last executing test programs: 23.329713799s ago: executing program 0 (id=1300): socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000580)='measure', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xbe84380, 0x0, 0xffffffffffffffb5, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c", @ANYRESOCT=r5, @ANYRESDEC=r0, @ANYBLOB="6337ee20fbf9edc7fe700b178336d727a7bf7d4bd6f5547532ae8a5969a7765b401955d69cf3864e1b5632c3fdbd2e0bf169eb97c65fffb4c4dd23", @ANYRES64=r6, @ANYRESDEC], 0x50}}, 0x24000000) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400"], 0x2c}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) 22.252981128s ago: executing program 0 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x6, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x109980, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f00000015c0)={0xd, 0x0, [{0x0, 0x0, 0x1}, {0x4, 0x0, 0x7ff}, {0x2}, {0x9, 0x0, 0x80}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffff9, 0x0, 0x5365}, {0x80, 0x0, 0x497}, {0xa, 0x0, 0x3f}, {0x8000040, 0x0, 0x4}, {0xc0, 0x0, 0x3d6d14b2}, {0x3, 0x0, 0x5}, {0x3, 0x0, 0x40}, {0xfffffff9, 0x0, 0x6}, {0x7f, 0x0, 0x4}, {0x40, 0x0, 0x7}]}) 20.788530938s ago: executing program 0 (id=1304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_CAPBSET_DROP(0x18, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x2c, 0x68, 0x401, 0x0, 0x25dfdbfc, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010500000000000000000a00000000000000080001000100000008000500", @ANYRES32=0x1], 0x38}}, 0x0) 19.796486946s ago: executing program 0 (id=1305): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)="f2c733db0262059d65a5a425918b604aba593eac58ede5a7154d7b0f8ec35d1c75e36be6753588d510521be61032b3c2e9df5d53d86f38fa346aed7ae719b2a2728653e437f72f45e1d69ecc6c4d72c4f0d5cbf0f21cb243589198c16aa6e58920b4d4bfb44fbb94d96c3692bb658c94e6e5518fa807eee5d531ca5f119c3785426619285bc888c8510ec42f9b0b7b6141ceea0cb1ee8f5c455dc0e19004ba718e3dac0baa0da99715ca2314fa86669a7b1b59acfb0562093e5c2e7a93d3c74a2e56137dab220b70a836f03e24f0f81bff1ba234e25992c9ef87e72cacdaca989ff9e58d966ffabfce539eb4", &(0x7f0000000240), 0xfff, r0, 0x2000000, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000100)) r3 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x2e, @rand_addr=0x64010102, 0x4e21, 0x2, 'wlc\x00', 0x0, 0x8, 0x55}, {@remote, 0x4e20, 0x0, 0x7, 0x1, 0x26}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000001c0)='f\x04', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) 19.698231708s ago: executing program 1 (id=1306): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(0x0, &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000100), 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01d, 0x5}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e", 0x21, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat$binderfs(0xffffff9c, 0x0, 0x800, 0x0) syz_io_uring_setup(0x17fb, 0x0, &(0x7f00000034c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') 18.55166805s ago: executing program 1 (id=1307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) keyctl$setperm(0x5, 0x0, 0x200a0204) r4 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r4, 0x80007) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.331353584s ago: executing program 1 (id=1309): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, 0x3012}) 14.148069991s ago: executing program 2 (id=1315): socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x84008200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfd8, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) setpgid(r1, r1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) r3 = socket(0x2, 0x80002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x1080002, 0x0, 0x0, 0xfffffffffffffffc, 0x31}, @fda={0x66646185, 0x4000000000000001, 0x0, 0x1c}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'none\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2000, 0x6, 0x1}}, 0x44) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x0) 14.084172323s ago: executing program 3 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_CAPBSET_DROP(0x18, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x2c, 0x68, 0x401, 0x0, 0x25dfdbfc, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010500000000000000000a00000000000000080001000100000008000500", @ANYRES32=0x1], 0x38}}, 0x0) 13.292857565s ago: executing program 3 (id=1317): socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x5bd5, &(0x7f0000000000)={0x0, 0xc686, 0x0, 0xfffffffe, 0x12, 0x0, 0x0}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) add_key(&(0x7f0000000100)='big_key\x00', 0x0, &(0x7f0000000180)="85", 0x1, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x101, 0x101, 0x2, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x1c}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @union={0x7, 0x9, 0x0, 0x5, 0x0, 0x3, [{0xf, 0x3, 0x8000}, {0xc, 0x3, 0x7}, {0x2, 0x4, 0xe0000}, {0xc, 0x0, 0x7fff}, {0xe, 0x4, 0x7}, {0xd, 0x3, 0x1}, {0xc, 0x2}, {0x6, 0x2, 0x200}, {0xb, 0x0, 0x9}]}, @union={0x7, 0x3, 0x0, 0x5, 0x0, 0xfff, [{0xd, 0x5, 0x10}, {0x4, 0x5, 0x5b0}, {0x5, 0x2, 0x401}]}, @restrict={0x2, 0x0, 0x0, 0xb, 0x4}, @typedef={0xb, 0x0, 0x0, 0x8, 0x2}, @restrict={0x10}, @datasec={0xd, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x85a}], '5'}]}}, 0x0, 0x11e, 0x0, 0xfffffffe, 0xffff, 0x10000}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) listen(r0, 0x502) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000100), 0x2) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4107, 0x100b}], 0x1, 0x0, 0x0) 12.999050803s ago: executing program 2 (id=1318): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(0x0, &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000100), 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01d, 0x5}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e", 0x21, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat$binderfs(0xffffff9c, 0x0, 0x800, 0x0) syz_io_uring_setup(0x17fb, 0x0, &(0x7f00000034c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') 12.511055877s ago: executing program 0 (id=1319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) keyctl$setperm(0x5, 0x0, 0x200a0204) r4 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r4, 0x80007) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.380202135s ago: executing program 0 (id=1320): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='bbr', 0x49) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5e21, @remote}, 0x10) setns(0xc9, 0x0) r7 = socket(0x8, 0x2, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r6, @ANYRES8=r3, @ANYRES16=r1, @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0xc000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r9}, 0x4) socket$packet(0x11, 0x2, 0x300) 10.323252487s ago: executing program 1 (id=1322): mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="c323567fea2eb55ab91640ea77eb5f6ae9f6564983ae5689da72d2e7a28657524e863f1102f9bbf99e3f973e4abe7a95eeb4e1e213c0bf915331001e04c028f2dbc32428bb43d87ac6364d93d936435e000aa9cc8dff68141f7e752a1a10d9ec3f0a87583236e7d32f3fa56ba46a6081ee30f26f6c71aca4c7c43bf653cb768932e992", @ANYRES16=r5, @ANYBLOB="99061762e348c5774f5a7938c05120d53914d04aa1519eb03dece010d02e65f8ec0ebc6e66684ca7986bbccf1c260bdcd5c1a550eef5330ae0", @ANYRES8=r3, @ANYRESOCT=r5, @ANYRES64=0x0], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(r6, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x7, 0x7) 10.18818425s ago: executing program 2 (id=1323): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050) sendmsg$alg(r3, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000100)="6bca75bd9f8f6fb2d925ba8cf8f7818122f18e8e45bb9ab480a03ac1f3a817b3406f3bde189ce86dce9526", 0x2b}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)="5745881775d5b2299114c8976c4cacf4e9034f51151fbaa243e9c45d31a55cf82d3c3b2e6e2fcba57718e84f87fed2a60c62e41f534aa70f93d639f970c5f440a739eb6b624958d9eda4033e1cb6bc996f535de236bf47597e65f4367923d9bffaa7c409947324ebf1dbdc72c05e0eda31842503ab676245e047ffc432e6d525654ea75f396ea6d6a993e63728ac3d8bc0ea049691b1c627da0e7919145886fe4ef3b29bd9d8ec0e022f07c26a47ff059530ea711d", 0xb5}, {&(0x7f0000001f40)="ce4b6d8d941590daa56cdacd73139c085043029ddefe0e237e6c5b639e8368d17960ff3f715a9fb8587b7430a4f88fb72e57b9eba74bbab3b2f248d322f0fc3bf131e282cb013941f4fe0a3754c3dc6410ce34330d09c7f9a123603494ef949b1e6eecc5a9040850360a8202ad5b4b1abada96cb14b64cdf146a0ef4a0e10b5c3f1c13d794df7c3310543ffda63a594ad5babbd8b9baebec55fd931259ff024893df6e2ec983b5306f3d69394b7c8daff62de2bce8d811c1ea64fa71f556929d81164b4432ea1a22a7a39b0070", 0xcd}, {&(0x7f0000002040)="9ac4b59f5df675740882da611a0991b12f2ffbf767d52bba38ab26116bb01c5dfe615180a2cfb1deb6ef80cce47f5b1450dbafc6a136f9ddaef3d58009289d28fb539c9b5dd976720fd54c1bd2a302bccd149619f991fbe7c17a0e8710077d39f3785caa8ed3e42c25", 0x69}, {&(0x7f0000002100)="6547cb02d6a0c54d8b8256a4173fc8680db2ea13b90051ac5d70621b7c14f96aac4ba895f4efa4cb23accc6b4299a447d8aad8c602cce6696257a7316b0d75124d4c8b69e1f0ef95cf3767923004b821adb343c568b49021328bf68856639f61edb944e58dcd51af9b7f6f4231dd1408e70c29935d5b76db7a75789e34bf8f7f58061ed199bb8b136244d13ffd259368a1c0fc0ab56a66d342049027858bc2ee4b18ca3c3fd4be256551371cadf3ed3caa73e37e56336d17ae246e9b0d958d5cd0b2099bc2f297caa47c8eab857af9143f096a", 0xd3}], 0x7, &(0x7f0000002280)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xe8, 0x117, 0x2, 0xd3, "f781e76b6e7e6ffb18ce8133ffdcc1b734858a797aab4fb44cbfc5371dbbd2c510a038d62f57476d91700314d23220d7a142ab5256cd32de622f948b87ecd501b0e6151480b95f268ee6c2ee4b088857e26c7e4953f9d9f78c82c932cf4bd79efc42cb417b5127020c58c4010f00acdf3e1a0bdd03bac19adb96e18aeb198479d8db12aaef35f74a375b226bccea87609bf425ca1d54b4c2015fb9637911669212a9f77ba748024a2120df82c6aea9b7c23cdba321d8ac30879fcaaf24e6a90c1a334aac1d3c26c841fab2bf37a07bc5896829"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xf8, 0x117, 0x2, 0xdf, "503e8c194005473cacbc765ec462379b6355ded877cfd9d85e6200c8a5af80a3b53d78107fecee6bd2a6ec633b71805a3fd3b8cefcd4673c90d40943259a75c4f6a7075e9b184e8e1b2aaadb4babb495f0f15566f8d67c5055342eb898ed333fb4f28922a0a486c10666a6a9e1a404668e6835e0aa82ba0eb23c7c0dfbc2ebbf38605aded472b4108006210d6f108614c41a90c5e6260c4a487b6fc983ac9a2ca92e350615b3a361d6dfd95a86e86719382e02584ce1e58efdbda83549f794cb858748ff80ca483fcd5f1244588d240c86cebcaa0bdaeb54d042aa15e9b483"}, @assoc={0x18}], 0x228, 0x20008010}, 0x20040000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x40, &(0x7f0000000e00)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r6, 0x4}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000ffff2bbd8d00fbdbea4f00000000", @ANYRES32=0x0, @ANYBLOB="c61a0200071a07001c00128009000100626f6e64000000000c0002800000010004"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, r5, &(0x7f00000001c0)=0x6, 0x3ff) sendmsg$rds(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x1}, &(0x7f0000000080), 0x0, 0x0, 0x7, 0x100, 0x5, 0x0, 0x3d4a8ead}}, @zcopy_cookie={0x18}], 0x70, 0x20008011}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x8000) 8.708994431s ago: executing program 3 (id=1326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x6, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x109980, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f00000015c0)={0xd, 0x0, [{0x0, 0x0, 0x1}, {0x4, 0x0, 0x7ff}, {0x2}, {0x9, 0x0, 0x80}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffff9, 0x0, 0x5365}, {0x80, 0x0, 0x497}, {0xa, 0x0, 0x3f}, {0x8000040, 0x0, 0x4}, {0xc0, 0x0, 0x3d6d14b2}, {0x3, 0x0, 0x5}, {0x3, 0x0, 0x40}, {0xfffffff9, 0x0, 0x6}, {0x7f, 0x0, 0x4}, {0x40, 0x0, 0x7}]}) 7.67406921s ago: executing program 3 (id=1327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_CAPBSET_DROP(0x18, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x2c, 0x68, 0x401, 0x0, 0x25dfdbfc, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010500000000000000000a00000000000000080001000100000008000500", @ANYRES32=0x1], 0x38}}, 0x0) 6.282297398s ago: executing program 2 (id=1328): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) socket$inet(0x2, 0x2, 0x0) 6.248505608s ago: executing program 4 (id=1329): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)="f2c733db0262059d65a5a425918b604aba593eac58ede5a7154d7b0f8ec35d1c75e36be6753588d510521be61032b3c2e9df5d53d86f38fa346aed7ae719b2a2728653e437f72f45e1d69ecc6c4d72c4f0d5cbf0f21cb243589198c16aa6e58920b4d4bfb44fbb94d96c3692bb658c94e6e5518fa807eee5d531ca5f119c3785426619285bc888c8510ec42f9b0b7b6141ceea0cb1ee8f5c455dc0e19004ba718e3dac0baa0da99715ca2314fa86669a7b1b59acfb0562093e5c2e7a93d3c74a2e56137dab220b70a836f03e24f0f81bff1ba234e25992c9ef87e72cacdaca989ff9e58d966ffabfce539eb4", &(0x7f0000000240), 0xfff, r0, 0x2000000, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000100)) r3 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x2e, @rand_addr=0x64010102, 0x4e21, 0x2, 'wlc\x00', 0x0, 0x8, 0x55}, {@remote, 0x4e20, 0x0, 0x7, 0x1, 0x26}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000001c0)='f\x04', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) 5.801836471s ago: executing program 3 (id=1330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) keyctl$setperm(0x5, 0x0, 0x200a0204) r4 = memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r4, 0x80007) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a7000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.568205957s ago: executing program 4 (id=1331): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) 5.400800672s ago: executing program 4 (id=1332): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(0x0, &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000100), 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01d, 0x5}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e", 0x21, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat$binderfs(0xffffff9c, 0x0, 0x800, 0x0) syz_io_uring_setup(0x17fb, 0x0, &(0x7f00000034c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') 5.357888333s ago: executing program 2 (id=1333): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r4], 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r7) wait4(0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, 0x3012}) 2.360596716s ago: executing program 3 (id=1334): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r4, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(0x0, &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000100), 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01d, 0x5}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e", 0x21, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = openat$binderfs(0xffffff9c, 0x0, 0x800, 0x0) syz_io_uring_setup(0x17fb, 0x0, &(0x7f00000034c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') 2.322748227s ago: executing program 4 (id=1335): socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x84008200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfd8, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x1080002, 0x0, 0x0, 0xfffffffffffffffc, 0x31}, @fda={0x66646185, 0x4000000000000001, 0x0, 0x1c}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r2, &(0x7f0000003c80)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000006, 0x10, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 2.21347068s ago: executing program 1 (id=1336): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0x1, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x80000000, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) 1.053354692s ago: executing program 4 (id=1337): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="ee6b5fd600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1a, 0x0, 0x8, 0x4}, 0x28) ioctl(r2, 0xc048aeca, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101202) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) syz_emit_ethernet(0x379, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x343, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x500, 0x26000000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x6, "0000000566994ff111397b4a8840491bae50dd6fc1f9dd74244c6faa519bda83168fc5186a3ff03c13a185e1a664d5e4"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a70507000000ddde250bff5b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1b, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0xa, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62a"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) socket$l2tp(0x2, 0x2, 0x73) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6000, 