffff}) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setresgid(0xee00, 0xee01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) recvfrom(r3, 0x0, 0x0, 0x2002, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x4000, 0x35ce9dbc6723c08f, &(0x7f0000000080)) sendmsg(r0, 0x0, 0x0) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$kcm(r7, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005180)=ANY=[], 0x2560}, 0x20000880) 6.484220693s ago: executing program 3 (id=1159): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='dummy_udc.0', 0xb) pselect6(0x40, &(0x7f0000000000)={0x8, 0x2, 0x1, 0x1a4d994a, 0x8, 0xfffffffffffffe00, 0xfffffffffffffffe, 0x8}, 0x0, &(0x7f0000000080)={0x2, 0x8, 0x7, 0x4, 0x3, 0x9, 0x4, 0xfffffffffffffff7}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_udc.0', 0xb) 6.426713751s ago: executing program 4 (id=1160): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x4, r2, 0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)={0xa000201e}) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) socket$inet(0x2, 0x4000000000000001, 0x0) 5.245539785s ago: executing program 4 (id=1161): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={0x1c, 0x3d, 0x301, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendto(r0, &(0x7f0000000440)="67039e6f89edf2f15448fadb96405e515f0b483bc5ab53141be2eca9a0df61559e4e880df14fa285184155482f11b7329a84b87943e2eacbcf9e457bf12bf41201c8be76d698766fffdbee93db88df0b3986f54f83426eee", 0x58, 0x8000, &(0x7f00000005c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xfffff801, @local, 0x757}}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.661183817s ago: executing program 0 (id=1162): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f000001e580), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 2.601948044s ago: executing program 3 (id=1163): socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x288002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r1 = dup2(r0, r0) read$char_usb(r1, &(0x7f0000019300)=""/198, 0xc6) 2.246563208s ago: executing program 3 (id=1164): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f000001e580), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 2.198877247s ago: executing program 4 (id=1165): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) open(&(0x7f0000000280)='.\x00', 0x400, 0x0) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0xc841}, 0x4004000) semctl$IPC_RMID(0x0, 0x0, 0x0) 1.077377459s ago: executing program 4 (id=1166): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x4, r2, 0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)={0xa000201e}) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, 0x0) ioprio_get$pid(0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) socket$inet(0x2, 0x4000000000000001, 0x0) 925.467029ms ago: executing program 1 (id=1167): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x587081, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) 1.447811ms ago: executing program 3 (id=1168): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=1169): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. syzkaller login: [ 92.049106][ T31] cfg80211: failed to load regulatory.db [ 93.153995][ T5590] cgroup: Unknown subsys name 'net' [ 93.377128][ T5590] cgroup: Unknown subsys name 'cpuset' [ 93.449123][ T5590] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.426094][ T5590] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.103464][ T4917] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.109643][ T4917] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.131499][ T4917] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.145981][ T4917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.151143][ T4917] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.181708][ T4917] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.213415][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.229078][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.261151][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.261661][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.266843][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.307694][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.335316][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.336427][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.340971][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.345106][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.346910][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.359916][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.404882][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.420092][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.421580][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.432882][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.477719][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.488894][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.494084][ T4917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.350123][ T5619] Bluetooth: hci4: command tx timeout [ 100.508541][ T5619] Bluetooth: hci3: command tx timeout [ 100.598509][ T5619] Bluetooth: hci1: command tx timeout [ 100.598623][ T60] Bluetooth: hci0: command tx timeout [ 100.598634][ T5619] Bluetooth: hci2: command tx timeout [ 101.158955][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.160085][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.160231][ T5607] bridge_slave_0: entered allmulticast mode [ 101.162149][ T5607] bridge_slave_0: entered promiscuous mode [ 101.219599][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.219716][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.219839][ T5611] bridge_slave_0: entered allmulticast mode [ 101.221998][ T5611] bridge_slave_0: entered promiscuous mode [ 101.225305][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.225453][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.225806][ T5609] bridge_slave_0: entered allmulticast mode [ 101.227681][ T5609] bridge_slave_0: entered promiscuous mode [ 101.237571][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.237681][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.237832][ T5607] bridge_slave_1: entered allmulticast mode [ 101.249193][ T5607] bridge_slave_1: entered promiscuous mode [ 101.334664][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.334853][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.335028][ T5611] bridge_slave_1: entered allmulticast mode [ 101.337361][ T5611] bridge_slave_1: entered promiscuous mode [ 101.367422][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.367527][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.367686][ T5609] bridge_slave_1: entered allmulticast mode [ 101.374725][ T5609] bridge_slave_1: entered promiscuous mode [ 101.412003][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.412126][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.412269][ T5610] bridge_slave_0: entered allmulticast mode [ 101.414150][ T5610] bridge_slave_0: entered promiscuous mode [ 101.416017][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.416147][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.416308][ T5606] bridge_slave_0: entered allmulticast mode [ 101.421144][ T5606] bridge_slave_0: entered promiscuous mode [ 101.509385][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.509510][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.509735][ T5610] bridge_slave_1: entered allmulticast mode [ 101.511879][ T5610] bridge_slave_1: entered promiscuous mode [ 101.512934][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.513076][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.513194][ T5606] bridge_slave_1: entered allmulticast mode [ 101.515026][ T5606] bridge_slave_1: entered promiscuous mode [ 101.592534][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.635270][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.641793][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.658959][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.704379][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.706924][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.739670][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.747348][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.815187][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.817639][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.865286][ T5607] team0: Port device team_slave_0 added [ 101.904538][ T5611] team0: Port device team_slave_0 added [ 101.907011][ T5609] team0: Port device team_slave_0 added [ 101.913760][ T5607] team0: Port device team_slave_1 added [ 101.972872][ T5611] team0: Port device team_slave_1 added [ 101.976069][ T5609] team0: Port device team_slave_1 added [ 102.005083][ T5610] team0: Port device team_slave_0 added [ 102.007433][ T5606] team0: Port device team_slave_0 added [ 102.061849][ T5610] team0: Port device team_slave_1 added [ 102.063884][ T5606] team0: Port device team_slave_1 added [ 102.104908][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.104922][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.104942][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.168767][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.168786][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.168816][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.170058][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.170072][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.170102][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.173008][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.173023][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.173053][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.338875][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.338893][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.338921][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.341763][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.341775][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.341795][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.395200][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.395240][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.395335][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.409943][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.409963][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.410025][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.428461][ T60] Bluetooth: hci4: command tx timeout [ 102.536153][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.536166][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.536185][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.537222][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.537233][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.537253][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.588716][ T60] Bluetooth: hci3: command tx timeout [ 102.668586][ T60] Bluetooth: hci0: command tx timeout [ 102.668604][ T5613] Bluetooth: hci2: command tx timeout [ 102.668622][ T60] Bluetooth: hci1: command tx timeout [ 103.126800][ T5607] hsr_slave_0: entered promiscuous mode [ 103.127866][ T5607] hsr_slave_1: entered promiscuous mode [ 103.163377][ T5611] hsr_slave_0: entered promiscuous mode [ 103.164317][ T5611] hsr_slave_1: entered promiscuous mode [ 103.165165][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 103.165249][ T5611] Cannot create hsr debugfs directory [ 103.191669][ T5609] hsr_slave_0: entered promiscuous mode [ 103.192715][ T5609] hsr_slave_1: entered promiscuous mode [ 103.193559][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 103.193578][ T5609] Cannot create hsr debugfs directory [ 103.255534][ T5610] hsr_slave_0: entered promiscuous mode [ 103.256582][ T5610] hsr_slave_1: entered promiscuous mode [ 103.257251][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 103.257269][ T5610] Cannot create hsr debugfs directory [ 103.284539][ T5606] hsr_slave_0: entered promiscuous mode [ 103.285561][ T5606] hsr_slave_1: entered promiscuous mode [ 103.286224][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 103.286241][ T5606] Cannot create hsr debugfs directory [ 104.362466][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.412354][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.430454][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.476827][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.482933][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.510334][ T60] Bluetooth: hci4: command tx timeout [ 104.530387][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.558200][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.583184][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.678962][ T60] Bluetooth: hci3: command tx timeout [ 104.710529][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.748604][ T60] Bluetooth: hci1: command tx timeout [ 104.748622][ T5619] Bluetooth: hci0: command tx timeout [ 104.748639][ T60] Bluetooth: hci2: command tx timeout [ 104.755960][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.783116][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.802426][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.807356][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.843185][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.869705][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.904076][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.064801][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.102967][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.119204][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.169104][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.184546][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.216077][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.246024][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.280669][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.411480][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.447315][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.467296][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.504384][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.517877][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.542669][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.573858][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.617403][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.731811][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.793806][ T5606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.824140][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.850175][ T5606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.912836][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.916088][ T5606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.942284][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.963161][ T5606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.982570][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.023774][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.077451][ T3396] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.077662][ T3396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.121154][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.158844][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.159645][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.260746][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.303676][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.319735][ T1446] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.319925][ T1446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.391059][ T1446] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.391157][ T1446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.468178][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.511634][ T1446] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.511751][ T1446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.519975][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.588574][ T5613] Bluetooth: hci4: command tx timeout [ 106.606688][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.606819][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.739952][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.751848][ T5613] Bluetooth: hci3: command tx timeout [ 106.800838][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.829068][ T5619] Bluetooth: hci2: command tx timeout [ 106.829099][ T5619] Bluetooth: hci0: command tx timeout [ 106.829156][ T5613] Bluetooth: hci1: command tx timeout [ 106.884261][ T1446] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.884423][ T1446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.971297][ T1446] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.971534][ T1446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.056223][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.112929][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.113181][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.209788][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.210631][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.660203][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.157171][ T5607] veth0_vlan: entered promiscuous mode [ 108.226202][ T5607] veth1_vlan: entered promiscuous mode [ 108.298020][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.518328][ T5607] veth0_macvtap: entered promiscuous mode [ 108.588860][ T5607] veth1_macvtap: entered promiscuous mode [ 108.595237][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.740357][ T5609] veth0_vlan: entered promiscuous mode [ 108.772688][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.841302][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.873888][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.904861][ T5609] veth1_vlan: entered promiscuous mode [ 109.144325][ T5610] veth0_vlan: entered promiscuous mode [ 109.163416][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.387097][ T5610] veth1_vlan: entered promiscuous mode [ 109.493858][ T5609] veth0_macvtap: entered promiscuous mode [ 109.566390][ T5609] veth1_macvtap: entered promiscuous mode [ 109.642451][ T5611] veth0_vlan: entered promiscuous mode [ 109.693599][ T3304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.693626][ T3304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.756151][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.757239][ T5611] veth1_vlan: entered promiscuous mode [ 109.833191][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.852515][ T5610] veth0_macvtap: entered promiscuous mode [ 109.883392][ T3408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.883414][ T3408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.886177][ T5610] veth1_macvtap: entered promiscuous mode [ 110.063497][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.129021][ T5606] veth0_vlan: entered promiscuous mode [ 110.173301][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.239667][ T5611] veth0_macvtap: entered promiscuous mode [ 110.373031][ T5611] veth1_macvtap: entered promiscuous mode [ 110.423240][ T5606] veth1_vlan: entered promiscuous mode [ 110.467867][ T3408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.467889][ T3408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.710174][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.981996][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.985654][ T3396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.985673][ T3396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.340283][ T3304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.340304][ T3304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.444527][ T5606] veth0_macvtap: entered promiscuous mode [ 111.710824][ T5606] veth1_macvtap: entered promiscuous mode [ 111.913504][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.913524][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.499552][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.527954][ T3396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.527976][ T3396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.580583][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.858176][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 113.409291][ T1539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.409316][ T1539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.540942][ T5820] sch_tbf: peakrate 7 is lower than or equals to rate 12998416500665246951 ! [ 113.601721][ T5736] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.878650][ T5736] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 113.878683][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.878704][ T5736] usb 2-1: Product: syz [ 113.878719][ T5736] usb 2-1: Manufacturer: syz [ 113.878734][ T5736] usb 2-1: SerialNumber: syz [ 114.241992][ T1539] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.688997][ T3396] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.728075][ T5736] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 114.728140][ T5736] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 115.067311][ T3304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.067331][ T3304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.429829][ T3396] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.430221][ T3396] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.541738][ T1539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.541757][ T1539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.593430][ T5334] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.801671][ T5835] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.830877][ T1446] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.870508][ T1446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.921036][ T5334] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 115.921069][ T5334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.921091][ T5334] usb 4-1: Product: syz [ 115.921107][ T5334] usb 4-1: Manufacturer: syz [ 115.921123][ T5334] usb 4-1: SerialNumber: syz [ 115.979070][ T5736] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 115.980446][ T5736] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 116.238652][ T5736] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 116.238705][ T5736] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 116.321335][ T5736] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 116.341693][ T1446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.412836][ T5736] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 116.513062][ T5736] usb 2-1: USB disconnect, device number 2 [ 116.523005][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.537374][ T1184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.863957][ T1184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.867440][ T1184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.867604][ T1184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.868127][ T1184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.870978][ T1184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.873830][ T1184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.875043][ T1184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.879603][ T1184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.880256][ T1184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.896499][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.282995][ T1184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.707574][ T5334] usb 4-1: cannot find UAC_HEADER [ 117.816502][ T5334] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 118.064816][ T5334] usb 4-1: cannot find UAC_HEADER [ 118.082311][ T5334] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 118.586956][ T5334] usb 4-1: cannot find UAC_HEADER [ 118.816032][ T5334] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 119.458104][ T37] audit: type=1326 audit(1785914473.992:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5859 comm="syz.3.20" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f17a48deec9 code=0x7ffc0000 [ 119.458159][ T37] audit: type=1326 audit(1785914473.992:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5859 comm="syz.3.20" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f17a489ae3b code=0x7ffc0000 [ 119.458217][ T37] audit: type=1326 audit(1785914473.992:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5859 comm="syz.3.20" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 119.458744][ T37] audit: type=1326 audit(1785914473.992:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5859 comm="syz.3.20" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 119.466820][ T37] audit: type=1326 audit(1785914474.002:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5859 comm="syz.3.20" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f17a489a52c code=0x7ffc0000 [ 119.566287][ T37] audit: type=1326 audit(1785914474.002:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5859 comm="syz.3.20" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f17a489a58e code=0x7ffc0000 [ 119.566354][ T37] audit: type=1326 audit(1785914474.072:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5859 comm="syz.3.20" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 119.566727][ T37] audit: type=1326 audit(1785914474.072:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5859 comm="syz.3.20" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 119.597083][ T37] audit: type=1326 audit(1785914474.122:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5859 comm="syz.3.20" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 119.597453][ T37] audit: type=1326 audit(1785914474.122:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5859 comm="syz.3.20" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 121.590850][ T5334] usb 4-1: USB disconnect, device number 2 [ 123.413077][ T5907] Bluetooth: MGMT ver 1.23 [ 123.413130][ T5907] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 123.673288][ T5909] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 123.707947][ T5901] zonefs (nullb0) ERROR: Not a zoned block device [ 125.432131][ T31] hid-generic 0006:79D90A04:10000.0001: unknown main item tag 0x0 [ 125.879808][ T31] hid-generic 0006:79D90A04:10000.0001: hidraw0: VIRTUAL HID v7f.ff Device [syz0] on syz1 [ 126.749507][ T5931] ip6gretap0: entered promiscuous mode [ 126.778223][ T5931] vlan2: entered promiscuous mode [ 128.204827][ T5945] misc userio: Can't change port type on an already running userio instance [ 128.225720][ T5940] misc userio: Can't change port type on an already running userio instance [ 128.731012][ T5940] misc userio: Can't change port type on an already running userio instance [ 128.731242][ T5940] misc userio: Can't change port type on an already running userio instance [ 128.731483][ T5940] misc userio: Can't change port type on an already running userio instance [ 128.731607][ T5940] misc userio: Can't change port type on an already running userio instance [ 128.731824][ T5940] misc userio: Can't change port type on an already running userio instance [ 128.731941][ T5940] misc userio: Can't change port type on an already running userio instance [ 129.614028][ T5954] jffs2: notice: (5954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 133.183070][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.183191][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.034545][ T5620] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.189891][ T5620] usb 2-1: Using ep0 maxpacket: 32 [ 134.192232][ T5620] usb 2-1: config 0 has no interfaces? [ 134.204636][ T5620] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 134.204721][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.204781][ T5620] usb 2-1: Product: syz [ 134.204824][ T5620] usb 2-1: Manufacturer: syz [ 134.204867][ T5620] usb 2-1: SerialNumber: syz [ 134.406115][ T5620] usb 2-1: config 0 descriptor?? [ 134.761119][ T9] usb 2-1: USB disconnect, device number 3 [ 136.480736][ T6033] Zero length message leads to an empty skb [ 138.499293][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 138.499312][ T37] audit: type=1800 audit(1785914493.002:64): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.76" name="zoned" dev="configfs" ino=9317 res=0 errno=0 [ 138.509102][ T37] audit: type=1800 audit(1785914493.042:65): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.76" name="power" dev="configfs" ino=10288 res=0 errno=0 [ 138.580121][ T6067] zonefs (nullb0) ERROR: Not a zoned block device [ 138.902681][ T9] IPVS: starting estimator thread 0... [ 138.988711][ T6075] IPVS: using max 8 ests per chain, 19200 per kthread [ 139.437884][ T6084] ALSA: mixer_oss: invalid OSS volume '' [ 139.437909][ T6084] ALSA: mixer_oss: invalid OSS volume 'üÄ6q.Xí%ç!:ðZZÓýÉ(ð/=ºÑ>fî½¢' [ 139.460608][ T6084] ALSA: mixer_oss: invalid OSS volume '' [ 139.841649][ T37] audit: type=1800 audit(1785914494.382:66): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.83" name="file0" dev="overlay" ino=103 res=0 errno=0 [ 140.335795][ T6101] Illegal XDP return value 4294967274 on prog (id 9) dev syz_tun, expect packet loss! [ 140.771730][ T6108] ip6_vti0: Master is either lo or non-ether device [ 140.911029][ T6107] can: request_module (can-proto-0) failed. [ 141.283082][ T6107] batman_adv: batadv0: Adding interface: dummy0 [ 141.283101][ T6107] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.283135][ T6107] batman_adv: batadv0: Interface activated: dummy0 [ 141.782336][ T6114] batadv0: mtu less than device minimum [ 141.851361][ T6114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.857743][ T6114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.913459][ T6114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.957761][ T6114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 141.994390][ T6114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.034989][ T36] libceph: mon0 (1)127.0.0.1:8080 socket error on write [ 142.060151][ T6118] ceph: No mds server is up or the cluster is laggy [ 142.080650][ T6114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.122822][ T36] libceph: mon0 (1)127.0.0.1:8080 socket error on write [ 142.126039][ T6114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.160161][ T6114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.188162][ T6114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 142.480389][ T36] libceph: mon0 (1)127.0.0.1:8080 socket error on write [ 143.776249][ T6158] syz.3.101 uses obsolete (PF_INET,SOCK_PACKET) [ 145.394794][ T6169] syzkaller0: entered promiscuous mode [ 145.394814][ T6169] syzkaller0: entered allmulticast mode [ 145.483175][ T6169] tipc: Started in network mode [ 145.483206][ T6169] tipc: Node identity 9e16e2aa163c, cluster identity 4711 [ 145.483717][ T6169] tipc: Enabled bearer , priority 0 [ 145.537869][ T6168] tipc: Resetting bearer [ 146.067434][ T6168] tipc: Disabling bearer [ 146.736364][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 152.808404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.571052][ T5615] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.802583][ T5615] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.802641][ T5615] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 154.802665][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.856679][ T5615] usb 2-1: config 0 descriptor?? [ 154.886755][ T5615] pwc: Askey VC010 type 2 USB webcam detected. [ 154.992312][ T6269] process 'syz.0.136' launched './file0' with NULL argv: empty string added [ 155.021279][ T6269] Invalid argument reading file caps for ./file0 [ 155.119279][ T5615] pwc: send_video_command error -71 [ 155.119317][ T5615] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 155.119561][ T5615] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 155.172852][ T5615] usb 2-1: USB disconnect, device number 4 [ 156.476816][ T5787] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.500720][ T6286] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 156.569043][ T6283] overlayfs: failed to decode file handle (len=16, type=0, flags=0, err=-22) [ 156.648486][ T5787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.648548][ T5787] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.648574][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.692770][ T5787] usb 2-1: config 0 descriptor?? [ 156.735461][ T5787] pwc: Askey VC010 type 2 USB webcam detected. [ 157.188486][ T6262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.189638][ T6262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.249873][ T6262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.286121][ T6262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.337396][ T6262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.378226][ T6262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.380992][ T6297] CIFS: Attempting to mount //127.0.0.1/share [ 157.398558][ T5787] pwc: recv_control_msg error -71 req 02 val 2b00 [ 157.404848][ T5787] pwc: recv_control_msg error -71 req 02 val 2700 [ 157.407015][ T5787] pwc: recv_control_msg error -71 req 02 val 2c00 [ 157.407494][ T5787] pwc: recv_control_msg error -71 req 04 val 1000 [ 157.424644][ T5787] pwc: recv_control_msg error -71 req 04 val 1300 [ 157.431011][ T5787] pwc: recv_control_msg error -71 req 04 val 1400 [ 157.453094][ T5787] pwc: recv_control_msg error -71 req 02 val 2000 [ 157.453568][ T5787] pwc: recv_control_msg error -71 req 02 val 2100 [ 157.453983][ T5787] pwc: recv_control_msg error -71 req 04 val 1500 [ 157.455190][ T5787] pwc: recv_control_msg error -71 req 02 val 2500 [ 157.462673][ T5787] pwc: recv_control_msg error -71 req 02 val 2400 [ 157.477331][ T5787] pwc: recv_control_msg error -71 req 02 val 2600 [ 157.480907][ T5787] pwc: recv_control_msg error -71 req 02 val 2900 [ 157.485592][ T5787] pwc: recv_control_msg error -71 req 02 val 2800 [ 157.513523][ T5787] pwc: recv_control_msg error -71 req 04 val 1100 [ 157.513910][ T5787] pwc: recv_control_msg error -71 req 04 val 1200 [ 157.741004][ T5787] pwc: Registered as video103. [ 157.831726][ T5787] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 158.138990][ T6305] CIFS: VFS: Invalid response size 0 for command 0 [ 158.185338][ T6305] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 158.187037][ T6305] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x40 [ 158.420124][ T6297] CIFS: VFS: cifs_mount failed w/return code = -512 [ 158.855876][ T5787] usb 2-1: USB disconnect, device number 5 [ 162.275129][ T6339] fuse: fd is not a fuse device [ 162.525108][ T6343] loop5: detected capacity change from 0 to 7 [ 162.667235][ T6343] Dev loop5: unable to read RDB block 7 [ 162.667287][ T6343] loop5: AHDI p1 p3 [ 162.667310][ T6343] loop5: partition table partially beyond EOD, truncated [ 162.667565][ T6343] loop5: p1 start 2036297842 is beyond EOD, truncated [ 163.328472][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 163.528452][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 163.531232][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.531258][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.531278][ T9] usb 5-1: config 0 has no interface number 0 [ 163.531319][ T9] usb 5-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.531347][ T9] usb 5-1: config 0 interface 1 has no altsetting 0 [ 163.531387][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 163.531411][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.646173][ T9] usb 5-1: config 0 descriptor?? [ 163.726902][ T9] hso 5-1:0.1: Failed to find BULK eps [ 163.932120][ T9] usb 5-1: USB disconnect, device number 2 [ 173.161465][ T6461] netlink: 'syz.2.198': attribute type 4 has an invalid length. [ 173.541054][ T6465] netlink: 68 bytes leftover after parsing attributes in process `syz.4.194'. [ 174.662422][ T6470] syz.2.200 (6470) used greatest stack depth: 17384 bytes left [ 176.073105][ T6477] warning: `syz.0.202' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 176.303301][ T6472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.880111][ T6495] syzkaller0: entered promiscuous mode [ 176.880136][ T6495] syzkaller0: entered allmulticast mode [ 180.060245][ T6532] ======================================================= [ 180.060245][ T6532] WARNING: The mand mount option has been deprecated and [ 180.060245][ T6532] and is ignored by this kernel. Remove the mand [ 180.060245][ T6532] option from the mount to silence this warning. [ 180.060245][ T6532] ======================================================= [ 181.458395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 181.468370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 181.478385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 181.488383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 181.498371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 181.508375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 182.118382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 182.148382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 182.158372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 184.542955][ T6561] net_ratelimit: 10 callbacks suppressed [ 184.542975][ T6561] openvswitch: netlink: IP tunnel dst address not specified [ 187.931183][ T6561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.458930][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 194.655010][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.661015][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.959125][ T5721] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 199.382144][ T5721] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 199.382177][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.680494][ T5721] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 199.874131][ T5721] usb 3-1: USB disconnect, device number 2 [ 206.239478][ T6713] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 206.239499][ T6713] UDF-fs: Scanning with blocksize 512 failed [ 206.362538][ T6713] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 206.366054][ T6713] UDF-fs: Scanning with blocksize 1024 failed [ 206.366460][ T6713] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 206.366474][ T6713] UDF-fs: Scanning with blocksize 2048 failed [ 206.366691][ T6713] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 206.366702][ T6713] UDF-fs: Scanning with blocksize 4096 failed [ 209.212459][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 209.241267][ T6757] vlan2: entered promiscuous mode [ 209.241284][ T6757] hsr0: entered promiscuous mode [ 209.269036][ T6757] vlan2: entered allmulticast mode [ 209.269058][ T6757] hsr0: entered allmulticast mode [ 209.269072][ T6757] hsr_slave_0: entered allmulticast mode [ 209.269112][ T6757] hsr_slave_1: entered allmulticast mode [ 209.429926][ T6760] hsr_slave_0: left promiscuous mode [ 209.928412][ T6760] hsr_slave_1: left promiscuous mode [ 214.667722][ T5613] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 215.748433][ T821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 216.068442][ T821] usb 1-1: device descriptor read/64, error -71 [ 217.432052][ T821] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 217.558643][ T821] usb 1-1: device descriptor read/64, error -71 [ 217.668824][ T821] usb usb1-port1: attempt power cycle [ 219.200525][ T6848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.205881][ T6848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.268814][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 222.430931][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 222.430970][ T5619] Bluetooth: hci4: command 0x0406 tx timeout [ 222.431139][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 222.431161][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 229.514490][ T6159] kernel read not supported for file /vga_arbiter (pid: 6159 comm: kworker/1:7) [ 230.348674][ T198] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 230.475815][ T6973] futex_wake_op: syz.3.344 tries to shift op by 144; fix this program [ 230.477735][ T6973] futex_wake_op: syz.3.344 tries to shift op by 144; fix this program [ 230.511063][ T198] usb 3-1: Using ep0 maxpacket: 32 [ 230.524731][ T198] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 230.524762][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.524786][ T198] usb 3-1: Product: syz [ 230.524801][ T198] usb 3-1: Manufacturer: syz [ 230.524817][ T198] usb 3-1: SerialNumber: syz [ 230.597445][ T198] usb 3-1: config 0 descriptor?? [ 230.638998][ T198] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 231.644827][ T198] gspca_ov534_9: reg_w failed -110 [ 231.742018][ T6983] overlayfs: failed to clone upperpath [ 232.068469][ T198] gspca_ov534_9: Unknown sensor 0000 [ 232.068568][ T198] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 232.113164][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 234.005590][ T198] usb 3-1: USB disconnect, device number 3 [ 240.980340][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 241.208501][ T198] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 241.363580][ T198] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 241.363616][ T198] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 241.397696][ T198] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 241.397728][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.397768][ T198] usb 2-1: Product: syz [ 241.397784][ T198] usb 2-1: Manufacturer: syz [ 241.397800][ T198] usb 2-1: SerialNumber: syz [ 241.488430][ T198] usb 2-1: config 0 descriptor?? [ 241.490284][ T7089] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.490511][ T7089] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.650220][ T7098] netlink: 'syz.4.382': attribute type 2 has an invalid length. [ 241.650245][ T7098] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 242.641843][ T7102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 242.642990][ T7102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 243.310948][ T198] Error reading MAC address [ 243.362094][ T198] usb 2-1: USB disconnect, device number 6 [ 245.041549][ T5334] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 245.245340][ T5334] usb 5-1: config index 0 descriptor too short (expected 143, got 100) [ 245.245428][ T5334] usb 5-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 0.00 [ 245.245453][ T5334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.402250][ T7129] capability: warning: `syz.3.394' uses 32-bit capabilities (legacy support in use) [ 245.419348][ T37] audit: type=1804 audit(1785914599.872:67): pid=7124 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.391" name="bus" dev="ramfs" ino=13428 res=1 errno=0 [ 245.464992][ T37] audit: type=1804 audit(1785914600.002:68): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.391" name="bus" dev="ramfs" ino=13428 res=1 errno=0 [ 245.918997][ T7135] CIFS: Attempting to mount //127.0.0.1/share [ 246.574600][ T7135] CIFS: VFS: Error connecting to socket. Aborting operation. [ 246.574663][ T7135] CIFS: VFS: cifs_mount failed w/return code = -4 [ 248.412153][ T6159] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 248.674878][ T6159] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice= 1.00 [ 248.674912][ T6159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.791461][ T5334] usb 5-1: USB disconnect, device number 3 [ 249.961562][ T7171] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 250.046002][ T5617] Bluetooth: hci5: Can't claim NULL iso interface [ 250.056575][ T5617] Bluetooth: hci5: Failed to get device id (-32) [ 250.056725][ T5617] Bluetooth: hci5: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported. [ 252.389714][ T7197] jffs2: notice: (7197) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 252.962970][ T6159] usb 2-1: USB disconnect, device number 7 [ 256.614526][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.614598][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.994227][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 256.994250][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 262.174413][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 262.174436][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 262.205507][ T194] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.205639][ T194] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.205747][ T194] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.205840][ T194] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.490892][ T6619] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 265.797665][ T6619] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 265.797700][ T6619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.797724][ T6619] usb 5-1: Product: syz [ 265.797739][ T6619] usb 5-1: Manufacturer: syz [ 265.797755][ T6619] usb 5-1: SerialNumber: syz [ 266.691367][ T7290] netlink: 'syz.1.436': attribute type 2 has an invalid length. [ 266.691394][ T7290] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 266.893430][ T6619] usb 5-1: cannot find UAC_HEADER [ 266.893991][ T6619] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 266.908221][ T6619] usb 5-1: cannot find UAC_HEADER [ 266.922776][ T6619] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 266.931110][ T6619] usb 5-1: cannot find UAC_HEADER [ 266.931597][ T6619] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 269.736551][ T6619] usb 5-1: USB disconnect, device number 4 [ 275.138022][ T7324] binder: 7323:7324 ioctl c0306201 0 returned -14 [ 277.922472][ T7360] openvswitch: netlink: IP tunnel dst address not specified [ 278.018055][ T7360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.160354][ T7399] binder: 7395:7399 ioctl c0306201 0 returned -14 [ 286.433856][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 287.586451][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 297.135595][ T7473] tipc: Started in network mode [ 297.135633][ T7473] tipc: Node identity 7ef104ecfa1b, cluster identity 4711 [ 297.136047][ T7473] tipc: Enabled bearer , priority 0 [ 297.263142][ T7473] tipc: Resetting bearer [ 297.479608][ T7472] tipc: Disabling bearer [ 303.394899][ T7525] futex_wake_op: syz.4.506 tries to shift op by 144; fix this program [ 303.422526][ T7525] futex_wake_op: syz.4.506 tries to shift op by 144; fix this program [ 309.675307][ T7562] virtio-fs: tag not found [ 311.048750][ T37] audit: type=1326 audit(1785914921.590:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.3.519" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 311.048806][ T37] audit: type=1326 audit(1785914921.590:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.3.519" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 311.119989][ T37] audit: type=1326 audit(1785914921.650:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.3.519" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 311.123403][ T37] audit: type=1326 audit(1785914921.660:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.3.519" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 311.123457][ T37] audit: type=1326 audit(1785914921.660:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.3.519" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 311.123902][ T37] audit: type=1326 audit(1785914921.660:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.3.519" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 311.124619][ T37] audit: type=1326 audit(1785914921.660:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.3.519" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 311.124672][ T37] audit: type=1326 audit(1785914921.660:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.3.519" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 311.128380][ T37] audit: type=1326 audit(1785914921.660:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.3.519" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 311.128435][ T37] audit: type=1326 audit(1785914921.660:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7585 comm="syz.3.519" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a48de0d9 code=0x7ffc0000 [ 311.399862][ T7591] openvswitch: netlink: IP tunnel dst address not specified [ 311.429571][ T7591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.837558][ T7600] loop3: detected capacity change from 0 to 7 [ 312.889469][ T7600] Dev loop3: unable to read RDB block 7 [ 312.889526][ T7600] loop3: unable to read partition table [ 312.889748][ T7600] loop3: partition table beyond EOD, truncated [ 312.889768][ T7600] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 313.265613][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 313.269997][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'. [ 316.481528][ T7633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 317.303030][ T6619] IPVS: starting estimator thread 0... [ 318.099415][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.099504][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.128840][ T7644] IPVS: using max 7 ests per chain, 16800 per kthread [ 318.473219][ T5617] Bluetooth: hci0: unexpected event for opcode 0x00d0 [ 319.803552][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 320.333736][ T7672] faux_driver vkms: [drm] Unknown color mode 25660; guessing buffer size. [ 322.797867][ T5617] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 323.943543][ T7706] kvm: kvm [7703]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 324.875541][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 326.478891][ T5736] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 326.632079][ T5736] usb 2-1: config 6 has an invalid interface number: 14 but max is 0 [ 326.632112][ T5736] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 326.632134][ T5736] usb 2-1: config 6 has no interface number 0 [ 326.635906][ T5736] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 326.635939][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.635962][ T5736] usb 2-1: Product: syz [ 326.635979][ T5736] usb 2-1: Manufacturer: syz [ 326.636004][ T5736] usb 2-1: SerialNumber: syz [ 327.229826][ T7747] block device autoloading is deprecated and will be removed. [ 329.444626][ T198] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 329.460342][ T5736] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 329.460416][ T5736] command write [95] error -22 [ 329.549779][ T7765] openvswitch: netlink: IP tunnel dst address not specified [ 329.602689][ T5736] usb 2-1: USB disconnect, device number 8 [ 329.698888][ T198] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 329.698922][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.698944][ T198] usb 3-1: Product: syz [ 329.698959][ T198] usb 3-1: Manufacturer: syz [ 329.698975][ T198] usb 3-1: SerialNumber: syz [ 330.298441][ T198] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 330.298504][ T198] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 331.310724][ T7783] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 331.317512][ T7778] IPVS: stopping backup sync thread 7783 ... [ 332.121184][ T198] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 332.121247][ T198] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 332.953919][ T198] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 332.975328][ T198] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 333.832335][ T198] usb 3-1: USB disconnect, device number 4 [ 333.938644][ T7796] mmap: syz.3.581 (7796) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 337.135420][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.584'. [ 337.135450][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.584'. [ 337.729064][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.584'. [ 337.758514][ T7813] openvswitch: netlink: IP tunnel dst address not specified [ 341.223063][ T7853] openvswitch: netlink: IP tunnel dst address not specified [ 345.671474][ T7892] openvswitch: netlink: IP tunnel dst address not specified [ 345.691052][ T7892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.777100][ T5625] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 345.941820][ T7904] Bluetooth: MGMT ver 1.23 [ 346.148994][ T37] kauditd_printk_skb: 83 callbacks suppressed [ 346.149016][ T37] audit: type=1107 audit(1785914956.660:162): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 347.882006][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 353.128584][ T7947] openvswitch: netlink: IP tunnel dst address not specified [ 353.277220][ T7947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.696819][ T7959] pim6reg: entered allmulticast mode [ 361.377987][ T5736] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 362.478407][ T5736] usb 2-1: Using ep0 maxpacket: 32 [ 362.481000][ T5736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.481056][ T5736] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.484900][ T5736] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 362.484931][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 362.484955][ T5736] usb 2-1: Product: syz [ 362.484972][ T5736] usb 2-1: Manufacturer: syz [ 362.484992][ T5736] usb 2-1: SerialNumber: syz [ 362.580693][ T5736] usb 2-1: config 0 descriptor?? [ 364.573116][ T6159] usb 2-1: USB disconnect, device number 9 [ 364.891572][ T7997] openvswitch: netlink: IP tunnel dst address not specified [ 367.128008][ T8014] efs: cannot read volume header [ 370.277762][ T8035] netlink: 'syz.4.645': attribute type 6 has an invalid length. [ 372.407849][ T36] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 372.431024][ T36] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 372.854984][ T36] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 372.865381][ T8028] ceph: No mds server is up or the cluster is laggy [ 373.774883][ T8052] 9pnet_virtio: no channels available for device 127.0.0.1 [ 373.902366][ T36] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 376.616800][ T8070] openvswitch: netlink: IP tunnel dst address not specified [ 376.989965][ T8067] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 379.053064][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.053139][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.178719][ T5735] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 379.417422][ T5735] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 379.417459][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.417482][ T5735] usb 2-1: Product: syz [ 379.417497][ T5735] usb 2-1: Manufacturer: syz [ 379.417514][ T5735] usb 2-1: SerialNumber: syz [ 379.915830][ T5735] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 380.159696][ T5735] usb 2-1: USB disconnect, device number 10 [ 383.726377][ T8120] openvswitch: netlink: IP tunnel dst address not specified [ 383.754026][ T8120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.965788][ T8142] tipc: Enabling of bearer rejected, failed to enable media [ 387.017034][ T8144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.201172][ T8174] openvswitch: netlink: IP tunnel dst address not specified [ 393.250273][ T8174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.348947][ T8177] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 397.097164][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 397.097194][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 400.048214][ T8238] openvswitch: netlink: IP tunnel dst address not specified [ 400.054879][ T8238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.703577][ T821] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 401.774910][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 401.915282][ T821] usb 3-1: device descriptor read/64, error -32 [ 402.161267][ T821] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 403.378454][ T8245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.701'. [ 403.589765][ T8243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.600922][ T821] usb 3-1: unable to get BOS descriptor or descriptor too short [ 403.641233][ T821] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 403.641275][ T821] usb 3-1: can't read configurations, error -71 [ 405.097051][ T821] usb usb3-port1: attempt power cycle [ 408.216562][ T198] IPVS: starting estimator thread 0... [ 408.499134][ T8296] IPVS: using max 7 ests per chain, 16800 per kthread [ 411.762489][ T5334] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 411.962888][ T5334] usb 2-1: Using ep0 maxpacket: 32 [ 411.984275][ T5334] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 411.984311][ T5334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.984333][ T5334] usb 2-1: Product: syz [ 411.984349][ T5334] usb 2-1: Manufacturer: syz [ 411.984369][ T5334] usb 2-1: SerialNumber: syz [ 412.186843][ T5334] usb 2-1: config 0 descriptor?? [ 412.416012][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'. [ 413.152828][ T5334] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 011 [ 413.249146][ T8339] /dev/nullb0: Can't lookup blockdev [ 413.257757][ T8339] /dev/nullb0: Can't lookup blockdev [ 413.807339][ T8303] i2c i2c-1: failure reading status [ 413.908780][ T8341] openvswitch: netlink: IP tunnel dst address not specified [ 413.938690][ T8341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.146934][ T8344] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 414.299113][ T5736] usb 2-1: USB disconnect, device number 11 [ 417.588198][ T8380] netlink: 72 bytes leftover after parsing attributes in process `syz.3.736'. [ 422.491199][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 424.077735][ T8399] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 424.077930][ T8399] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 424.078111][ T8399] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 425.306624][ T5625] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 435.982108][ T5625] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 441.913542][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.913617][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.722158][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.776108][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.792072][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.795795][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.813418][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 444.988587][ T5625] Bluetooth: hci5: command tx timeout [ 447.226462][ T5625] Bluetooth: hci5: command tx timeout [ 448.506718][ T8547] overlayfs: overlapping lowerdir path [ 448.687979][ T1176] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.340505][ T5625] Bluetooth: hci5: command tx timeout [ 451.388323][ T5625] Bluetooth: hci5: command tx timeout [ 452.734933][ T1176] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.806043][ T8572] pim6reg: entered allmulticast mode [ 455.352950][ T1176] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.485428][ T1176] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.625117][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.626336][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.626536][ T8501] bridge_slave_0: entered allmulticast mode [ 462.646285][ T8501] bridge_slave_0: entered promiscuous mode [ 462.712578][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.712664][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.712839][ T8501] bridge_slave_1: entered allmulticast mode [ 462.745552][ T8501] bridge_slave_1: entered promiscuous mode [ 463.124842][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.140970][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.050456][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 464.051393][ T8685] netlink: 43 bytes leftover after parsing attributes in process `syz.1.811'. [ 464.307116][ T8501] team0: Port device team_slave_0 added [ 464.622165][ T8501] team0: Port device team_slave_1 added [ 464.943810][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.943828][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.943859][ T8501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.240784][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.240803][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.240851][ T8501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.612817][ T1176] bridge_slave_1: left allmulticast mode [ 465.612978][ T1176] bridge_slave_1: left promiscuous mode [ 465.685979][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.240881][ T1176] bridge_slave_0: left allmulticast mode [ 466.240920][ T1176] bridge_slave_0: left promiscuous mode [ 466.241187][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.334249][ T1176] pim6reg: left allmulticast mode [ 470.592601][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.644345][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.100481][ T1176] bond0 (unregistering): Released all slaves [ 472.877469][ T8501] hsr_slave_0: entered promiscuous mode [ 472.884623][ T8501] hsr_slave_1: entered promiscuous mode [ 473.279921][ T1176] tipc: Left network mode [ 478.381469][ T8790] gadgetfs: bound to dummy_udc driver [ 480.577469][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 482.824452][ T5625] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 484.249011][ T5625] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 484.666886][ T8840] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 488.574253][ T8879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.106532][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 489.437342][ T5625] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 489.473911][ T8501] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 489.522254][ T8896] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 490.256160][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.325555][ T5721] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 493.591039][ T8501] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 493.614963][ T5721] usb 2-1: device descriptor read/all, error -71 [ 493.755500][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.757001][ T8501] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 493.871684][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.873334][ T8501] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 493.963685][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.740172][ T5625] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 495.581296][ T1176] hsr_slave_0: left promiscuous mode [ 495.659001][ T1176] hsr_slave_1: left promiscuous mode [ 495.698432][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.698567][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.751034][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.751063][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.345731][ T1176] veth1_macvtap: left promiscuous mode [ 496.354630][ T1176] veth0_macvtap: left promiscuous mode [ 496.365741][ T1176] veth1_vlan: left promiscuous mode [ 496.379556][ T1176] veth0_vlan: left promiscuous mode [ 501.583499][ T8983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.675692][ T8979] Bluetooth: hci0: unsupported parameter 255 [ 501.675715][ T8979] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 502.019078][ T1176] team0 (unregistering): Port device team_slave_1 removed [ 502.101471][ T1176] team0 (unregistering): Port device team_slave_0 removed [ 502.364951][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 502.613974][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 502.709257][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 502.730480][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 503.003454][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 503.004778][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 505.440995][ T9014] netlink: 64 bytes leftover after parsing attributes in process `syz.0.881'. [ 505.628428][ T5625] Bluetooth: hci4: command tx timeout [ 507.423153][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.423227][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.753321][ T5625] Bluetooth: hci4: command tx timeout [ 508.270404][ T37] audit: type=1326 audit(1785915117.734:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9033 comm="syz.1.885" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f6810667e57 code=0x0 [ 509.804742][ T5625] Bluetooth: hci4: command tx timeout [ 510.752483][ T9040] pim6reg: entered allmulticast mode [ 511.017641][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.027286][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.154483][ T5625] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 512.867912][ T5625] Bluetooth: hci4: command tx timeout [ 512.915888][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 514.238679][ T9085] netlink: 72 bytes leftover after parsing attributes in process `syz.1.896'. [ 516.785530][ T9108] overlayfs: failed to resolve './cgroup': -2 [ 523.265575][ T5625] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 525.824202][ T9133] pim6reg: entered allmulticast mode [ 526.787575][ T1176] IPVS: stop unused estimator thread 0... [ 528.089131][ T8995] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.089262][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.089472][ T8995] bridge_slave_0: entered allmulticast mode [ 528.140456][ T8995] bridge_slave_0: entered promiscuous mode [ 528.186597][ T8995] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.203636][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.203881][ T8995] bridge_slave_1: entered allmulticast mode [ 528.229610][ T8995] bridge_slave_1: entered promiscuous mode [ 528.662367][ T5625] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 528.801859][ T9179] pim6reg: entered allmulticast mode [ 528.846164][ T8995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.922018][ T8995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.780604][ T5625] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 533.864443][ T8995] team0: Port device team_slave_0 added [ 534.329887][ T9228] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 534.369286][ T9228] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -110 [ 534.370395][ T9228] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 534.390949][ T8995] team0: Port device team_slave_1 added [ 534.637831][ T8995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.637850][ T8995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.637877][ T8995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.678214][ T8995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.678251][ T8995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.678333][ T8995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.792593][ T9243] netlink: 72 bytes leftover after parsing attributes in process `syz.4.922'. [ 535.843223][ T5625] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 536.559803][ T9241] hpfs: Bad magic ... probably not HPFS [ 536.563310][ T9241] hpfs: Bad magic ... probably not HPFS [ 537.985293][ T8995] hsr_slave_0: entered promiscuous mode [ 537.991888][ T8995] hsr_slave_1: entered promiscuous mode [ 538.001075][ T8995] debugfs: 'hsr0' already exists in 'hsr' [ 538.001100][ T8995] Cannot create hsr debugfs directory [ 540.255909][ T9281] netlink: 32 bytes leftover after parsing attributes in process `syz.3.932'. [ 542.535148][ T9294] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 543.504553][ T1176] bridge_slave_1: left allmulticast mode [ 543.504591][ T1176] bridge_slave_1: left promiscuous mode [ 543.504882][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.698706][ T1176] bridge_slave_0: left allmulticast mode [ 543.698743][ T1176] bridge_slave_0: left promiscuous mode [ 543.739101][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.720277][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.896619][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.057316][ T1176] bond0 (unregistering): Released all slaves [ 549.205209][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 552.097890][ T1176] hsr_slave_0: left promiscuous mode [ 552.137593][ T1176] hsr_slave_1: left promiscuous mode [ 552.138739][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.217520][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.216358][ T1176] team0 (unregistering): Port device team_slave_1 removed [ 554.316512][ T1176] team0 (unregistering): Port device team_slave_0 removed [ 554.394549][ T9396] IPVS: set_ctl: invalid protocol: 124 255.255.63.157:0 [ 557.728864][ T9423] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid [ 557.794748][ T9423] fuse: fd is not a fuse device [ 557.815009][ T9423] overlayfs: conflicting options: userxattr,redirect_dir=on [ 562.126285][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 562.173286][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 562.193437][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 562.205380][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 562.208848][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 563.761917][ T9476] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 563.762416][ T9476] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 564.525175][ T5625] Bluetooth: hci5: command tx timeout [ 565.750420][ T9497] syz_tun: entered allmulticast mode [ 566.587544][ T9488] syz_tun: left allmulticast mode [ 567.158578][ T5625] Bluetooth: hci5: command tx timeout [ 568.639548][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.639625][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.899614][ T5625] Bluetooth: hci5: command tx timeout [ 572.138445][ T5625] Bluetooth: hci5: command tx timeout [ 573.545846][ T9545] netlink: 184 bytes leftover after parsing attributes in process `syz.0.976'. [ 579.545678][ T12] bridge_slave_1: left allmulticast mode [ 579.545715][ T12] bridge_slave_1: left promiscuous mode [ 579.546004][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.835283][ T12] bridge_slave_0: left allmulticast mode [ 579.835310][ T12] bridge_slave_0: left promiscuous mode [ 579.835538][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.512441][ T9597] 9p: Bad value for 'wfdno' [ 583.272767][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.334713][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.381465][ T12] bond0 (unregistering): Released all slaves [ 588.241203][ T12] hsr_slave_0: left promiscuous mode [ 588.444344][ T12] hsr_slave_1: left promiscuous mode [ 588.445484][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.486520][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.928267][ T9671] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1006'. [ 590.855058][ T12] team0 (unregistering): Port device team_slave_1 removed [ 590.894178][ T12] team0 (unregistering): Port device team_slave_0 removed [ 591.525493][ T9461] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.525714][ T9461] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.526027][ T9461] bridge_slave_0: entered allmulticast mode [ 591.528796][ T9461] bridge_slave_0: entered promiscuous mode [ 591.551581][ T9461] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.552222][ T9461] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.552870][ T9461] bridge_slave_1: entered allmulticast mode [ 591.560223][ T9461] bridge_slave_1: entered promiscuous mode [ 591.709496][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 591.713929][ T9679] bridge_slave_1: left allmulticast mode [ 591.713963][ T9679] bridge_slave_1: left promiscuous mode [ 591.718675][ T9679] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.062014][ T9679] bridge_slave_0: left allmulticast mode [ 592.062042][ T9679] bridge_slave_0: left promiscuous mode [ 592.062233][ T9679] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.107576][ T9725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.380482][ T9461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.463966][ T9461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.245097][ T9461] team0: Port device team_slave_0 added [ 595.248775][ T9461] team0: Port device team_slave_1 added [ 597.894532][ T9461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.894549][ T9461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.894591][ T9461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.073209][ T5625] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 598.080694][ T9461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.080712][ T9461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.080744][ T9461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.426208][ T9461] hsr_slave_0: entered promiscuous mode [ 599.427171][ T9461] hsr_slave_1: entered promiscuous mode [ 602.089754][ T5625] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 602.755590][ T9461] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 603.009992][ T9461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 603.023397][ T9461] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 603.061963][ T9461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 603.074612][ T9461] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 603.343110][ T9461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 603.345928][ T9461] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 605.488835][ T9461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.243137][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.243803][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.357012][ T5625] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 610.381222][ T9461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.840582][ T9461] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.903535][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.687199][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.067068][ T824] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.102632][ T824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.426070][ T9844] trusted_key: encrypted_key: insufficient parameters specified [ 613.266486][ T9846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.268833][ T9846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.712510][ T5625] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 615.106951][ T5625] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 618.716554][ T9461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.336851][ T37] audit: type=1800 audit(1785915228.880:164): pid=9891 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1052" name="id" dev="configfs" ino=23323 res=0 errno=0 [ 619.412536][ T9888] UDC core: g1: couldn't find an available UDC or it's busy [ 619.773139][ T9904] trusted_key: encrypted_key: insufficient parameters specified [ 621.641967][ T5625] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 622.215913][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 622.307055][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 622.340047][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 622.349393][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 622.368981][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 623.171987][ T5625] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 624.661625][ T5625] Bluetooth: hci4: command tx timeout [ 625.845971][ T5625] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 625.914535][ T9961] trusted_key: encrypted_key: insufficient parameters specified [ 626.741416][ T5625] Bluetooth: hci4: command tx timeout [ 628.841115][ T5625] Bluetooth: hci4: command tx timeout [ 629.726140][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.726215][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.878614][ T5625] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 630.281345][ T821] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 630.445891][ T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.445948][ T821] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 630.446035][ T821] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 630.446060][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.580383][ T821] usb 2-1: config 0 descriptor?? [ 630.667344][ T5625] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 630.997147][ T5625] Bluetooth: hci4: command tx timeout [ 631.369513][ T821] usb 2-1: USB disconnect, device number 14 [ 631.521247][ T5625] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 634.548879][ T5625] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 635.891992][ T9923] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.892139][ T9923] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.892424][ T9923] bridge_slave_0: entered allmulticast mode [ 635.897943][ T9923] bridge_slave_0: entered promiscuous mode [ 635.906378][ T9923] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.906896][ T9923] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.907494][ T9923] bridge_slave_1: entered allmulticast mode [ 635.927426][ T9923] bridge_slave_1: entered promiscuous mode [ 636.144835][ T9923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.386998][ T9923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.677042][ T9923] team0: Port device team_slave_0 added [ 636.710663][ T9923] team0: Port device team_slave_1 added [ 636.781800][ T9923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.781819][ T9923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.781849][ T9923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.784419][ T9923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.784434][ T9923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.784470][ T9923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.347314][T10081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.348176][T10081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.771983][ T5625] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 638.458686][ T9923] hsr_slave_0: entered promiscuous mode [ 638.459783][ T9923] hsr_slave_1: entered promiscuous mode [ 638.473961][ T9923] debugfs: 'hsr0' already exists in 'hsr' [ 638.473986][ T9923] Cannot create hsr debugfs directory [ 638.859852][ T5625] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 640.391569][ T9720] bridge_slave_1: left allmulticast mode [ 640.391610][ T9720] bridge_slave_1: left promiscuous mode [ 640.391995][ T9720] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.645355][ T9720] bridge_slave_0: left allmulticast mode [ 640.645394][ T9720] bridge_slave_0: left promiscuous mode [ 640.645656][ T9720] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.523513][T10118] ieee802154 phy0 wpan0: encryption failed: -22 [ 642.949620][ T37] audit: type=1326 audit(1785915252.491:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1098" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c26e0d9 code=0x7ffc0000 [ 643.016930][ T37] audit: type=1326 audit(1785915252.561:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1098" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c26e0d9 code=0x7ffc0000 [ 643.048003][ T37] audit: type=1326 audit(1785915252.561:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1098" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c26e0d9 code=0x7ffc0000 [ 643.050498][ T37] audit: type=1326 audit(1785915252.591:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1098" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f101c26e0d9 code=0x7ffc0000 [ 643.521262][ T37] audit: type=1326 audit(1785915253.051:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1098" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c26e0d9 code=0x7ffc0000 [ 643.521316][ T37] audit: type=1326 audit(1785915253.051:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10119 comm="syz.4.1098" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f101c26e0d9 code=0x7ffc0000 [ 643.763600][T10139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.765771][T10139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.148865][ T5625] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 645.214101][ T9720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.316069][ T9720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.618023][ T9720] bond0 (unregistering): Released all slaves [ 645.847216][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 646.835003][ T5625] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 646.989015][ T9720] hsr_slave_0: left promiscuous mode [ 647.041493][ T9720] hsr_slave_1: left promiscuous mode [ 647.042427][ T9720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.107162][ T9720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.304433][ T5625] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 650.931657][ T9720] team0 (unregistering): Port device team_slave_1 removed [ 652.760423][ T9720] team0 (unregistering): Port device team_slave_0 removed [ 655.957432][ T5625] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 658.831985][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 662.534128][ T5625] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 667.115323][ T9923] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 667.320892][ T9923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.328075][ T9923] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 667.480069][ T9923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.483083][ T9923] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 667.533488][ T9923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.548070][ T9923] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 667.838181][ T9923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 668.559166][ T6159] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 668.714398][ T6159] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.714428][ T6159] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 668.714468][ T6159] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 668.714494][ T6159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.816589][ T9923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.840084][ T6159] usb 2-1: config 0 descriptor?? [ 669.309474][ T5735] usb 2-1: USB disconnect, device number 15 [ 669.865041][ T9923] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.986269][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.987383][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.134613][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.138374][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.050571][ T9923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.325541][ T5617] ================================================================== [ 678.325558][ T5617] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 678.325591][ T5617] Read of size 8 at addr ffffc90006e11008 by task kworker/u9:3/5617 [ 678.325607][ T5617] [ 678.325660][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 678.325714][ T5617] Tainted: [L]=SOFTLOCKUP [ 678.325726][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.325740][ T5617] Workqueue: hci0 hci_rx_work [ 678.325783][ T5617] Call Trace: [ 678.325792][ T5617] [ 678.325808][ T5617] dump_stack_lvl+0xe8/0x150 [ 678.325845][ T5617] print_address_description+0x55/0x1e0 [ 678.325879][ T5617] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 678.325903][ T5617] print_report+0x58/0x70 [ 678.325935][ T5617] kasan_report+0x117/0x150 [ 678.325963][ T5617] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 678.325993][ T5617] __list_del_entry_valid_or_report+0xb5/0x190 [ 678.326019][ T5617] kcov_remote_start+0x295/0x6f0 [ 678.326057][ T5617] hci_rx_work+0x10f/0x1020 [ 678.326089][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 678.326116][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 678.326158][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 678.326186][ T5617] ? assign_work+0x3cf/0x5d0 [ 678.326211][ T5617] worker_thread+0xa47/0xfb0 [ 678.326250][ T5617] kthread+0x388/0x470 [ 678.326283][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 678.326310][ T5617] ? __pfx_kthread+0x10/0x10 [ 678.326345][ T5617] ret_from_fork+0x514/0xb70 [ 678.326380][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 678.326416][ T5617] ? __switch_to+0xc89/0x1420 [ 678.326447][ T5617] ? __pfx_kthread+0x10/0x10 [ 678.326482][ T5617] ret_from_fork_asm+0x1a/0x30 [ 678.326512][ T5617] [ 678.326520][ T5617] [ 678.326526][ T5617] The buggy address belongs to a vmalloc virtual mapping [ 678.326544][ T5617] Memory state around the buggy address: [ 678.326564][ T5617] ffffc90006e10f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 678.326578][ T5617] ffffc90006e10f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 678.326593][ T5617] >ffffc90006e11000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 678.326603][ T5617] ^ [ 678.326614][ T5617] ffffc90006e11080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 678.326628][ T5617] ffffc90006e11100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 678.326639][ T5617] ================================================================== [ 678.326668][ T5617] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 678.326688][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 678.326720][ T5617] Tainted: [L]=SOFTLOCKUP [ 678.326728][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.326741][ T5617] Workqueue: hci0 hci_rx_work [ 678.326773][ T5617] Call Trace: [ 678.326781][ T5617] [ 678.326790][ T5617] vpanic+0x56c/0xa60 [ 678.326822][ T5617] ? __pfx_vpanic+0x10/0x10 [ 678.326849][ T5617] panic+0xc5/0xd0 [ 678.326870][ T5617] ? __pfx_panic+0x10/0x10 [ 678.326892][ T5617] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 678.326928][ T5617] ? rcu_is_watching+0x15/0xb0 [ 678.326960][ T5617] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 678.326983][ T5617] check_panic_on_warn+0x89/0xb0 [ 678.327004][ T5617] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 678.327028][ T5617] end_report+0x73/0x170 [ 678.327053][ T5617] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 678.327076][ T5617] kasan_report+0x128/0x150 [ 678.327102][ T5617] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 678.327131][ T5617] __list_del_entry_valid_or_report+0xb5/0x190 [ 678.327156][ T5617] kcov_remote_start+0x295/0x6f0 [ 678.327192][ T5617] hci_rx_work+0x10f/0x1020 [ 678.327223][ T5617] ? process_scheduled_works+0xa20/0x14e0 [ 678.327248][ T5617] process_scheduled_works+0xa8e/0x14e0 [ 678.327289][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 678.327318][ T5617] ? assign_work+0x3cf/0x5d0 [ 678.327345][ T5617] worker_thread+0xa47/0xfb0 [ 678.327386][ T5617] kthread+0x388/0x470 [ 678.327417][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 678.327442][ T5617] ? __pfx_kthread+0x10/0x10 [ 678.327474][ T5617] ret_from_fork+0x514/0xb70 [ 678.327507][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 678.327540][ T5617] ? __switch_to+0xc89/0x1420 [ 678.327570][ T5617] ? __pfx_kthread+0x10/0x10 [ 678.327603][ T5617] ret_from_fork_asm+0x1a/0x30 [ 678.327632][ T5617] [ 678.328256][ T5617] Kernel Offset: disabled