0x0, &(0x7f0000ffa000/0x6000)=nil) 911.943425ms ago: executing program 2 (id=1338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x88102, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) getpid() sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) 42.168679ms ago: executing program 4 (id=1339): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44842, 0x1ef) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x144}}, 0x4050) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000b80)=ANY=[@ANYRES16, @ANYRESDEC, @ANYBLOB="e08060fec96c06ba963f6ccd619b02337aba1e5eaa4be25709d7"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r4, r2, 0x0, 0x8) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x3, 0xda000000, {{0x5, 0x4, 0x1, 0x10, 0x14, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1}}}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r5, &(0x7f00000091c0)=""/16384, 0x4000) 0s ago: executing program 1 (id=1340): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf000000, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00') read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x1000) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000040000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x9, 0xfffffffffffffff7, 0x80000000, 0x100000001]}, &(0x7f0000000080)=0x78) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) kernel console output (not intermixed with test programs): 1822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.081123][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.094000][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.102242][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 68.102275][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 68.102299][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 68.102903][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 68.132871][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.135120][ T4280] device veth1_vlan entered promiscuous mode [ 68.147945][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.162101][ T4282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.172579][ T4282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.175473][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 68.184173][ T4282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.197457][ T4282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.218465][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.232484][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.240978][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.264855][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.269533][ T4279] device veth0_vlan entered promiscuous mode [ 68.272689][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.312869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.322164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.332778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.351420][ T4279] device veth1_vlan entered promiscuous mode [ 68.386334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.394622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.402279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.440266][ T1822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.451889][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.465954][ T1822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.480619][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.493313][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.503841][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.515862][ T4280] device veth0_macvtap entered promiscuous mode [ 68.531375][ T4279] device veth0_macvtap entered promiscuous mode [ 68.543129][ T4279] device veth1_macvtap entered promiscuous mode [ 68.560789][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.572572][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.583017][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.593602][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.603833][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.617051][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.642438][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.673271][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.684494][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.694450][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.705583][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.717125][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.727711][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.741442][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.749115][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.979596][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.032263][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.093618][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.156590][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.207850][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.289214][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.302822][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.321737][ T4280] device veth1_macvtap entered promiscuous mode [ 69.356958][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.411763][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.442718][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.492391][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.538216][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.579815][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.599685][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.616935][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.629235][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.641601][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.654990][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.175094][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 70.181248][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 70.187405][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 70.193432][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 70.254940][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 70.505020][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.534258][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.624292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 70.865440][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.916131][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.029798][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.077648][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.083491][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.085725][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.114531][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.153894][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.223899][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.282277][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.298151][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.314606][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.357279][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.424015][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.477742][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.552434][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.607620][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.656112][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.719146][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.859793][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.875165][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.884067][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.898417][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.977493][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.015006][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.038147][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.106678][ T1822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.124655][ T1822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.157562][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.309392][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.328974][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.335798][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.396657][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.420489][ T4383] NILFS (nullb0): couldn't find nilfs on the device [ 72.547970][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.903389][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.160791][ T4382] tipc: Started in network mode [ 73.166628][ T4382] tipc: Node identity becb9492fd02, cluster identity 4711 [ 73.175104][ T4382] tipc: Enabled bearer , priority 1 [ 73.185005][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.192874][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.213837][ T4381] tipc: Resetting bearer [ 73.251253][ T4381] tipc: Disabling bearer [ 73.506178][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.144216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 75.810178][ T4404] netdevsim netdevsim30 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.825313][ T4416] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.182154][ T4452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 78.262966][ T4416] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 78.293453][ T4416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.327150][ T4416] usb 5-1: Product: syz [ 78.361123][ T4416] usb 5-1: Manufacturer: syz [ 78.484452][ T4459] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.625362][ T4416] usb 5-1: SerialNumber: syz [ 79.316603][ T4448] sctp: failed to load transform for md5: -2 [ 79.342970][ T4416] usb 5-1: config 0 descriptor?? [ 79.417220][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 79.585112][ T4416] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 002 [ 80.194230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 80.264240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 80.274249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 80.284237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 80.524254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 81.813301][ T14] cfg80211: failed to load regulatory.db [ 81.941540][ T4492] jffs2: notice: (4492) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.954229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.986172][ T4484] i2c i2c-1: failure writing data [ 83.884230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 83.964230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 84.642088][ T154] usb 5-1: USB disconnect, device number 2 [ 86.841377][ T4542] jffs2: notice: (4542) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.459697][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.473706][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.481949][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.063243][ T4591] jffs2: notice: (4591) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 93.857949][ T4603] befs: (nbd3): No write support. Marking filesystem read-only [ 94.256515][ T4603] syz.3.59: attempt to access beyond end of device [ 94.256515][ T4603] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 94.467701][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.734905][ T14] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.754697][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.868623][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.926698][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.985977][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.275165][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.314396][ T14] usb 3-1: Product: syz [ 96.320208][ T14] usb 3-1: Manufacturer: syz [ 96.347100][ T14] usb 3-1: SerialNumber: syz [ 96.383496][ T14] usb 3-1: can't set config #1, error -71 [ 96.435006][ T14] usb 3-1: USB disconnect, device number 2 [ 97.322920][ T4642] jffs2: notice: (4642) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.325400][ T4640] block device autoloading is deprecated and will be removed. [ 97.396194][ T4640] syz.3.66: attempt to access beyond end of device [ 97.396194][ T4640] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 99.774748][ T4396] wlan1: Trigger new scan to find an IBSS to join [ 100.837863][ T4665] befs: (nbd4): No write support. Marking filesystem read-only [ 100.844561][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.850835][ T4665] syz.4.76: attempt to access beyond end of device [ 100.850835][ T4665] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 101.099160][ T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.116675][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.134354][ T7] usb 4-1: Product: syz [ 101.144566][ T7] usb 4-1: Manufacturer: syz [ 101.149389][ T7] usb 4-1: SerialNumber: syz [ 101.204337][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.479466][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.599030][ T34] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 101.724230][ T34] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.860605][ T34] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 102.334940][ T4681] process 'syz.1.78' launched './file0' with NULL argv: empty string added [ 103.122580][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 103.195845][ T7] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 103.235845][ T34] usb 5-1: Product: syz [ 103.240056][ T34] usb 5-1: Manufacturer: syz [ 103.293463][ T4667] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 103.348836][ T34] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 103.408284][ T34] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 104.495377][ T34] usb 5-1: USB disconnect, device number 3 [ 104.511903][ T7] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 104.530509][ T57] wlan1: Trigger new scan to find an IBSS to join [ 104.539121][ T34] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 104.555389][ T7] ath9k_htc: Failed to initialize the device [ 104.582793][ T34] garmin_gps 5-1:1.0: device disconnected [ 105.406072][ T4321] usb 4-1: USB disconnect, device number 3 [ 105.450022][ T4321] usb 4-1: ath9k_htc: USB layer deinitialized [ 105.530171][ T4699] jffs2: notice: (4699) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 105.677274][ T4586] wlan1: Creating new IBSS network, BSSID 3e:7c:4d:ff:cc:20 [ 105.687869][ T4707] syz.4.86: attempt to access beyond end of device [ 105.687869][ T4707] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 106.632128][ T4708] Zero length message leads to an empty skb [ 108.008629][ T4726] befs: (nbd2): No write support. Marking filesystem read-only [ 108.016711][ T4726] syz.2.92: attempt to access beyond end of device [ 108.016711][ T4726] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 108.110977][ T4729] syz.4.91: attempt to access beyond end of device [ 108.110977][ T4729] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 108.990840][ T4731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.93'. [ 109.549149][ T4322] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.836649][ T4322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.861702][ T4322] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 110.690064][ T4322] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.700652][ T4322] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 110.700671][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 110.700682][ T4322] usb 3-1: Product: syz [ 110.700689][ T4322] usb 3-1: Manufacturer: syz [ 110.710072][ T4727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.711283][ T4322] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 110.713550][ T4322] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 111.122846][ T4751] syz.0.99: attempt to access beyond end of device [ 111.122846][ T4751] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 112.297707][ T4416] usb 3-1: USB disconnect, device number 3 [ 112.328539][ T4416] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 112.367711][ T4416] garmin_gps 3-1:1.0: device disconnected [ 114.596204][ T4770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.105'. [ 117.071740][ T4780] syz.1.107: attempt to access beyond end of device [ 117.071740][ T4780] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 120.038685][ T4794] syz.1.111: attempt to access beyond end of device [ 120.038685][ T4794] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.014052][ T4801] befs: (nbd3): No write support. Marking filesystem read-only [ 121.075663][ T4801] syz.3.112: attempt to access beyond end of device [ 121.075663][ T4801] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 121.330647][ T4807] NILFS (nullb0): couldn't find nilfs on the device [ 122.034312][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.230016][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.253164][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 122.351600][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.374504][ T154] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.524004][ T7] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 123.574780][ T4824] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'. [ 123.656688][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 123.674593][ T7] usb 4-1: Product: syz [ 123.682177][ T7] usb 4-1: Manufacturer: syz [ 123.695153][ T4802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.751844][ T7] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 123.765802][ T7] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 123.794399][ T154] usb 1-1: Using ep0 maxpacket: 8 [ 123.810631][ T154] usb 1-1: config 255 has an invalid interface number: 39 but max is 0 [ 123.914185][ T154] usb 1-1: config 255 has no interface number 0 [ 124.023529][ T154] usb 1-1: config 255 interface 39 has no altsetting 0 [ 124.565911][ T7] usb 4-1: USB disconnect, device number 4 [ 124.631759][ T154] usb 1-1: New USB device found, idVendor=22b8, idProduct=2d96, bcdDevice= 0.43 [ 124.641562][ T7] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 124.654891][ T7] garmin_gps 4-1:1.0: device disconnected [ 124.734041][ T154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.783003][ T154] usb 1-1: Product: syz [ 124.787337][ T154] usb 1-1: Manufacturer: syz [ 124.791957][ T154] usb 1-1: SerialNumber: syz [ 124.972827][ T4842] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 125.100377][ T4811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.408635][ T4811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.500016][ T154] usb 1-1: USB disconnect, device number 2 [ 126.134306][ T34] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.505403][ T34] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 126.686500][ T34] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.714270][ T34] usb 2-1: Product: syz [ 126.719174][ T34] usb 2-1: Manufacturer: syz [ 126.723935][ T34] usb 2-1: SerialNumber: syz [ 126.828127][ T4860] syz.3.126: attempt to access beyond end of device [ 126.828127][ T4860] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 126.835955][ T154] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 126.868093][ T4858] device syzkaller0 entered promiscuous mode [ 127.291219][ T34] usb 2-1: USB disconnect, device number 2 [ 127.935007][ T154] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 127.960352][ T154] ath9k_htc: Failed to initialize the device [ 128.046357][ T34] usb 2-1: ath9k_htc: USB layer deinitialized [ 128.261702][ T4870] jffs2: notice: (4870) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.689890][ T4881] befs: (nbd4): No write support. Marking filesystem read-only [ 129.795332][ T4881] syz.4.132: attempt to access beyond end of device [ 129.795332][ T4881] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 131.174499][ T4320] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.380420][ T4320] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.447249][ T4320] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 131.555688][ T4320] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.771620][ T4320] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 131.859251][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 131.928979][ T4320] usb 5-1: Product: syz [ 131.933196][ T4320] usb 5-1: Manufacturer: syz [ 132.052421][ T4892] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 132.075168][ T4892] autofs4:pid:4892:autofs_fill_super: called with bogus options [ 132.737897][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.745246][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.489131][ T4899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 133.500655][ T4899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.137'. [ 133.929228][ T4320] usb 5-1: can't set config #1, error -71 [ 133.939844][ T4320] usb 5-1: USB disconnect, device number 4 [ 135.709611][ T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 135.773414][ T4917] jffs2: notice: (4917) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.790661][ T4915] syz.4.141: attempt to access beyond end of device [ 135.790661][ T4915] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 137.004602][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.764324][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 137.776486][ T22] usb 2-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 137.939732][ T22] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 138.067543][ T22] usb 2-1: config 4 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 138.239847][ T22] usb 2-1: string descriptor 0 read error: -22 [ 138.342478][ T22] usb 2-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 138.451785][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.840275][ T4926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.849617][ T4926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.004179][ T4320] usb 2-1: USB disconnect, device number 3 [ 142.909496][ T4968] jffs2: notice: (4968) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.939310][ T4967] syz.1.154: attempt to access beyond end of device [ 142.939310][ T4967] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 145.034865][ T4984] jffs2: notice: (4984) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 145.192848][ T4988] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 148.215634][ T5009] No source specified [ 148.273094][ T5011] syz.0.169: attempt to access beyond end of device [ 148.273094][ T5011] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 149.408916][ T5030] jffs2: notice: (5030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 149.539185][ T5035] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 152.319401][ T5056] No source specified [ 152.369033][ T5058] syz.1.165: attempt to access beyond end of device [ 152.369033][ T5058] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 154.721082][ T5084] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 154.761203][ T5085] jffs2: notice: (5085) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 155.675801][ T5085] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 156.364161][ T5099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 156.375487][ T5099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.190'. [ 157.053998][ T5108] No source specified [ 157.475564][ T5116] syz.4.197: attempt to access beyond end of device [ 157.475564][ T5116] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 158.467882][ T5129] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 159.366070][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.380565][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.395625][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.705473][ T5152] jffs2: notice: (5152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 161.865253][ T5175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 161.875267][ T5175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.205'. [ 162.700312][ T5183] syz.1.211: attempt to access beyond end of device [ 162.700312][ T5183] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 163.853653][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.866315][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.874362][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.992792][ T5213] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 165.008616][ T5213] autofs4:pid:5213:autofs_fill_super: called with bogus options [ 166.413360][ T5222] jffs2: notice: (5222) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 167.639981][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 167.648945][ T5237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.221'. [ 175.357060][ T5295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 175.367458][ T5295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.234'. [ 176.007310][ T5301] jffs2: notice: (5301) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 176.442024][ T5314] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 176.455296][ T5314] autofs4:pid:5314:autofs_fill_super: called with bogus options [ 178.056671][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.069253][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.077656][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.853632][ T5342] syz.1.243: attempt to access beyond end of device [ 181.853632][ T5342] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 186.014302][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 186.020386][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 186.026441][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 188.451145][ T5405] syz.0.258: attempt to access beyond end of device [ 188.451145][ T5405] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 194.274810][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.281168][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.614492][ T5478] syz.0.274: attempt to access beyond end of device [ 194.614492][ T5478] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 194.917692][ T5486] netlink: 88 bytes leftover after parsing attributes in process `syz.3.264'. [ 196.166369][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.216582][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.238436][ T5499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.244574][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.284'. [ 200.544741][ T5215] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 200.779953][ T5215] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 200.845317][ T5215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.949454][ T5215] usb 2-1: Product: syz [ 201.002433][ T5215] usb 2-1: Manufacturer: syz [ 201.057306][ T5215] usb 2-1: SerialNumber: syz [ 201.185676][ T5215] usb 2-1: config 0 descriptor?? [ 201.240896][ T5215] hub 2-1:0.0: bad descriptor, ignoring hub [ 201.305723][ T5215] hub: probe of 2-1:0.0 failed with error -5 [ 201.445029][ T5215] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 201.489495][ T5215] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.518095][ T5215] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 201.667245][ T5215] usb 2-1: media controller created [ 201.713903][ T5215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.902291][ T5551] syz.2.292: attempt to access beyond end of device [ 201.902291][ T5551] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 202.012909][ T5537] dib0700: tx buffer length is larger than 4. Not supported. [ 202.139317][ T5215] DVB: Unable to find symbol dib7000p_attach() [ 202.246652][ T5554] device syzkaller0 entered promiscuous mode [ 202.786610][ T5215] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 204.159588][ T5215] rc_core: IR keymap rc-dib0700-rc5 not found [ 204.167257][ T5215] Registered IR keymap rc-empty [ 204.178193][ T5215] dvb-usb: could not initialize remote control. [ 205.129607][ T5215] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 206.415957][ T5215] usb 2-1: USB disconnect, device number 4 [ 206.629923][ T5215] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 210.573020][ T5647] NILFS (nullb0): couldn't find nilfs on the device [ 210.573634][ T5649] befs: (nbd0): No write support. Marking filesystem read-only [ 210.644611][ T5649] syz.0.316: attempt to access beyond end of device [ 210.644611][ T5649] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 212.464351][ T5215] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 212.655961][ T5215] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.684408][ T5215] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 212.714280][ T5215] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.767963][ T5215] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 212.807156][ T5215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 212.912340][ T5215] usb 1-1: Product: syz [ 212.973392][ T5215] usb 1-1: Manufacturer: syz [ 213.158924][ T5649] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.244661][ T5215] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 213.461087][ T5215] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 213.614712][ T5215] usb 1-1: USB disconnect, device number 3 [ 213.652583][ T5215] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 213.674574][ T5661] udevd[5661]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 213.715620][ T5215] garmin_gps 1-1:1.0: device disconnected [ 213.766544][ T5677] jffs2: notice: (5677) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 215.726998][ T5702] syz.3.329: attempt to access beyond end of device [ 215.726998][ T5702] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 216.102035][ T5706] using random self ethernet address [ 216.815334][ T5706] using random host ethernet address [ 218.001561][ T5706] using random self ethernet address [ 218.034548][ T5706] using random host ethernet address [ 219.225381][ T5727] befs: (nbd4): No write support. Marking filesystem read-only [ 219.233475][ T5727] syz.4.337: attempt to access beyond end of device [ 219.233475][ T5727] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 220.614308][ T4372] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 221.066001][ T4372] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.084636][ T4372] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 221.109794][ T4372] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.704163][ T4372] usb 5-1: string descriptor 0 read error: -71 [ 222.720753][ T4372] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 222.730816][ T4372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 222.753284][ T4372] usb 5-1: can't set config #1, error -71 [ 222.794493][ T4372] usb 5-1: USB disconnect, device number 5 [ 224.642675][ T4416] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 224.817788][ T5769] NILFS (nullb0): couldn't find nilfs on the device [ 225.246619][ T4416] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 225.279286][ T4416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.346663][ T4416] usb 1-1: selecting invalid altsetting 3 [ 225.364337][ T4416] comedi comedi5: could not set alternate setting 3 in high speed [ 225.389826][ T4416] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 225.504033][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 225.518523][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.526800][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.615450][ T4416] usbduxsigma: probe of 1-1:128.0 failed with error -22 [ 226.046638][ T130] usb 1-1: USB disconnect, device number 4 [ 227.688026][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'. [ 227.698889][ T5788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.347'. [ 234.568450][ T5829] syz.1.362: attempt to access beyond end of device [ 234.568450][ T5829] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 236.547509][ T5847] NILFS (nullb0): couldn't find nilfs on the device [ 236.792894][ T4342] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 237.018120][ T5855] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 237.018120][ T5855] [ 237.032152][ T5855] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 237.045053][ T5855] CIFS mount error: No usable UNC path provided in device string! [ 237.045053][ T5855] [ 237.055356][ T5855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 238.017441][ T4342] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 238.031312][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.039474][ T4342] usb 1-1: Product: syz [ 238.043670][ T4342] usb 1-1: Manufacturer: syz [ 238.048361][ T4342] usb 1-1: SerialNumber: syz [ 238.886817][ T130] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 238.895992][ T4342] usb 1-1: USB disconnect, device number 5 [ 238.916572][ T4342] usb 1-1: ath9k_htc: USB layer deinitialized [ 241.001758][ T5879] syz.3.376: attempt to access beyond end of device [ 241.001758][ T5879] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 241.304246][ T5886] NILFS (nullb0): couldn't find nilfs on the device [ 245.614349][ T154] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 246.194531][ T154] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 246.251272][ T154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.597817][ T154] usb 1-1: Product: syz [ 248.290473][ T154] usb 1-1: Manufacturer: syz [ 248.464321][ T154] usb 1-1: SerialNumber: syz [ 248.541231][ T154] usb 1-1: can't set config #1, error -71 [ 248.592273][ T154] usb 1-1: USB disconnect, device number 6 [ 249.942378][ T5942] NILFS (nullb0): couldn't find nilfs on the device [ 249.952819][ T5943] jffs2: notice: (5943) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 250.231178][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.243898][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.252379][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.102787][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 252.111899][ T5967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.397'. [ 252.651221][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 255.431037][ T4321] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 255.542118][ T6002] jffs2: notice: (6002) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 255.615731][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.622197][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.681942][ T4321] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 255.700501][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.784505][ T6007] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.797570][ T6007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.805863][ T6007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.821698][ T4321] usb 3-1: Product: syz [ 255.871059][ T4321] usb 3-1: Manufacturer: syz [ 255.911667][ T4321] usb 3-1: SerialNumber: syz [ 256.899573][ T4321] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 257.037889][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.411'. [ 257.047011][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.411'. [ 258.534232][ T4321] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 258.541392][ T4321] ath9k_htc: Failed to initialize the device [ 258.547192][ T128] usb 3-1: USB disconnect, device number 4 [ 258.668050][ T128] usb 3-1: ath9k_htc: USB layer deinitialized [ 267.451828][ T6065] device syzkaller0 entered promiscuous mode [ 267.621350][ T6077] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.658714][ T6077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.214627][ T6077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.709001][ T6101] FAULT_INJECTION: forcing a failure. [ 272.709001][ T6101] name failslab, interval 1, probability 0, space 0, times 1 [ 272.798534][ T6101] CPU: 1 PID: 6101 Comm: syz.2.437 Not tainted syzkaller #0 [ 272.805851][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.815922][ T6101] Call Trace: [ 272.819201][ T6101] [ 272.822124][ T6101] dump_stack_lvl+0x188/0x24e [ 272.826805][ T6101] ? show_regs_print_info+0x12/0x12 [ 272.832001][ T6101] ? load_image+0x410/0x410 [ 272.836510][ T6101] ? __might_sleep+0xd0/0xd0 [ 272.841098][ T6101] ? __lock_acquire+0x7ea0/0x7ea0 [ 272.846126][ T6101] should_fail_ex+0x390/0x4c0 [ 272.850804][ T6101] should_failslab+0x5/0x20 [ 272.855299][ T6101] slab_pre_alloc_hook+0x59/0x300 [ 272.860320][ T6101] ? lockdep_hardirqs_on+0x94/0x140 [ 272.865520][ T6101] ? fib6_info_alloc+0x2e/0xe0 [ 272.870282][ T6101] __kmem_cache_alloc_node+0x4f/0x270 [ 272.875648][ T6101] ? _raw_spin_unlock+0x40/0x40 [ 272.880499][ T6101] ? fib6_info_alloc+0x2e/0xe0 [ 272.885263][ T6101] __kmalloc+0xa3/0x240 [ 272.889420][ T6101] fib6_info_alloc+0x2e/0xe0 [ 272.894011][ T6101] ip6_route_net_init+0x77/0x7e0 [ 272.898944][ T6101] ? inet_peer_base_init+0x7a/0x100 [ 272.904146][ T6101] ops_init+0x360/0x5e0 [ 272.908301][ T6101] setup_net+0x4f2/0xbd0 [ 272.912555][ T6101] ? copy_net_ns+0x5b0/0x5b0 [ 272.917143][ T6101] ? copy_net_ns+0x324/0x5b0 [ 272.921733][ T6101] ? down_read_killable+0x1cc/0x340 [ 272.926929][ T6101] copy_net_ns+0x33e/0x5b0 [ 272.931351][ T6101] create_new_namespaces+0x3ce/0x700 [ 272.936640][ T6101] unshare_nsproxy_namespaces+0x116/0x160 [ 272.942360][ T6101] ksys_unshare+0x4f6/0x8e0 [ 272.946863][ T6101] ? sighand_ctor+0x40/0x40 [ 272.951361][ T6101] ? lock_chain_count+0x20/0x20 [ 272.956212][ T6101] ? syscall_enter_from_user_mode+0x21/0x80 [ 272.962110][ T6101] __x64_sys_unshare+0x34/0x40 [ 272.966870][ T6101] do_syscall_64+0x4c/0xa0 [ 272.971281][ T6101] ? clear_bhb_loop+0x60/0xb0 [ 272.975957][ T6101] ? clear_bhb_loop+0x60/0xb0 [ 272.980631][ T6101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.986531][ T6101] RIP: 0033:0x7fe0bd79e159 [ 272.990944][ T6101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.010551][ T6101] RSP: 002b:00007fe0be68a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 273.018977][ T6101] RAX: ffffffffffffffda RBX: 00007fe0bda26090 RCX: 00007fe0bd79e159 [ 273.026945][ T6101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 273.034911][ T6101] RBP: 00007fe0bd83506b R08: 0000000000000000 R09: 0000000000000000 [ 273.042875][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.050840][ T6101] R13: 00007fe0bda26128 R14: 00007fe0bda26090 R15: 00007ffc9d05e458 [ 273.058817][ T6101] [ 277.759964][ T6136] device syzkaller0 entered promiscuous mode [ 279.382784][ T6146] syz.4.445: attempt to access beyond end of device [ 279.382784][ T6146] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 282.328428][ T6163] FAULT_INJECTION: forcing a failure. [ 282.328428][ T6163] name failslab, interval 1, probability 0, space 0, times 0 [ 282.348649][ T6163] CPU: 1 PID: 6163 Comm: syz.0.453 Not tainted syzkaller #0 [ 282.355985][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.366821][ T6163] Call Trace: [ 282.370100][ T6163] [ 282.373029][ T6163] dump_stack_lvl+0x188/0x24e [ 282.377713][ T6163] ? show_regs_print_info+0x12/0x12 [ 282.382951][ T6163] ? load_image+0x410/0x410 [ 282.387460][ T6163] ? __might_sleep+0xd0/0xd0 [ 282.392044][ T6163] ? __lock_acquire+0x7ea0/0x7ea0 [ 282.397101][ T6163] should_fail_ex+0x390/0x4c0 [ 282.401805][ T6163] should_failslab+0x5/0x20 [ 282.406304][ T6163] slab_pre_alloc_hook+0x59/0x300 [ 282.411330][ T6163] kmem_cache_alloc+0x56/0x2f0 [ 282.416098][ T6163] ? __alloc_file+0x25/0x230 [ 282.420688][ T6163] __alloc_file+0x25/0x230 [ 282.425127][ T6163] alloc_empty_file+0x90/0x180 [ 282.429883][ T6163] alloc_file+0x5b/0x5f0 [ 282.434119][ T6163] alloc_file_pseudo+0x180/0x200 [ 282.439081][ T6163] ? alloc_empty_file_noaccount+0x80/0x80 [ 282.444802][ T6163] ? alloc_fd+0x590/0x640 [ 282.449137][ T6163] sock_alloc_file+0xb3/0x240 [ 282.453820][ T6163] __sys_socket+0x12d/0x190 [ 282.458326][ T6163] __x64_sys_socket+0x76/0x80 [ 282.463000][ T6163] do_syscall_64+0x4c/0xa0 [ 282.467416][ T6163] ? clear_bhb_loop+0x60/0xb0 [ 282.472111][ T6163] ? clear_bhb_loop+0x60/0xb0 [ 282.476788][ T6163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.482766][ T6163] RIP: 0033:0x7f228019e159 [ 282.487178][ T6163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.506812][ T6163] RSP: 002b:00007f2281060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 282.515226][ T6163] RAX: ffffffffffffffda RBX: 00007f2280425fa0 RCX: 00007f228019e159 [ 282.523285][ T6163] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 282.531249][ T6163] RBP: 00007f228023506b R08: 0000000000000000 R09: 0000000000000000 [ 282.539218][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.547186][ T6163] R13: 00007f2280426038 R14: 00007f2280425fa0 R15: 00007fff641b3448 [ 282.555163][ T6163] [ 286.656867][ T6188] device syzkaller0 entered promiscuous mode [ 286.665990][ T6189] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 286.665990][ T6189] [ 286.679815][ T6189] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 286.692611][ T6189] CIFS mount error: No usable UNC path provided in device string! [ 286.692611][ T6189] [ 286.702700][ T6189] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 287.481358][ T6191] syz.2.462: attempt to access beyond end of device [ 287.481358][ T6191] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 293.823503][ T6235] device syzkaller0 entered promiscuous mode [ 294.638271][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 294.647795][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.471'. [ 295.435808][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 295.448282][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.456528][ T6245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.227822][ T6251] syz.0.478: attempt to access beyond end of device [ 296.227822][ T6251] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 297.549807][ T6260] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 297.563172][ T6260] autofs4:pid:6260:autofs_fill_super: called with bogus options [ 298.821092][ T6262] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.945458][ T6262] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 299.058320][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 299.070935][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.079206][ T6270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.879571][ T6271] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 299.893094][ T6271] autofs4:pid:6271:autofs_fill_super: called with bogus options [ 300.331964][ T6276] befs: (nbd0): No write support. Marking filesystem read-only [ 300.409405][ T6276] syz.0.484: attempt to access beyond end of device [ 300.409405][ T6276] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 300.534495][ T6262] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 300.550211][ T6262] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 300.573471][ T6262] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 300.580309][ T6262] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 300.609601][ T6262] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 300.618082][ T6262] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 300.734307][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout [ 301.164555][ T4372] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 301.644921][ T6288] device syzkaller0 entered promiscuous mode [ 301.725356][ T4372] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.776053][ T4372] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 301.791425][ T4372] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.900945][ T4372] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 301.934950][ T4372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 301.951463][ T4372] usb 1-1: Product: syz [ 301.961586][ T4372] usb 1-1: Manufacturer: syz [ 301.975605][ T6276] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.987210][ T4372] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 302.003237][ T4372] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 302.197967][ T4372] usb 1-1: USB disconnect, device number 7 [ 302.340233][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 302.352879][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.360978][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.575424][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout [ 302.584317][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout [ 302.664418][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout [ 302.824289][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 303.566298][ T4372] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 303.589514][ T4372] garmin_gps 1-1:1.0: device disconnected [ 304.654994][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 304.661020][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 304.734292][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 305.713941][ T6316] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 305.726066][ T6316] autofs4:pid:6316:autofs_fill_super: called with bogus options [ 307.365823][ T6325] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 307.378625][ T6325] autofs4:pid:6325:autofs_fill_super: called with bogus options [ 308.174425][ T4372] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 308.391061][ T4372] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 308.452840][ T4372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.518314][ T4372] usb 2-1: config 0 descriptor?? [ 309.134355][ T4287] Bluetooth: hci4: command 0x0405 tx timeout [ 309.690599][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.717249][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.755762][ T6343] befs: (nbd2): No write support. Marking filesystem read-only [ 309.815194][ T6343] syz.2.502: attempt to access beyond end of device [ 309.815194][ T6343] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 309.975637][ T4372] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 310.010909][ T4372] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 310.043279][ T4372] [drm:udl_init] *ERROR* Selecting channel failed [ 310.088307][ T4372] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 310.119801][ T4372] [drm] Initialized udl on minor 2 [ 310.136812][ T4372] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 310.157040][ T4372] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 311.029431][ T4372] usb 2-1: USB disconnect, device number 5 [ 311.037806][ T128] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 311.057987][ T128] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 311.068130][ T128] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 311.744280][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 311.952330][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.892763][ T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 313.443283][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.246543][ T7] usb 3-1: string descriptor 0 read error: -71 [ 314.252823][ T7] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 314.263457][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 314.415619][ T7] usb 3-1: can't set config #1, error -71 [ 314.648051][ T7] usb 3-1: USB disconnect, device number 5 [ 314.915685][ T6381] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 314.931102][ T6381] autofs4:pid:6381:autofs_fill_super: called with bogus options [ 316.119399][ T6383] device syzkaller0 entered promiscuous mode [ 317.058970][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.067528][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.814318][ T154] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 320.020040][ T6401] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 320.033191][ T6401] autofs4:pid:6401:autofs_fill_super: called with bogus options [ 321.822822][ T154] usb 5-1: Using ep0 maxpacket: 16 [ 321.848012][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.856539][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.948248][ T154] usb 5-1: device descriptor read/all, error -71 [ 323.402847][ T6427] device syzkaller0 entered promiscuous mode [ 324.784777][ T6435] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 324.797375][ T6435] autofs4:pid:6435:autofs_fill_super: called with bogus options [ 331.730652][ T6465] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 331.739542][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.752674][ T6465] autofs4:pid:6465:autofs_fill_super: called with bogus options [ 332.428826][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.455914][ T6455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.197333][ T6498] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 335.197333][ T6498] [ 335.211152][ T6498] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 335.223991][ T6498] CIFS mount error: No usable UNC path provided in device string! [ 335.223991][ T6498] [ 335.234116][ T6498] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 335.324599][ T4372] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 335.539895][ T4372] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 336.041030][ T6504] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 336.041030][ T6504] [ 336.055115][ T6504] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 336.067932][ T6504] CIFS mount error: No usable UNC path provided in device string! [ 336.067932][ T6504] [ 336.078039][ T6504] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 336.240395][ T4372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.250550][ T4372] usb 2-1: Product: syz [ 336.254902][ T4372] usb 2-1: Manufacturer: syz [ 336.260636][ T4372] usb 2-1: SerialNumber: syz [ 336.298340][ T4372] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 336.991904][ T154] usb 2-1: USB disconnect, device number 6 [ 337.096156][ T6512] netlink: 'syz.2.547': attribute type 4 has an invalid length. [ 337.273164][ T6513] Cannot find set identified by id 0 to match [ 337.375090][ T4372] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 337.623517][ T4372] ath9k_htc: Failed to initialize the device [ 337.741954][ T154] usb 2-1: ath9k_htc: USB layer deinitialized [ 337.978262][ T6517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.018447][ T6517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.099882][ T6517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.834442][ T6552] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 340.834442][ T6552] [ 340.848275][ T6552] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 340.861060][ T6552] CIFS mount error: No usable UNC path provided in device string! [ 340.861060][ T6552] [ 340.872769][ T6552] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 343.366165][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 343.375134][ T6565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.559'. [ 343.580661][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 343.594556][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.602670][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.732771][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 350.741950][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.575'. [ 352.518552][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 352.557187][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 352.577854][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.860474][ T6643] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 353.860474][ T6643] [ 353.874344][ T6643] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 353.887146][ T6643] CIFS mount error: No usable UNC path provided in device string! [ 353.887146][ T6643] [ 353.897296][ T6643] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 356.678321][ T6667] block nbd4: shutting down sockets [ 357.432822][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 357.442136][ T6673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.589'. [ 361.101446][ T6700] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 363.374942][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 363.436717][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.450600][ T6715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 364.336106][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 365.607501][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.623461][ T7] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 365.634494][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.697922][ T7] as10x_usb: device has been detected [ 365.703744][ T7] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 365.780890][ T7] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 366.057358][ T7] as10x_usb: error during firmware upload part1 [ 366.064044][ T7] Registered device Abilis Systems DVB-Titan [ 366.164380][ T6751] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 371.757617][ T4372] usb 1-1: USB disconnect, device number 8 [ 371.831881][ T4372] Unregistered device Abilis Systems DVB-Titan [ 371.837758][ T4372] as10x_usb: device has been disconnected [ 372.794295][ T4284] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 373.698800][ T4284] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= 0.00 [ 373.758484][ T4284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.451150][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 374.518648][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.533743][ T6811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.090536][ T4284] mvusb_mdio: probe of 5-1:1.0 failed with error -5 [ 375.155123][ T4284] usb 5-1: USB disconnect, device number 8 [ 375.234443][ T4372] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 375.446299][ T4372] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 375.464097][ T4372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.488306][ T4372] usb 2-1: selecting invalid altsetting 3 [ 375.498090][ T4372] comedi comedi5: could not set alternate setting 3 in high speed [ 375.599433][ T4342] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 375.661170][ T4372] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 375.680857][ T4372] usbduxsigma: probe of 2-1:128.0 failed with error -22 [ 375.691524][ T6806] misc userio: No port type given on /dev/userio [ 375.981087][ T4342] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 376.029551][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.046610][ T4342] usb 4-1: Product: syz [ 376.051496][ T4342] usb 4-1: Manufacturer: syz [ 376.058071][ T4342] usb 4-1: SerialNumber: syz [ 376.271476][ T4342] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 376.271676][ T6835] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 376.646197][ T6841] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 376.662251][ T6841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 376.670992][ T6841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 376.695692][ T14] usb 4-1: USB disconnect, device number 5 [ 377.472027][ T4284] usb 2-1: USB disconnect, device number 7 [ 377.535269][ T4342] usb 4-1: Service connection timeout for: 256 [ 377.547499][ T4342] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 377.562100][ T4342] ath9k_htc: Failed to initialize the device [ 378.496377][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.502689][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.580262][ T14] usb 4-1: ath9k_htc: USB layer deinitialized [ 379.960239][ T6872] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 382.945970][ T6890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 382.954289][ T6890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.961685][ T6890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.028022][ T6893] ceph: separator ':' missing in source [ 383.754306][ T4372] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 384.071132][ T4372] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 384.679421][ T4372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.687540][ T4372] usb 2-1: Product: syz [ 384.691713][ T4372] usb 2-1: Manufacturer: syz [ 384.696642][ T4372] usb 2-1: SerialNumber: syz [ 384.834459][ T4372] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 385.945620][ T4284] usb 2-1: USB disconnect, device number 8 [ 386.540540][ T4372] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 386.547628][ T4372] ath9k_htc: Failed to initialize the device [ 386.667510][ T6921] block nbd2: shutting down sockets [ 386.686329][ T4284] usb 2-1: ath9k_htc: USB layer deinitialized [ 386.871988][ T6929] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 387.101703][ T6926] overlayfs: conflicting lowerdir path [ 388.972121][ T6942] ceph: separator ':' missing in source [ 389.433093][ T6945] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 389.433093][ T6945] [ 389.447374][ T6945] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 389.460122][ T6945] CIFS mount error: No usable UNC path provided in device string! [ 389.460122][ T6945] [ 389.470306][ T6945] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 389.824110][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.660612][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.685546][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 391.866625][ T6962] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 393.243678][ T6978] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 393.253917][ T6978] autofs4:pid:6978:autofs_fill_super: called with bogus options [ 394.604670][ T6982] block nbd3: shutting down sockets [ 394.938795][ T6992] ceph: separator ':' missing in source [ 395.932908][ T6998] netlink: 'syz.3.673': attribute type 4 has an invalid length. [ 395.984274][ T4372] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 396.283913][ T4372] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 396.843707][ T4372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.852130][ T4372] usb 3-1: Product: syz [ 396.861240][ T4372] usb 3-1: Manufacturer: syz [ 396.866147][ T4372] usb 3-1: SerialNumber: syz [ 396.988262][ T128] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 397.769194][ T130] usb 3-1: USB disconnect, device number 6 [ 397.905330][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 397.913660][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.921157][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 398.814334][ T128] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 398.821331][ T128] ath9k_htc: Failed to initialize the device [ 398.941162][ T130] usb 3-1: ath9k_htc: USB layer deinitialized [ 400.621393][ T7028] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 400.628998][ T7028] autofs4:pid:7028:autofs_fill_super: called with bogus options [ 400.696862][ T7040] ceph: separator ':' missing in source [ 402.605130][ T7056] netlink: 'syz.2.686': attribute type 4 has an invalid length. [ 402.824739][ T128] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 403.046222][ T128] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 403.136153][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.240180][ T128] usb 5-1: Product: syz [ 403.290763][ T128] usb 5-1: Manufacturer: syz [ 403.348654][ T128] usb 5-1: SerialNumber: syz [ 403.540061][ T128] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 403.714775][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.732965][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.748279][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 404.024849][ T14] usb 5-1: USB disconnect, device number 9 [ 404.654493][ T128] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 404.734385][ T128] ath9k_htc: Failed to initialize the device [ 404.740948][ T14] usb 5-1: ath9k_htc: USB layer deinitialized [ 406.808725][ T7095] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 406.821240][ T7095] autofs4:pid:7095:autofs_fill_super: called with bogus options [ 406.834401][ T14] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 408.590073][ T14] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 408.958541][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.090716][ T7106] netlink: 'syz.0.701': attribute type 4 has an invalid length. [ 409.233561][ T14] usb 3-1: can't set config #128, error -71 [ 410.811818][ T14] usb 3-1: USB disconnect, device number 7 [ 411.244523][ T4318] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 411.768477][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 411.776927][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.784703][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.177886][ T7139] NILFS (nullb0): couldn't find nilfs on the device [ 412.741266][ T4318] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 413.165155][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.179117][ T4318] usb 5-1: config 0 descriptor?? [ 414.496293][ T7152] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 414.507949][ T7152] autofs4:pid:7152:autofs_fill_super: called with bogus options [ 414.763751][ T4318] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 415.151205][ T4318] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 415.161428][ T4318] [drm:udl_init] *ERROR* Selecting channel failed [ 415.173882][ T4318] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 415.181543][ T4318] [drm] Initialized udl on minor 2 [ 415.204369][ T4318] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 415.212661][ T4318] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 415.223431][ T4318] usb 5-1: USB disconnect, device number 10 [ 415.230274][ T3656] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 415.239343][ T3656] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 415.254502][ T3656] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 415.289045][ T7159] ======================================================= [ 415.289045][ T7159] WARNING: The mand mount option has been deprecated and [ 415.289045][ T7159] and is ignored by this kernel. Remove the mand [ 415.289045][ T7159] option from the mount to silence this warning. [ 415.289045][ T7159] ======================================================= [ 415.444464][ T7127] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 415.668820][ T7127] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 415.732559][ T7127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.119397][ T7127] usb 2-1: selecting invalid altsetting 3 [ 416.148591][ T7127] comedi comedi5: could not set alternate setting 3 in high speed [ 416.178230][ T7127] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 416.233517][ T7127] usbduxsigma: probe of 2-1:128.0 failed with error -22 [ 416.238456][ T7165] netlink: 'syz.0.721': attribute type 4 has an invalid length. [ 416.294523][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 416.302764][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.310306][ T7163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.454937][ T4416] usb 2-1: USB disconnect, device number 9 [ 416.814088][ T7175] NILFS (nullb0): couldn't find nilfs on the device [ 418.429039][ T7189] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 418.429039][ T7189] [ 418.442908][ T7189] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 418.461922][ T7189] CIFS mount error: No usable UNC path provided in device string! [ 418.461922][ T7189] [ 418.472189][ T7189] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 420.406450][ T7204] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 420.406450][ T7204] [ 420.420419][ T7204] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 420.433379][ T7204] CIFS mount error: No usable UNC path provided in device string! [ 420.433379][ T7204] [ 420.443616][ T7204] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 421.245145][ T7210] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 421.257699][ T7210] autofs4:pid:7210:autofs_fill_super: called with bogus options [ 423.816103][ T7222] netlink: 'syz.4.734': attribute type 4 has an invalid length. [ 424.140740][ T7216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 425.020816][ T7127] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 425.133714][ T7216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 425.222727][ T7216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 425.332487][ T7127] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 426.111098][ T7127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.128674][ T7127] usb 1-1: selecting invalid altsetting 3 [ 426.155415][ T7127] comedi comedi5: could not set alternate setting 3 in high speed [ 426.163299][ T7127] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 426.193914][ T7127] usbduxsigma: probe of 1-1:128.0 failed with error -22 [ 427.020395][ T7254] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 427.020395][ T7254] [ 427.034341][ T7254] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 427.047241][ T7254] CIFS mount error: No usable UNC path provided in device string! [ 427.047241][ T7254] [ 427.057404][ T7254] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 427.398542][ T4416] usb 1-1: USB disconnect, device number 9 [ 427.497043][ T7260] ip_tables: iptables: counters copy to user failed while replacing table [ 427.945279][ T7268] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 427.957646][ T7268] autofs4:pid:7268:autofs_fill_super: called with bogus options [ 430.323814][ T7280] netlink: 'syz.2.751': attribute type 4 has an invalid length. [ 433.582254][ T7305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 433.600979][ T7305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.609986][ T7305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.324555][ T4416] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 434.349895][ T7309] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 434.349895][ T7309] [ 434.363781][ T7309] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 434.376862][ T7309] CIFS mount error: No usable UNC path provided in device string! [ 434.376862][ T7309] [ 434.386970][ T7309] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 435.524490][ T5343] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 435.738606][ T5343] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 435.754952][ T5343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.851411][ T5343] usb 1-1: selecting invalid altsetting 3 [ 435.857380][ T5343] comedi comedi5: could not set alternate setting 3 in high speed [ 435.865814][ T5343] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 435.877550][ T5343] usbduxsigma: probe of 1-1:128.0 failed with error -22 [ 435.982762][ T7328] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 435.992643][ T7328] autofs4:pid:7328:autofs_fill_super: called with bogus options [ 437.502640][ T7127] usb 1-1: USB disconnect, device number 10 [ 439.122172][ T7345] binder: 7344:7345 ioctl c0306201 200000000080 returned -14 [ 439.135779][ T7345] binder: 7344:7345 ioctl c0306201 2000000003c0 returned -14 [ 439.936669][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.946694][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.574256][ T4416] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 441.799797][ T4416] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 441.838629][ T4416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.952958][ T4416] usb 1-1: config 0 descriptor?? [ 442.582249][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.627739][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.218538][ T4416] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 443.267859][ T4416] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 443.282651][ T4416] [drm:udl_init] *ERROR* Selecting channel failed [ 443.295446][ T4416] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 443.303057][ T4416] [drm] Initialized udl on minor 2 [ 443.381861][ T4416] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 443.391706][ T4416] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 444.258289][ T4416] usb 1-1: USB disconnect, device number 11 [ 444.279555][ T4284] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 444.291511][ T4284] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 444.299777][ T4284] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 444.554301][ T4318] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 444.568473][ T7400] block nbd3: shutting down sockets [ 444.847532][ T4318] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 445.281858][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.312864][ T4318] usb 3-1: selecting invalid altsetting 3 [ 445.319638][ T4318] comedi comedi5: could not set alternate setting 3 in high speed [ 445.333261][ T4318] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 445.350239][ T4318] usbduxsigma: probe of 3-1:128.0 failed with error -22 [ 446.612725][ T4318] usb 3-1: USB disconnect, device number 9 [ 448.124342][ T7127] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 448.764352][ T7127] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 448.773447][ T7127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.852365][ T7127] usb 4-1: config 0 descriptor?? [ 449.382413][ T7447] block nbd2: shutting down sockets [ 449.498113][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.519749][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.626811][ T7127] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 449.650464][ T7127] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 449.666280][ T7127] [drm:udl_init] *ERROR* Selecting channel failed [ 450.795529][ T7127] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 450.803049][ T7127] [drm] Initialized udl on minor 2 [ 450.820370][ T7127] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 450.840753][ T7127] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 451.234465][ T4342] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 451.446350][ T4342] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 451.474572][ T4342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.618395][ T7127] usb 4-1: USB disconnect, device number 6 [ 451.640645][ T14] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 452.352072][ T14] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 452.357740][ T4342] usb 2-1: selecting invalid altsetting 3 [ 452.360100][ T14] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 452.423361][ T4342] comedi comedi5: could not set alternate setting 3 in high speed [ 452.462027][ T4342] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 452.486307][ T4342] usbduxsigma: probe of 2-1:128.0 failed with error -22 [ 453.269766][ T4342] usb 2-1: USB disconnect, device number 10 [ 455.041517][ T7499] block nbd0: shutting down sockets [ 455.329847][ T7500] ip_tables: iptables: counters copy to user failed while replacing table [ 457.754300][ T3656] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 457.949773][ T3656] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 458.010451][ T3656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.058756][ T3656] usb 2-1: config 0 descriptor?? [ 458.661624][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.964367][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.535782][ T3656] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 460.690127][ T3656] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 460.701255][ T3656] [drm:udl_init] *ERROR* Selecting channel failed [ 460.720062][ T3656] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 460.731722][ T3656] [drm] Initialized udl on minor 2 [ 460.739589][ T3656] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 460.747941][ T3656] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 460.778690][ T3656] usb 2-1: USB disconnect, device number 11 [ 460.785357][ T14] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 460.796469][ T14] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 460.804558][ T14] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 460.984750][ T7546] binder: 7545:7546 ioctl c0306201 200000000080 returned -14 [ 462.106877][ T7553] binder: 7545:7553 ioctl c0306201 2000000003c0 returned -14 [ 462.216584][ T4284] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 463.034616][ T4284] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 463.037369][ T7564] Cannot find set identified by id 0 to match [ 463.043734][ T4284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.050611][ T4284] usb 5-1: selecting invalid altsetting 3 [ 463.064472][ T4284] comedi comedi5: could not set alternate setting 3 in high speed [ 463.081533][ T4284] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 463.105019][ T4284] usbduxsigma: probe of 5-1:128.0 failed with error -22 [ 463.553600][ T4321] usb 5-1: USB disconnect, device number 11 [ 464.130616][ T7576] befs: (nbd1): No write support. Marking filesystem read-only [ 464.171025][ T7576] syz.1.826: attempt to access beyond end of device [ 464.171025][ T7576] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 464.261255][ T7579] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 464.261255][ T7579] [ 464.275366][ T7579] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 464.288149][ T7579] CIFS mount error: No usable UNC path provided in device string! [ 464.288149][ T7579] [ 464.298339][ T7579] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 465.444736][ T4352] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 465.664904][ T4321] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 465.709932][ T4352] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.757042][ T4352] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 465.850734][ T4352] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.901005][ T4321] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 465.943362][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.008421][ T4352] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 466.106420][ T4321] usb 5-1: config 0 descriptor?? [ 466.149825][ T4352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 466.284352][ T4352] usb 2-1: Product: syz [ 466.288623][ T4352] usb 2-1: Manufacturer: syz [ 466.344991][ T7576] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 466.361287][ T4352] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 466.439714][ T4352] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 466.499957][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.514763][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.585846][ T4352] usb 2-1: USB disconnect, device number 12 [ 466.617364][ T4352] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 467.777256][ T4352] garmin_gps 2-1:1.0: device disconnected [ 467.855223][ T4321] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 467.863791][ T4321] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 467.904503][ T4321] [drm:udl_init] *ERROR* Selecting channel failed [ 467.917601][ T4321] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 467.934385][ T4321] [drm] Initialized udl on minor 2 [ 468.096343][ T4321] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 468.106217][ T4321] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 468.117410][ T4321] usb 5-1: USB disconnect, device number 12 [ 468.124367][ T4284] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 468.134481][ T4284] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 468.142451][ T4284] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 469.224496][ T7619] ip_tables: iptables: counters copy to user failed while replacing table [ 476.677535][ T7673] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 476.884902][ T4321] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 477.122999][ T4321] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 477.811017][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.827122][ T4321] usb 5-1: Product: syz [ 477.831415][ T4321] usb 5-1: Manufacturer: syz [ 477.836348][ T4321] usb 5-1: SerialNumber: syz [ 477.884115][ T4284] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 478.016257][ T7682] Cannot find set identified by id 0 to match [ 478.454976][ T4321] usb 5-1: USB disconnect, device number 13 [ 478.974321][ T4284] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 478.981790][ T4284] ath9k_htc: Failed to initialize the device [ 479.494391][ T4321] usb 5-1: ath9k_htc: USB layer deinitialized [ 483.798514][ T7720] mtrr: base(0xe3b7000) is not aligned on a size(0x0000) boundary [ 485.098046][ T7728] Cannot find set identified by id 0 to match [ 488.774914][ T7756] binder: 7755:7756 ioctl c0306201 200000000080 returned -14 [ 490.773434][ T7769] NILFS (nullb0): couldn't find nilfs on the device [ 492.684262][ T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 494.531294][ T14] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 495.568816][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.601568][ T14] usb 1-1: config 0 descriptor?? [ 495.721469][ T14] usb 1-1: can't set config #0, error -71 [ 495.764440][ T14] usb 1-1: USB disconnect, device number 12 [ 495.952741][ T7811] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 495.952741][ T7811] [ 495.966591][ T7811] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 495.979531][ T7811] CIFS mount error: No usable UNC path provided in device string! [ 495.979531][ T7811] [ 495.989699][ T7811] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 500.388327][ T7810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 500.452814][ T7810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.300439][ T7810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.425269][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.431717][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.377772][ T7882] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 509.377772][ T7882] [ 509.391554][ T7882] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 509.404276][ T7882] CIFS mount error: No usable UNC path provided in device string! [ 509.404276][ T7882] [ 509.414409][ T7882] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 511.415136][ T7895] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.429194][ T7895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.437358][ T7895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.784939][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 526.796774][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.805633][ T7973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.584265][ T130] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 528.820376][ T130] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 529.574287][ T130] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 529.584151][ T130] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 529.594068][ T130] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.655497][ T130] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 529.664642][ T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.758996][ T130] usb 1-1: can't set config #27, error -71 [ 529.783914][ T130] usb 1-1: USB disconnect, device number 13 [ 530.899248][ T8024] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 530.899248][ T8024] [ 530.913097][ T8024] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 530.925969][ T8024] CIFS mount error: No usable UNC path provided in device string! [ 530.925969][ T8024] [ 530.936061][ T8024] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 532.953123][ T8035] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 532.964279][ T8035] autofs4:pid:8035:autofs_fill_super: called with bogus options [ 534.972340][ T8045] ip_tables: iptables: counters copy to user failed while replacing table [ 545.564118][ T8109] netlink: 36 bytes leftover after parsing attributes in process `syz.0.963'. [ 546.215621][ T8116] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 546.215621][ T8116] [ 546.229471][ T8116] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 546.242629][ T8116] CIFS mount error: No usable UNC path provided in device string! [ 546.242629][ T8116] [ 546.252708][ T8116] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 551.163577][ T8154] ip_tables: iptables: counters copy to user failed while replacing table [ 551.703380][ T8163] autofs4:pid:8163:autofs_fill_super: called with bogus options [ 555.293377][ T8173] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 555.293377][ T8173] [ 555.307489][ T8173] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 555.320404][ T8173] CIFS mount error: No usable UNC path provided in device string! [ 555.320404][ T8173] [ 555.330753][ T8173] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 556.569797][ T8198] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 556.582088][ T8198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 556.590432][ T8198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 557.944699][ T7127] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 558.160569][ T7127] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 558.171035][ T8209] autofs4:pid:8209:autofs_fill_super: called with bogus options [ 558.191108][ T7127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.971467][ T7127] usb 4-1: selecting invalid altsetting 3 [ 559.029188][ T7127] comedi comedi5: could not set alternate setting 3 in high speed [ 559.459267][ T7127] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 559.544553][ T7127] usbduxsigma: probe of 4-1:128.0 failed with error -22 [ 560.436868][ T4318] usb 4-1: USB disconnect, device number 7 [ 561.999362][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 562.012203][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 562.020310][ T8239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 562.817816][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.824141][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.943544][ T8250] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 563.943544][ T8250] [ 563.957555][ T8250] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 563.970523][ T8250] CIFS mount error: No usable UNC path provided in device string! [ 563.970523][ T8250] [ 563.980792][ T8250] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 565.015453][ T8257] nfs: Unknown parameter 'ÿÿÿÿ' [ 565.503798][ T8261] autofs4:pid:8261:autofs_fill_super: called with bogus options [ 570.564299][ T130] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 570.873105][ T130] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 570.888304][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.896736][ T130] usb 5-1: Product: syz [ 570.900982][ T130] usb 5-1: Manufacturer: syz [ 570.905679][ T130] usb 5-1: SerialNumber: syz [ 571.764839][ T130] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 573.164265][ T130] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 573.171290][ T130] ath9k_htc: Failed to initialize the device [ 573.276664][ T8315] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 573.276664][ T8315] [ 573.290417][ T8315] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 573.303283][ T8315] CIFS mount error: No usable UNC path provided in device string! [ 573.303283][ T8315] [ 573.313390][ T8315] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 574.092456][ T130] usb 5-1: ath9k_htc: USB layer deinitialized [ 574.409014][ T4318] usb 5-1: USB disconnect, device number 14 [ 577.034384][ T4342] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 578.949335][ T4342] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 579.019353][ T4342] usb 1-1: can't read configurations, error -71 [ 581.064293][ T3656] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 582.081500][ T3656] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 582.112448][ T3656] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.130551][ T3656] usb 5-1: Product: syz [ 582.144781][ T3656] usb 5-1: Manufacturer: syz [ 582.149421][ T3656] usb 5-1: SerialNumber: syz [ 582.333164][ T3656] usb 5-1: can't set config #1, error -71 [ 583.051346][ T3656] usb 5-1: USB disconnect, device number 15 [ 583.309641][ T8375] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 583.321741][ T8375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 583.329790][ T8375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 589.704281][ T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 589.899116][ T14] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 589.971376][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.011393][ T14] usb 3-1: Product: syz [ 590.024102][ T14] usb 3-1: Manufacturer: syz [ 590.029088][ T14] usb 3-1: SerialNumber: syz [ 590.072653][ T14] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 590.144446][ T4342] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 590.367224][ T4342] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 590.376921][ T4342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.429027][ T4342] usb 4-1: selecting invalid altsetting 3 [ 590.435054][ T4342] comedi comedi5: could not set alternate setting 3 in high speed [ 590.443758][ T4342] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 590.461944][ T4342] usbduxsigma: probe of 4-1:128.0 failed with error -22 [ 590.515452][ T4318] usb 3-1: USB disconnect, device number 10 [ 590.641625][ T8417] overlayfs: failed to resolve './file1': -2 [ 590.856854][ T4342] usb 4-1: USB disconnect, device number 8 [ 591.479034][ T14] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 591.601583][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 591.616359][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 591.624505][ T8426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 591.775049][ T14] ath9k_htc: Failed to initialize the device [ 591.781583][ T4318] usb 3-1: ath9k_htc: USB layer deinitialized [ 595.969243][ T8456] overlayfs: failed to resolve './file1': -2 [ 597.467652][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 597.480334][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 597.488334][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 599.314305][ T4342] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 600.561205][ T4342] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 600.580683][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.605254][ T4342] usb 2-1: Product: syz [ 600.618193][ T4342] usb 2-1: Manufacturer: syz [ 600.633162][ T4342] usb 2-1: SerialNumber: syz [ 600.694697][ T4318] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 600.748402][ T4342] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 601.482382][ T4416] usb 2-1: USB disconnect, device number 13 [ 601.497782][ T8506] overlayfs: failed to resolve './file1': -2 [ 601.532674][ T4318] usb 4-1: device descriptor read/all, error -71 [ 601.711105][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 601.722718][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 601.731018][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.424381][ T4342] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 602.431852][ T4342] ath9k_htc: Failed to initialize the device [ 602.539370][ T4416] usb 2-1: ath9k_htc: USB layer deinitialized [ 602.982888][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 602.997446][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 603.005900][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 607.923117][ T8559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 607.935012][ T8559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 607.942962][ T8559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.074263][ T4416] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 609.895345][ T4416] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 609.918665][ T4416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.979993][ T4416] usb 3-1: selecting invalid altsetting 3 [ 611.011564][ T4416] comedi comedi5: could not set alternate setting 3 in high speed [ 611.103954][ T4416] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 611.177458][ T4416] usbduxsigma: probe of 3-1:128.0 failed with error -22 [ 612.908273][ T4416] usb 3-1: USB disconnect, device number 11 [ 614.585782][ T8604] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 614.597468][ T8604] autofs4:pid:8604:autofs_fill_super: called with bogus options [ 617.042831][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 617.725844][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 617.754504][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 620.184522][ T154] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 620.834369][ T8643] binder: 8642:8643 ioctl c0306201 200000000080 returned -14 [ 620.873277][ T8643] binder: BINDER_SET_CONTEXT_MGR already set [ 620.907287][ T8643] binder: 8642:8643 ioctl 4018620d 200000004a80 returned -16 [ 621.608881][ T154] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 621.622967][ T154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.634363][ T8643] binder: 8642:8643 ioctl c0306201 2000000003c0 returned -14 [ 621.777394][ T154] usb 3-1: selecting invalid altsetting 3 [ 621.805066][ T154] comedi comedi5: could not set alternate setting 3 in high speed [ 621.833153][ T154] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 621.880010][ T154] usbduxsigma: probe of 3-1:128.0 failed with error -22 [ 622.290121][ T7127] usb 3-1: USB disconnect, device number 12 [ 624.255955][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.262495][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.825527][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 625.834024][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.888215][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 626.194392][ T4342] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 626.437314][ T4342] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 626.447644][ T4342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.564255][ T4342] usb 3-1: Product: syz [ 626.568593][ T4342] usb 3-1: Manufacturer: syz [ 626.573210][ T4342] usb 3-1: SerialNumber: syz [ 626.779199][ T4342] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 627.689047][ T4416] usb 3-1: USB disconnect, device number 13 [ 627.785060][ T8698] FAULT_INJECTION: forcing a failure. [ 627.785060][ T8698] name failslab, interval 1, probability 0, space 0, times 0 [ 627.798139][ T8698] CPU: 0 PID: 8698 Comm: syz.4.1122 Not tainted syzkaller #0 [ 627.805531][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 627.815606][ T8698] Call Trace: [ 627.818913][ T8698] [ 627.821958][ T8698] dump_stack_lvl+0x188/0x24e [ 627.826666][ T8698] ? show_regs_print_info+0x12/0x12 [ 627.831936][ T8698] ? load_image+0x410/0x410 [ 627.836475][ T8698] ? __wake_up_common+0x5b/0x4d0 [ 627.841463][ T8698] ? __wake_up+0x12e/0x1a0 [ 627.845918][ T8698] should_fail_ex+0x390/0x4c0 [ 627.850641][ T8698] should_failslab+0x5/0x20 [ 627.855344][ T8698] slab_pre_alloc_hook+0x59/0x300 [ 627.860420][ T8698] kmem_cache_alloc+0x56/0x2f0 [ 627.865203][ T8698] ? fdb_create+0x37/0x1230 [ 627.869714][ T8698] fdb_create+0x37/0x1230 [ 627.874098][ T8698] ? br_fdb_find_rcu+0x30/0x30 [ 627.878879][ T8698] ? br_fdb_find+0x82/0x210 [ 627.883376][ T8698] ? br_fdb_find+0x82/0x210 [ 627.887874][ T8698] fdb_add_local+0x121/0x240 [ 627.892465][ T8698] br_fdb_changeaddr+0x351/0x410 [ 627.897398][ T8698] br_device_event+0x49e/0x8f0 [ 627.902152][ T8698] ? br_switchdev_event+0x480/0x480 [ 627.907364][ T8698] ? packet_notifier+0xa22/0xa40 [ 627.912485][ T8698] ? lockdep_rtnl_is_held+0x22/0x30 [ 627.917902][ T8698] ? packet_notifier+0x74/0xa40 [ 627.922765][ T8698] raw_notifier_call_chain+0xcb/0x160 [ 627.928254][ T8698] call_netdevice_notifiers+0x8d/0xd0 [ 627.933648][ T8698] ? netdev_adjacent_rename_links+0x4f0/0x4f0 [ 627.939724][ T8698] ? dev_ifsioc+0x514/0xd50 [ 627.944229][ T8698] dev_ifsioc+0x521/0xd50 [ 627.948553][ T8698] ? dev_ioctl+0xe80/0xe80 [ 627.952984][ T8698] ? apparmor_capable+0x12c/0x190 [ 627.958023][ T8698] ? full_name_hash+0x8e/0xe0 [ 627.962727][ T8698] ? dev_load+0x1d/0x1e0 [ 627.967001][ T8698] ? dev_load+0x1d/0x1e0 [ 627.971281][ T8698] dev_ioctl+0x55e/0xe80 [ 627.975586][ T8698] sock_do_ioctl+0x245/0x320 [ 627.980200][ T8698] ? sock_show_fdinfo+0xb0/0xb0 [ 627.985072][ T8698] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 627.991098][ T8698] sock_ioctl+0x48a/0x700 [ 627.995454][ T8698] ? sock_poll+0x420/0x420 [ 627.999893][ T8698] ? tomoyo_file_ioctl+0xd/0x30 [ 628.004777][ T8698] ? bpf_lsm_file_ioctl+0x5/0x10 [ 628.009746][ T8698] ? security_file_ioctl+0x7c/0xa0 [ 628.014930][ T8698] ? sock_poll+0x420/0x420 [ 628.019373][ T8698] __se_sys_ioctl+0xfa/0x170 [ 628.023994][ T8698] do_syscall_64+0x4c/0xa0 [ 628.028442][ T8698] ? clear_bhb_loop+0x60/0xb0 [ 628.033142][ T8698] ? clear_bhb_loop+0x60/0xb0 [ 628.037889][ T8698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.043821][ T8698] RIP: 0033:0x7f4be099e159 [ 628.048255][ T8698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.067980][ T8698] RSP: 002b:00007f4be17cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.076437][ T8698] RAX: ffffffffffffffda RBX: 00007f4be0c25fa0 RCX: 00007f4be099e159 [ 628.084441][ T8698] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000007 [ 628.092457][ T8698] RBP: 00007f4be0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 628.100490][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.108490][ T8698] R13: 00007f4be0c26038 R14: 00007f4be0c25fa0 R15: 00007ffed9619338 [ 628.116509][ T8698] [ 628.501000][ T4342] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 628.540730][ T4342] ath9k_htc: Failed to initialize the device [ 628.577909][ T4416] usb 3-1: ath9k_htc: USB layer deinitialized [ 630.044421][ T4318] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 630.247207][ T4318] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 630.266398][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.129114][ T4318] usb 4-1: selecting invalid altsetting 3 [ 631.151152][ T4318] comedi comedi5: could not set alternate setting 3 in high speed [ 631.171909][ T4318] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 631.224431][ T4318] usbduxsigma: probe of 4-1:128.0 failed with error -22 [ 632.149770][ T4342] usb 4-1: USB disconnect, device number 11 [ 633.752481][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 633.796702][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 633.854691][ T8734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 634.154749][ T4342] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 634.416135][ T4342] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 634.490048][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.894280][ T4342] usb 4-1: Product: syz [ 634.906837][ T4342] usb 4-1: Manufacturer: syz [ 634.921683][ T4342] usb 4-1: SerialNumber: syz [ 635.093038][ T4416] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 635.584989][ T154] usb 4-1: USB disconnect, device number 12 [ 636.254403][ T4416] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 636.261433][ T4416] ath9k_htc: Failed to initialize the device [ 636.268379][ T154] usb 4-1: ath9k_htc: USB layer deinitialized [ 641.116985][ T4416] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 641.356555][ T4416] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 641.374305][ T4416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.436960][ T4416] usb 5-1: selecting invalid altsetting 3 [ 641.442747][ T4416] comedi comedi5: could not set alternate setting 3 in high speed [ 641.461514][ T4416] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 641.479003][ T4416] usbduxsigma: probe of 5-1:128.0 failed with error -22 [ 641.666763][ T8803] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 641.716744][ T8803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 641.773703][ T8803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 642.120348][ T4416] usb 5-1: USB disconnect, device number 16 [ 642.336722][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 642.351095][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 642.359499][ T8808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 649.064953][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 649.093335][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 649.103994][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 650.854354][ T14] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 651.789546][ T14] usb 5-1: device descriptor read/all, error -71 [ 653.505749][ T26] audit: type=1326 audit(1791068640.203:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.2.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bd79e159 code=0x7ffc0000 [ 653.782180][ T26] audit: type=1326 audit(1791068640.243:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.2.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bd79e159 code=0x7ffc0000 [ 654.282455][ T26] audit: type=1326 audit(1791068640.253:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.2.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe0bd79e159 code=0x7ffc0000 [ 655.065311][ T26] audit: type=1326 audit(1791068640.263:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.2.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bd79e159 code=0x7ffc0000 [ 655.094317][ T26] audit: type=1326 audit(1791068640.263:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.2.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bd79e159 code=0x7ffc0000 [ 655.160069][ T26] audit: type=1326 audit(1791068640.283:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.2.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe0bd79e159 code=0x7ffc0000 [ 656.414630][ T26] audit: type=1326 audit(1791068640.293:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.2.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bd79e159 code=0x7ffc0000 [ 656.648130][ T26] audit: type=1326 audit(1791068640.303:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.2.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bd79e159 code=0x7ffc0000 [ 656.754577][ T26] audit: type=1326 audit(1791068640.343:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.2.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0bd79e159 code=0x7ffc0000 [ 657.494294][ T26] audit: type=1326 audit(1791068640.363:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.2.1171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bd79e159 code=0x7ffc0000 [ 667.020451][ T8954] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 667.030662][ T8954] autofs4:pid:8954:autofs_fill_super: called with bogus options [ 672.612511][ T8979] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 672.612511][ T8979] [ 672.627384][ T8979] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 672.640150][ T8979] CIFS mount error: No usable UNC path provided in device string! [ 672.640150][ T8979] [ 672.650232][ T8979] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 677.193552][ T8995] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 678.424299][ T3656] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 679.185243][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 679.193502][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 679.200955][ T9014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 679.711400][ T3656] usb 5-1: device descriptor read/all, error -71 [ 680.897819][ T9032] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 680.897819][ T9032] [ 680.911726][ T9032] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 680.924470][ T9032] CIFS mount error: No usable UNC path provided in device string! [ 680.924470][ T9032] [ 680.934723][ T9032] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 685.097514][ T9054] binder: 9053:9054 ioctl c0306201 200000000080 returned -14 [ 685.137468][ T9054] binder: 9053:9054 ioctl c0306201 2000000003c0 returned -14 [ 685.707148][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.720527][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.051807][ T9061] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 686.051807][ T9061] [ 686.065603][ T9061] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 686.078699][ T9061] CIFS mount error: No usable UNC path provided in device string! [ 686.078699][ T9061] [ 686.089105][ T9061] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 689.346554][ T9095] syz.0.1224 uses obsolete (PF_INET,SOCK_PACKET) [ 692.850286][ T9105] binder: 9104:9105 ioctl c0306201 200000000080 returned -14 [ 693.081523][ T9105] binder: 9104:9105 ioctl c0306201 2000000003c0 returned -14 [ 695.629124][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 695.638162][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 695.645709][ T9130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 700.935969][ T9163] binder: 9162:9163 ioctl c0306201 200000000080 returned -14 [ 700.946402][ T9163] binder: 9162:9163 ioctl c0306201 2000000003c0 returned -14 [ 701.917905][ T9170] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 701.917905][ T9170] [ 701.931798][ T9170] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 701.944623][ T9170] CIFS mount error: No usable UNC path provided in device string! [ 701.944623][ T9170] [ 701.963298][ T9170] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 703.407331][ T9180] FAULT_INJECTION: forcing a failure. [ 703.407331][ T9180] name failslab, interval 1, probability 0, space 0, times 0 [ 703.469421][ T9180] CPU: 1 PID: 9180 Comm: syz.1.1247 Not tainted syzkaller #0 [ 703.476854][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 703.486933][ T9180] Call Trace: [ 703.490231][ T9180] [ 703.493174][ T9180] dump_stack_lvl+0x188/0x24e [ 703.497877][ T9180] ? show_regs_print_info+0x12/0x12 [ 703.503096][ T9180] ? load_image+0x410/0x410 [ 703.507624][ T9180] ? __might_sleep+0xd0/0xd0 [ 703.512228][ T9180] ? __lock_acquire+0x7ea0/0x7ea0 [ 703.517281][ T9180] should_fail_ex+0x390/0x4c0 [ 703.521985][ T9180] should_failslab+0x5/0x20 [ 703.526504][ T9180] slab_pre_alloc_hook+0x59/0x300 [ 703.531557][ T9180] ? nf_nat_register_fn+0x29a/0x540 [ 703.536787][ T9180] __kmem_cache_alloc_node+0x4f/0x270 [ 703.542190][ T9180] ? nf_nat_register_fn+0x29a/0x540 [ 703.547423][ T9180] kmalloc_trace+0x26/0xe0 [ 703.551859][ T9180] nf_nat_register_fn+0x29a/0x540 [ 703.556913][ T9180] iptable_nat_table_init+0xd0/0x2d0 [ 703.562202][ T9180] xt_find_table_lock+0x220/0x360 [ 703.567233][ T9180] xt_request_find_table_lock+0x22/0x100 [ 703.572866][ T9180] do_ipt_get_ctl+0x6e2/0x11a0 [ 703.577631][ T9180] ? do_ipt_set_ctl+0xe00/0xe00 [ 703.582509][ T9180] ? nf_getsockopt+0x21b/0x280 [ 703.587287][ T9180] ? __lock_acquire+0x7ea0/0x7ea0 [ 703.592355][ T9180] ? trace_contention_end+0x5f/0x170 [ 703.597650][ T9180] ? __mutex_lock+0x1ab/0xae0 [ 703.602329][ T9180] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 703.607960][ T9180] ? mutex_unlock+0x10/0x10 [ 703.612465][ T9180] ? __might_fault+0xa6/0x120 [ 703.617142][ T9180] ? __lock_acquire+0x7ea0/0x7ea0 [ 703.622170][ T9180] nf_getsockopt+0x25e/0x280 [ 703.626767][ T9180] ip_getsockopt+0x19b/0x230 [ 703.631391][ T9180] ? ip_get_mcast_msfilter+0x3c0/0x3c0 [ 703.636851][ T9180] ? aa_sock_opt_perm+0x74/0x100 [ 703.641794][ T9180] ? sctp_getsockopt+0x9e/0x8a0 [ 703.646644][ T9180] ? sock_recv_errqueue+0x590/0x590 [ 703.651842][ T9180] __sys_getsockopt+0x1b0/0x230 [ 703.656691][ T9180] __x64_sys_getsockopt+0xb1/0xc0 [ 703.661717][ T9180] do_syscall_64+0x4c/0xa0 [ 703.666128][ T9180] ? clear_bhb_loop+0x60/0xb0 [ 703.670806][ T9180] ? clear_bhb_loop+0x60/0xb0 [ 703.675476][ T9180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 703.681368][ T9180] RIP: 0033:0x7fb2f539e159 [ 703.685780][ T9180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.705382][ T9180] RSP: 002b:00007fb2f61db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 703.713800][ T9180] RAX: ffffffffffffffda RBX: 00007fb2f5625fa0 RCX: 00007fb2f539e159 [ 703.721769][ T9180] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 703.729733][ T9180] RBP: 00007fb2f543506b R08: 00002000000000c0 R09: 0000000000000000 [ 703.737708][ T9180] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 703.745671][ T9180] R13: 00007fb2f5626038 R14: 00007fb2f5625fa0 R15: 00007fff336948b8 [ 703.753652][ T9180] [ 706.658025][ T9201] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 706.658025][ T9201] [ 706.671888][ T9201] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 706.684733][ T9201] CIFS mount error: No usable UNC path provided in device string! [ 706.684733][ T9201] [ 706.694793][ T9201] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 708.627944][ T9211] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 708.647591][ T9211] autofs4:pid:9211:autofs_fill_super: called with bogus options [ 711.294830][ T7] kworker/dying (7) used greatest stack depth: 15872 bytes left [ 720.910967][ T9268] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 720.919346][ T9268] autofs4:pid:9268:autofs_fill_super: called with bogus options [ 722.403447][ T9288] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 722.403447][ T9288] [ 722.417323][ T9288] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 722.430085][ T9288] CIFS mount error: No usable UNC path provided in device string! [ 722.430085][ T9288] [ 722.440215][ T9288] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 730.662765][ T9334] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 730.662765][ T9334] [ 730.676596][ T9334] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 730.689367][ T9334] CIFS mount error: No usable UNC path provided in device string! [ 730.689367][ T9334] [ 730.699457][ T9334] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 731.221613][ T9341] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 731.235436][ T9341] autofs4:pid:9341:autofs_fill_super: called with bogus options [ 736.654667][ T9385] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1300'. [ 737.501759][ T9384] sched: RT throttling activated [ 739.938560][ T9398] ip_tables: iptables: counters copy to user failed while replacing table [ 740.015870][ T9412] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 740.015870][ T9412] [ 740.029645][ T9412] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 740.042436][ T9412] CIFS mount error: No usable UNC path provided in device string! [ 740.042436][ T9412] [ 740.052527][ T9412] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 746.261909][ T9447] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 746.269890][ T9447] autofs4:pid:9447:autofs_fill_super: called with bogus options [ 746.741199][ T9451] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 746.741199][ T9451] [ 746.755120][ T9451] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 746.767878][ T9451] CIFS mount error: No usable UNC path provided in device string! [ 746.767878][ T9451] [ 746.778016][ T9451] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 747.086217][ T9455] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 747.086217][ T9455] [ 747.100207][ T9455] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 747.113175][ T9455] CIFS mount error: No usable UNC path provided in device string! [ 747.113175][ T9455] [ 747.123411][ T9455] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 747.136487][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.142816][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.909133][ T9477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 751.723183][ T9477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 751.822778][ T9477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 753.006921][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 753.121468][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 753.174780][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 753.277397][ T9503] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 753.286937][ T9503] autofs4:pid:9503:autofs_fill_super: called with bogus options [ 754.264335][ T9515] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 754.264335][ T9515] [ 754.278106][ T9515] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 754.290840][ T9515] CIFS mount error: No usable UNC path provided in device string! [ 754.290840][ T9515] [ 754.301043][ T9515] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 759.686782][ T9548] ------------[ cut here ]------------ [ 759.692521][ T9548] fmt: 'level=%s [ 759.692521][ T9548] ' current_buffer: ' <...>-4394 [001] ..... 73.346044: dwc3_ctrl_req: Get Device Status(Length = 0) [ 759.692521][ T9548] <...>-1970561396 [001] .p.35 73.401336: Unknown type 25955 [ 759.692521][ T9548] -0 [001] ..... 73.426568: initcall_level: level=' [ 759.692741][ T9548] WARNING: CPU: 0 PID: 9548 at kernel/trace/trace.c:3891 trace_check_vprintf+0xd4a/0x1080 [ 759.735568][ T9548] Modules linked in: [ 759.739485][ T9548] CPU: 0 PID: 9548 Comm: syz.4.1339 Not tainted syzkaller #0 [ 759.746941][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 759.757128][ T9548] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 759.763147][ T9548] Code: e8 9b 20 fc ff c6 05 93 49 86 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 20 84 90 8a 48 8b 74 24 60 48 89 c2 e8 b6 93 c7 ff <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 759.783086][ T9548] RSP: 0018:ffffc90004437a60 EFLAGS: 00010246 [ 759.789264][ T9548] RAX: 3e18c6c661019700 RBX: 0000000000000000 RCX: 0000000000080000 [ 759.797344][ T9548] RDX: ffffc90011301000 RSI: 0000000000009da7 RDI: 0000000000009da8 [ 759.805455][ T9548] RBP: ffff88801b7580d8 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 759.813466][ T9548] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffffffff8a800540 [ 759.821520][ T9548] R13: ffffc90004437ba0 R14: dffffc0000000000 R15: 0000000000000002 [ 759.829550][ T9548] FS: 00007f4be178d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 759.838554][ T9548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.845216][ T9548] CR2: 0000200000009180 CR3: 00000000278cc000 CR4: 00000000003506f0 [ 759.853222][ T9548] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 759.861306][ T9548] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 759.869354][ T9548] Call Trace: [ 759.872647][ T9548] [ 759.875683][ T9548] trace_event_printf+0xea/0x140 [ 759.880646][ T9548] ? trace_print_seq+0x160/0x160 [ 759.885642][ T9548] ? trace_raw_output_prep+0x230/0x230 [ 759.891134][ T9548] trace_raw_output_initcall_level+0x93/0xd0 [ 759.897232][ T9548] tracing_read_pipe+0x53b/0xb10 [ 759.902206][ T9548] ? s_show+0x300/0x300 [ 759.906524][ T9548] vfs_read+0x2db/0x960 [ 759.910713][ T9548] ? kernel_read+0x1e0/0x1e0 [ 759.915498][ T9548] ? __fget_files+0x28/0x460 [ 759.920125][ T9548] ? __fget_files+0x3fc/0x460 [ 759.924920][ T9548] ? __fdget_pos+0x2ae/0x360 [ 759.929539][ T9548] ? ksys_read+0x70/0x260 [ 759.933899][ T9548] ksys_read+0x14d/0x260 [ 759.938267][ T9548] ? vfs_write+0x9a0/0x9a0 [ 759.942714][ T9548] ? lockdep_hardirqs_on+0x94/0x140 [ 759.948009][ T9548] do_syscall_64+0x4c/0xa0 [ 759.952450][ T9548] ? clear_bhb_loop+0x60/0xb0 [ 759.957221][ T9548] ? clear_bhb_loop+0x60/0xb0 [ 759.961926][ T9548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.967902][ T9548] RIP: 0033:0x7f4be099e159 [ 759.972332][ T9548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.992085][ T9548] RSP: 002b:00007f4be178d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 760.000599][ T9548] RAX: ffffffffffffffda RBX: 00007f4be0c26180 RCX: 00007f4be099e159 [ 760.008676][ T9548] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000009 [ 760.016835][ T9548] RBP: 00007f4be0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 760.024912][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.032904][ T9548] R13: 00007f4be0c26218 R14: 00007f4be0c26180 R15: 00007ffed9619338 [ 760.040988][ T9548] [ 760.044037][ T9548] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 760.051326][ T9548] CPU: 0 PID: 9548 Comm: syz.4.1339 Not tainted syzkaller #0 [ 760.058708][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 760.068784][ T9548] Call Trace: [ 760.072068][ T9548] [ 760.075011][ T9548] dump_stack_lvl+0x188/0x24e [ 760.079729][ T9548] ? memcpy+0x3c/0x60 [ 760.083725][ T9548] ? show_regs_print_info+0x12/0x12 [ 760.088963][ T9548] ? load_image+0x410/0x410 [ 760.093546][ T9548] panic+0x2d3/0x710 [ 760.097483][ T9548] ? bpf_jit_dump+0xd0/0xd0 [ 760.102031][ T9548] __warn+0x2f8/0x4f0 [ 760.106062][ T9548] ? trace_check_vprintf+0xd4a/0x1080 [ 760.111473][ T9548] ? trace_check_vprintf+0xd4a/0x1080 [ 760.116890][ T9548] report_bug+0x2ba/0x4f0 [ 760.121241][ T9548] ? trace_check_vprintf+0xd4a/0x1080 [ 760.126732][ T9548] handle_bug+0x3a/0x70 [ 760.130902][ T9548] exc_invalid_op+0x16/0x40 [ 760.135424][ T9548] asm_exc_invalid_op+0x16/0x20 [ 760.140313][ T9548] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 760.146307][ T9548] Code: e8 9b 20 fc ff c6 05 93 49 86 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 20 84 90 8a 48 8b 74 24 60 48 89 c2 e8 b6 93 c7 ff <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 760.165931][ T9548] RSP: 0018:ffffc90004437a60 EFLAGS: 00010246 [ 760.172019][ T9548] RAX: 3e18c6c661019700 RBX: 0000000000000000 RCX: 0000000000080000 [ 760.180003][ T9548] RDX: ffffc90011301000 RSI: 0000000000009da7 RDI: 0000000000009da8 [ 760.187990][ T9548] RBP: ffff88801b7580d8 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 760.195976][ T9548] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: ffffffff8a800540 [ 760.203977][ T9548] R13: ffffc90004437ba0 R14: dffffc0000000000 R15: 0000000000000002 [ 760.212010][ T9548] trace_event_printf+0xea/0x140 [ 760.216985][ T9548] ? trace_print_seq+0x160/0x160 [ 760.221943][ T9548] ? trace_raw_output_prep+0x230/0x230 [ 760.227440][ T9548] trace_raw_output_initcall_level+0x93/0xd0 [ 760.233459][ T9548] tracing_read_pipe+0x53b/0xb10 [ 760.238448][ T9548] ? s_show+0x300/0x300 [ 760.242631][ T9548] vfs_read+0x2db/0x960 [ 760.246825][ T9548] ? kernel_read+0x1e0/0x1e0 [ 760.251433][ T9548] ? __fget_files+0x28/0x460 [ 760.256070][ T9548] ? __fget_files+0x3fc/0x460 [ 760.260772][ T9548] ? __fdget_pos+0x2ae/0x360 [ 760.265375][ T9548] ? ksys_read+0x70/0x260 [ 760.269727][ T9548] ksys_read+0x14d/0x260 [ 760.273988][ T9548] ? vfs_write+0x9a0/0x9a0 [ 760.278423][ T9548] ? lockdep_hardirqs_on+0x94/0x140 [ 760.283639][ T9548] do_syscall_64+0x4c/0xa0 [ 760.288064][ T9548] ? clear_bhb_loop+0x60/0xb0 [ 760.292753][ T9548] ? clear_bhb_loop+0x60/0xb0 [ 760.297449][ T9548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.303354][ T9548] RIP: 0033:0x7f4be099e159 [ 760.307774][ T9548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.327395][ T9548] RSP: 002b:00007f4be178d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 760.335821][ T9548] RAX: ffffffffffffffda RBX: 00007f4be0c26180 RCX: 00007f4be099e159 [ 760.343800][ T9548] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000009 [ 760.351775][ T9548] RBP: 00007f4be0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 760.359751][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.367736][ T9548] R13: 00007f4be0c26218 R14: 00007f4be0c26180 R15: 00007ffed9619338 [ 760.377998][ T9548] [ 760.381301][ T9548] Kernel Offset: disabled [ 760.385690][ T9548] Rebooting in 86400 seconds..