last executing test programs: 4m4.757794835s ago: executing program 32 (id=29): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_udp(0x2, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000240)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8no}, {@shortname_lower}]}, 0x26, 0x350, &(0x7f0000000540)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x400000) 1m59.999484733s ago: executing program 1 (id=588): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380100001000010026bd70000001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m59.71165267s ago: executing program 1 (id=589): r0 = syz_open_dev$media(0x0, 0x1, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r2, 0x89f0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x8, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 1m59.524012213s ago: executing program 1 (id=591): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m56.79367266s ago: executing program 0 (id=608): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001100)={0x1c, &(0x7f0000000f80)={0x0, 0xf, 0x2, '#}'}, 0x0, 0x0}) 1m55.994934072s ago: executing program 2 (id=610): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x5b, 0x0, &(0x7f0000000dc0)="630b0086460491611533c9f7b986", 0x0, 0x10001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1b) 1m55.86359647s ago: executing program 2 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000000000605000000002e5f0e00"], &(0x7f0000000340)=""/149, 0x29, 0x95, 0x1}, 0x28) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rename(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x48) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e33003800650000085c9078ac1414aa0a0101f6890b9c0a0101020a01010144140d3000000bf00000001a00000c07000000048302000000"], 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3018204, &(0x7f0000000140), 0x1, 0x64e, &(0x7f0000000180)="$eJzs3c9rHNcdAPDvzGplyVYtuxRTm5YKerChWD9cU7c92b3UB0MN9aGUHqxakiu8soUlQ+0aKkMPLrQQQq4h8SX/QO7B5JprIMkt54ATgkMISfCGmZ2RF2lXWsvaXcn7+eBdv3kzu+99Z/Rm3vzaCWBgTWRvacTxiLiaRIw3jRuLxsiJYrqnX96/lr2SqNf//EUSScRIRFwrp39W/H8oe0vyf7kfVzaXu3L33o3ZWr3h3xFTq0vLUyt3751eXJq9Pn99/ubMmd+ePTf9u5mzM7sSZxnX2qU//ez///nHbxY+rJ1O4nxcqf5rLorYdqWgJhMxEc+KEJvzhyLiXJZoMV/2mzKEpM/1YGcqxd9jNSKOxXhU4sD6uPFY/F9fKwd0Vb0SUX9x6U4+BOw1yXpTrva3IkCPlf2Act++G/vBe9nQhcYO0Ob4hxrHRmIk3zc6+DTJ95NK2f7ukV0oPyvj+/sn3sxe0eY4xNAulNPO2oOI+Gmr+JO8bkfyQzxZ/GmkTZ/L0tMRMVzMi3SH5U9sGO7139+LxN+8HLJ4zxf/Z/l/2L6oh60y+x0/AIPp8YViQ76WDT3f/mU9w7L/Ey36P2Mttl070e/t35O2/b9yez+SHyNPN/TDsj7P5dZfWd2Y8el/L77ervzm/l/2ysov+4K98ORBxIkN8T9Ms25dsr78kxbLP5sfVzss448ffX6x3bh+x19/FHGy5f7P8zNaWWpqdWm5zNtwfnJqYbE2P914b1nGex/87Z125fc7/mz5R5v4t1r+Wd5yh2W8e/nRUrtxY9vGn342nFzJU8NFzj9nV1dvz0QMJ5eKSZryz6x/sOXqqZym/I4s/lO/LNY7Q83rn3Sr+PMFvdZh/Mt/ufG0kdp8lrTj5b9prZJ7Vu+wDu1k8c/tcPm/1mEZX//1zs83ZI2Wia3iH938VUmn8xwAAAAAAAAGUZqfg03SyfV0mk5ONu7h/UkcTGu3VlZ/tXDrzs25iFP59ZDVtDzTPd4YTrLhmeJ62HL4zIbhX0fE0Yh4ozKaD09eu1Wb63fwAAAAAAAAAAAAAAAAAAAAsEccKu7/L59T/VWlcf9/R1aPdbl2QNd18wFzwN6m/cPgytt/J09w/Xv36wL0lu0/DC7tHwaX9g+Dq7P238kBAmC/sf2HwaX9w+DS/mFwdd7+k67WAwAAAADYVUd/8fiTJCLWfj+avzLDxbhqX2sGdFtzGx/ZasJvih8IiYnuVwroiUpPPwbsJeun/l3dDwOno338b8u+P/AqanlhX945qG/d+B+7JBAAAAAAAAAAAAAAeuXkcff/w6BK4/1+VwHok5e4kd9vAMA+59EfMLjs4wPb3cXf9rcB3f8PAAAAAAAAAAAAAD0zlr+SdLJ4BOhYpOnkZMSPIuJIVJOFxdr8dEQcjoiPK9UD2fBMvysNAAAAAAAAAAAAAAAAAAAAr5iVu/duzNZq87ebE99tyskSbx+OaDHxbiTKp4t1MnGbOr9MonwK6q7H9RKJoSIRSe9LH42IPTETupIYaspJItayJb8nKnZ7pVvt68USaV6NPq6UAAAAAAAAAAAAAAAAAABgQDXde9zaibd6XCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6L3nz//feSLZ5nv6HSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsD/9EAAA//9GszKh") lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@sha1={0x1, "49409e8483ecadc6f97654750d5b2852efa492a6"}, 0x15, 0x1) 1m55.411624749s ago: executing program 1 (id=612): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0xff7f, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0xe6, 0x64}}}}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000100), 0x0}, 0x0) 1m53.191301363s ago: executing program 2 (id=619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x9, 0x601, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x0, 0xfc, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x1, 0x45, '\x00', 0x6}, {0x5, 0x7f, 0x2, '\x00', 0x9}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xfd, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x5}, {0x5, 0x2, 0x73, '\x00', 0x8}, {0x81, 0xb6, 0x9, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0xf6}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x88, 0xc, 0x5, '\x00', 0x6}, {0xfd, 0x10, 0x8c, '\x00', 0x4}, {0x40, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x2, 0xf8, '\x00', 0x2}, {0x17, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0x2}, {0x4, 0x1, 0xcc, '\x00', 0xf7}, {0xfd, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0xe, 0x4, '\x00', 0xff}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]}) 1m53.049371862s ago: executing program 0 (id=620): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 1m52.882964293s ago: executing program 0 (id=622): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/256, 0x100}, {&(0x7f0000000200)=""/233, 0xe9}, {&(0x7f0000000a80)=""/290, 0x122}, {0x0}], 0x4}, 0x40000000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="14000000350094fb0100fc6022f388a500000000", 0x14}], 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 1m52.850906945s ago: executing program 2 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000000000605000000002e5f0e00"], &(0x7f0000000340)=""/149, 0x29, 0x95, 0x1}, 0x28) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rename(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x48) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e33003800650000085c9078ac1414aa0a0101f6890b9c0a0101020a01010144140d3000000bf00000001a00000c07000000048302000000"], 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3018204, &(0x7f0000000140), 0x1, 0x64e, &(0x7f0000000180)="$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") lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@sha1={0x1, "49409e8483ecadc6f97654750d5b2852efa492a6"}, 0x15, 0x1) 1m52.766380111s ago: executing program 3 (id=624): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1m52.651655888s ago: executing program 0 (id=625): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x80, 0x43e71efe83316a33, 0x2, 0xfe, 0x1, 0xfd, 0x0, 0x200}, [@RTA_OIF={0x8}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044844}, 0x8c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000000000605000000002e5f0e00"], &(0x7f0000000340)=""/149, 0x29, 0x95, 0x1}, 0x28) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rename(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x48) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e33003800650000085c9078ac1414aa0a0101f6890b9c0a0101020a01010144140d3000000bf00000001a00000c07000000048302000000"], 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3018204, &(0x7f0000000140), 0x1, 0x64e, &(0x7f0000000180)="$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") lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@sha1={0x1, "49409e8483ecadc6f97654750d5b2852efa492a6"}, 0x15, 0x1) 1m51.69139769s ago: executing program 5 (id=631): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x2, 0x1, 0x7, 0xffff, 0x1, 0x5}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m51.632904794s ago: executing program 3 (id=632): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 1m51.337625893s ago: executing program 5 (id=633): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r2, &(0x7f0000000140)='v', 0x1, 0x20000880, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 1m51.179635713s ago: executing program 5 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 1m51.095447608s ago: executing program 5 (id=635): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xa2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 1m50.882259092s ago: executing program 3 (id=636): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r1, 0x0, 0x1, 0x1001f0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 1m50.851966044s ago: executing program 1 (id=637): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m50.735697741s ago: executing program 5 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000000000605000000002e5f0e00"], &(0x7f0000000340)=""/149, 0x29, 0x95, 0x1}, 0x28) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rename(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x48) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e33003800650000085c9078ac1414aa0a0101f6890b9c0a0101020a01010144140d3000000bf00000001a00000c07000000048302000000"], 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3018204, &(0x7f0000000140), 0x1, 0x64e, &(0x7f0000000180)="$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") lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@sha1={0x1, "49409e8483ecadc6f97654750d5b2852efa492a6"}, 0x15, 0x1) 1m50.60167412s ago: executing program 3 (id=639): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x0) close(r0) 1m50.502277977s ago: executing program 1 (id=640): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x3e}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x2) r2 = dup3(r1, r0, 0x80000) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xf49, 0x3a, ':}-', 0x3a, '/dev/uinput\x00', 0x3a, './file0', 0x3a, [0x46]}, 0x37) 1m50.268515992s ago: executing program 0 (id=641): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) 1m50.095513323s ago: executing program 0 (id=642): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x80000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4a, 0xa4003) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0x0, 0x99, {0x1000, 0x66}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xfffffffffffffd68, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4006001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) sendfile(r6, r5, 0x0, 0x7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, r7, 0xa860d000) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r10, &(0x7f0000000240)=[{&(0x7f00000028c0)="13", 0x1}, {0x0}], 0x2) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x6, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, 0x0, 0x0) 1m36.434518447s ago: executing program 33 (id=630): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000000000605000000002e5f0e00"], &(0x7f0000000340)=""/149, 0x29, 0x95, 0x1}, 0x28) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rename(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x48) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e33003800650000085c9078ac1414aa0a0101f6890b9c0a0101020a01010144140d3000000bf00000001a00000c07000000048302000000"], 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3018204, &(0x7f0000000140), 0x1, 0x64e, &(0x7f0000000180)="$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") lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@sha1={0x1, "49409e8483ecadc6f97654750d5b2852efa492a6"}, 0x15, 0x1) 1m34.929729445s ago: executing program 34 (id=642): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x80000) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4a, 0xa4003) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0x0, 0x99, {0x1000, 0x66}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xfffffffffffffd68, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4006001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) sendfile(r6, r5, 0x0, 0x7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, r7, 0xa860d000) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r10, &(0x7f0000000240)=[{&(0x7f00000028c0)="13", 0x1}, {0x0}], 0x2) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x6, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, 0x0, 0x0) 1m34.902775736s ago: executing program 35 (id=640): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x3e}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x2) r2 = dup3(r1, r0, 0x80000) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xf49, 0x3a, ':}-', 0x3a, '/dev/uinput\x00', 0x3a, './file0', 0x3a, [0x46]}, 0x37) 1m34.8464606s ago: executing program 36 (id=639): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x0) close(r0) 1m34.796412473s ago: executing program 37 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000000000605000000002e5f0e00"], &(0x7f0000000340)=""/149, 0x29, 0x95, 0x1}, 0x28) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rename(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x48) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004e33003800650000085c9078ac1414aa0a0101f6890b9c0a0101020a01010144140d3000000bf00000001a00000c07000000048302000000"], 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3018204, &(0x7f0000000140), 0x1, 0x64e, &(0x7f0000000180)="$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") lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=@sha1={0x1, "49409e8483ecadc6f97654750d5b2852efa492a6"}, 0x15, 0x1) 10.607238753s ago: executing program 6 (id=879): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102000921000500012200000905", @ANYRES64], 0x0) 7.856226331s ago: executing program 6 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000000)='./bus\x00') r3 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x1, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x20000000000005, 0xfd, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x1000, 0x6, 0xee00, 0x0, 0x3ff, 0xfffffffe}}, {0x0, 0x19}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x4d9b6eaf) 6.79113493s ago: executing program 6 (id=897): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) 6.676183228s ago: executing program 6 (id=898): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) eventfd2(0x6, 0x80800) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') r4 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB='\a'], 0x0) 6.269773444s ago: executing program 4 (id=900): read$FUSE(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendto$l2tp6(r0, &(0x7f00000001c0)="8d83ee7888ca72a008f1b077c1dc6cf51fc6b46fbc69bcfe2c0897888072dbb33d339ecf8280761b9b8d755d12af180733b763d1b56e5c279e7cbfda8dcf91f137621f9371c650a35d77", 0x4a, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x9, @loopback, 0x9, 0x1}, 0x20) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000034c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x24a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x82, 0x20, 0x7e, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x8a0}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd, 0x0, 0xc}}}}}]}}]}}, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) syz_open_dev$radio(0x0, 0x0, 0x2) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x8041) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish-asm)\x00'}, 0x58) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r4, 0xd60f3000) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) 5.891412518s ago: executing program 8 (id=902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 5.829244723s ago: executing program 8 (id=903): socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@none, 0x6, 0x4, "3383df", 0x4, 0x98}]}}}, 0x12) 5.780518465s ago: executing program 8 (id=904): r0 = socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getrandom(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1f, 0x16, &(0x7f00000004c0)=ANY=[], 0x0}, 0x94) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r5 = dup2(r0, r0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) write$tun(r5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES64], 0x46) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xa052) preadv(r6, &(0x7f00000001c0), 0x0, 0x176, 0x402) 4.78127107s ago: executing program 8 (id=905): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000340)={0x20, 0x8, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000100)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.7790557s ago: executing program 6 (id=906): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)={0x0, 0xa, 0x6, "66747a6dfb12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000001c0)={0x20, 0x31, 0x2, "68dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="400e4f00000052f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.524046837s ago: executing program 4 (id=907): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000e0100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.54967988s ago: executing program 7 (id=909): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c240200000003000000000009240600060100000009240300000000050009240605"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1.744044507s ago: executing program 8 (id=914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="f7790066baa00066b86b42400f78e366ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f1b38826b414f414f7843282807b8010000000f01d9c4033921820f47a753fd", 0x4e}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.743262127s ago: executing program 9 (id=915): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth1_virt_wifi\x00', {0x2, 0x4e24, @empty}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xfff, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.576864488s ago: executing program 9 (id=916): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8da", 0x41}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308433219872eeda0c235f8be3088a880", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r4, &(0x7f0000001540)=[{&(0x7f0000001600)=""/171, 0xab}], 0x1, 0x2000000, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.419914948s ago: executing program 6 (id=917): read$FUSE(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendto$l2tp6(r0, &(0x7f00000001c0)="8d83ee7888ca72a008f1b077c1dc6cf51fc6b46fbc69bcfe2c0897888072dbb33d339ecf8280761b9b8d755d12af180733b763d1b56e5c279e7cbfda8dcf91f137621f9371c650a35d77", 0x4a, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x9, @loopback, 0x9, 0x1}, 0x20) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000034c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x24a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x82, 0x20, 0x7e, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x8a0}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd, 0x0, 0xc}}}}}]}}]}}, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) syz_open_dev$radio(0x0, 0x0, 0x2) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x8041) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish-asm)\x00'}, 0x58) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r4, 0xd60f3000) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) 1.399362029s ago: executing program 4 (id=918): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556", 0x6f}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8da", 0x41}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r4, &(0x7f0000001540)=[{&(0x7f0000001600)=""/171, 0xab}], 0x1, 0x2000000, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.350051942s ago: executing program 9 (id=919): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfb}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd4", 0x73}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f", 0xe4}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308", 0xed}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4", 0x96}], 0x6}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.181972163s ago: executing program 8 (id=920): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/30, 0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.140845216s ago: executing program 7 (id=921): write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 1.042428922s ago: executing program 7 (id=922): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1.026892293s ago: executing program 7 (id=923): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='>'], 0x4c}}, 0x4000015) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 943.349259ms ago: executing program 7 (id=924): socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) 413.952753ms ago: executing program 4 (id=925): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 402.235544ms ago: executing program 9 (id=926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 176.651358ms ago: executing program 9 (id=927): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth1_virt_wifi\x00', {0x2, 0x4e24, @empty}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xfff, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 70.394595ms ago: executing program 4 (id=928): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) 11.457279ms ago: executing program 9 (id=929): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 448.779µs ago: executing program 7 (id=930): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000200000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=931): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8da", 0x41}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r4, &(0x7f0000001540)=[{&(0x7f0000001600)=""/171, 0xab}], 0x1, 0x2000000, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): ve interface with an up link [ 264.979322][ T6663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.002484][ T6659] team0: Port device team_slave_0 added [ 265.069031][ T6659] team0: Port device team_slave_1 added [ 265.089925][ T6661] team0: Port device team_slave_0 added [ 265.106064][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.117622][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.165968][ T6646] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.178646][ T6661] team0: Port device team_slave_1 added [ 265.188795][ T6663] team0: Port device team_slave_0 added [ 265.199115][ T6663] team0: Port device team_slave_1 added [ 265.224698][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.232345][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.263880][ T6659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.285748][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.297200][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.306592][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.314620][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.340665][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.349217][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.379064][ T6663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.407564][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.415520][ T21] Bluetooth: hci9: command 0x041b tx timeout [ 265.419882][ T4387] Bluetooth: hci8: command 0x041b tx timeout [ 265.423437][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.439764][ T4387] Bluetooth: hci7: command 0x0409 tx timeout [ 265.460997][ T6659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.478618][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.498028][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.507337][ T21] Bluetooth: hci6: command 0x041b tx timeout [ 265.525173][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.534394][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.543604][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.553977][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.561302][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.590507][ T6663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.603501][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.611571][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.620465][ T6665] device bridge_slave_0 entered promiscuous mode [ 265.632787][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.653344][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.695891][ T6661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.771650][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.780993][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.790730][ T6665] device bridge_slave_1 entered promiscuous mode [ 265.800268][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.809119][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.839476][ T6661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.863534][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.877677][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.941937][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.958832][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.970338][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.981851][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.991505][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.003391][ T6663] device hsr_slave_0 entered promiscuous mode [ 266.011288][ T6663] device hsr_slave_1 entered promiscuous mode [ 266.019047][ T6663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.027305][ T6663] Cannot create hsr debugfs directory [ 266.046699][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.070420][ T6659] device hsr_slave_0 entered promiscuous mode [ 266.077976][ T6659] device hsr_slave_1 entered promiscuous mode [ 266.086506][ T6659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.094911][ T6659] Cannot create hsr debugfs directory [ 266.117635][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.129538][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.146053][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.178698][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.189046][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.216114][ T6661] device hsr_slave_0 entered promiscuous mode [ 266.223351][ T6661] device hsr_slave_1 entered promiscuous mode [ 266.230667][ T6661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.238667][ T6661] Cannot create hsr debugfs directory [ 266.258885][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.289000][ T6665] team0: Port device team_slave_0 added [ 266.301357][ T6665] team0: Port device team_slave_1 added [ 266.425974][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.444106][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.485047][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.544970][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.552805][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.596153][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.711442][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.727852][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.782447][ T6665] device hsr_slave_0 entered promiscuous mode [ 266.789935][ T6665] device hsr_slave_1 entered promiscuous mode [ 266.799193][ T6665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.808007][ T6665] Cannot create hsr debugfs directory [ 266.907747][ T6646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.033460][ T6663] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 267.059466][ T6663] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 267.091102][ T6663] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 267.106722][ T154] device hsr_slave_0 left promiscuous mode [ 267.122864][ T154] device hsr_slave_1 left promiscuous mode [ 267.130741][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.139375][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.148864][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.157045][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.165405][ T154] device bridge_slave_1 left promiscuous mode [ 267.172869][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.182843][ T154] device bridge_slave_0 left promiscuous mode [ 267.200646][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.218796][ T154] device veth1_macvtap left promiscuous mode [ 267.226090][ T154] device veth0_macvtap left promiscuous mode [ 267.232747][ T154] device veth1_vlan left promiscuous mode [ 267.239970][ T154] device veth0_vlan left promiscuous mode [ 267.489250][ T154] team0 (unregistering): Port device team_slave_1 removed [ 267.498073][ T4764] Bluetooth: hci9: command 0x040f tx timeout [ 267.505124][ T4764] Bluetooth: hci8: command 0x040f tx timeout [ 267.516250][ T154] team0 (unregistering): Port device team_slave_0 removed [ 267.530411][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.545363][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.584373][ T4764] Bluetooth: hci6: command 0x040f tx timeout [ 267.613035][ T4764] Bluetooth: hci7: command 0x041b tx timeout [ 267.624021][ T154] bond0 (unregistering): Released all slaves [ 267.678239][ T6663] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 267.759983][ T6661] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 267.815140][ T6661] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 267.850691][ T6661] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 267.874644][ T6661] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 267.996254][ T6659] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 268.035581][ T6659] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 268.225367][ T6659] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 268.236794][ T6659] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 268.275301][ T6663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.306480][ T6661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.332941][ T6663] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.355795][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.376868][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.387958][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.398744][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.418778][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.428902][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.442259][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.450036][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.531023][ T6661] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.565832][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.576547][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.586621][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.596423][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.607995][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.618069][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.625462][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.634482][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.649349][ T6646] device veth0_vlan entered promiscuous mode [ 268.677147][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.694771][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.714893][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.729427][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.751864][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.760373][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.780470][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.796232][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.815137][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.825108][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.837424][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.856259][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.877377][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.894759][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.913952][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.937922][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.951978][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.966464][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.974666][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.993372][ T6646] device veth1_vlan entered promiscuous mode [ 269.040899][ T6663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.064692][ T6663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.141803][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.152673][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.172761][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.187309][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.205714][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.285191][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.315457][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.371129][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.397395][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.422822][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.450443][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.475069][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.502696][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.585075][ T4188] Bluetooth: hci8: command 0x0419 tx timeout [ 269.598772][ T4188] Bluetooth: hci9: command 0x0419 tx timeout [ 269.629141][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.651936][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.664259][ T6746] Bluetooth: hci7: command 0x040f tx timeout [ 269.670745][ T6746] Bluetooth: hci6: command 0x0419 tx timeout [ 269.698178][ T6646] device veth0_macvtap entered promiscuous mode [ 269.719489][ T6661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.745904][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.777548][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.804140][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.813282][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.823577][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.846215][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.856415][ T6646] device veth1_macvtap entered promiscuous mode [ 269.877039][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.899389][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.936182][ T6659] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.978141][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.994630][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.031359][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.041088][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.058282][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.070916][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.082613][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.093808][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.106369][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.117722][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.131931][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.144038][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.156636][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.171242][ T6663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.210239][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.230176][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.261826][ T3043] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.270000][ T3043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.315103][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.334951][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.349526][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.366170][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.384351][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.396277][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.407784][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.420032][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.471061][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.495918][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.514813][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.547029][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.569928][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.578260][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.588122][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.598033][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.609285][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.619179][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.636109][ T6646] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.647211][ T6646] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.656554][ T6646] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.668116][ T6646] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.686388][ T6665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 270.710854][ T6661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.758659][ T6665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 270.788080][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.807280][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.817849][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.828748][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.838805][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.848215][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.857955][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.875945][ T6665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 270.889190][ T6665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 270.906232][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.917562][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.928401][ T6659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.950227][ T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.010802][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.027522][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.075483][ T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.150718][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.159724][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.178521][ T6663] device veth0_vlan entered promiscuous mode [ 271.201101][ T3043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.214532][ T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.226927][ T3043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.247205][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.267738][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.283108][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.326729][ T6663] device veth1_vlan entered promiscuous mode [ 271.437827][ T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.530510][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.562572][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.572982][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.611742][ T5409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.621685][ T6659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.645309][ T5409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.683847][ T6661] device veth0_vlan entered promiscuous mode [ 271.715607][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.743519][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.764047][ T6746] Bluetooth: hci7: command 0x0419 tx timeout [ 271.776368][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.805308][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.834289][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.842646][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.867035][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.890062][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.912290][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.934955][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.953391][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.964685][ T6663] device veth0_macvtap entered promiscuous mode [ 272.001270][ T6665] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.042532][ T6663] device veth1_macvtap entered promiscuous mode [ 272.061644][ T6661] device veth1_vlan entered promiscuous mode [ 272.112399][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.126072][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 272.135556][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.146032][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.154890][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.165124][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.173065][ T5409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.181207][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.266096][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.286334][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.314663][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.324962][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.334465][ T5409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.346144][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.361033][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.372519][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.381864][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.415969][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.429707][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.442200][ T6661] device veth0_macvtap entered promiscuous mode [ 272.476603][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.489180][ T5409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.515994][ T6661] device veth1_macvtap entered promiscuous mode [ 272.527910][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.539654][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.560351][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.564429][ T2286] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 272.574792][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.595555][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.608328][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.618570][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.629753][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.642449][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.655131][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.668315][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.680208][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.693038][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.710231][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.732357][ T6665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.747423][ T6665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.771226][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 272.791540][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.801457][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.812041][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.821996][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.831652][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.847191][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.857707][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.867361][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.898470][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.942706][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.963949][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.983993][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.005063][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.025520][ T6663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.038387][ T6663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.052306][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.065951][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.078692][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.091723][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.115466][ T2286] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 273.121231][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.138162][ T2286] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.147920][ T2286] usb 7-1: Product: syz [ 273.151538][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.152281][ T2286] usb 7-1: Manufacturer: syz [ 273.176413][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.181315][ T2286] usb 7-1: SerialNumber: syz [ 273.197885][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.213160][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.230251][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.241469][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.245617][ T2286] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 273.252332][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.273540][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.292856][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.304770][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.324577][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.348846][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.362465][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.373445][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.383549][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.402317][ T6663] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.412820][ T6663] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.422911][ T6663] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.432576][ T6663] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.451563][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.471961][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.483591][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.496040][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.507741][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.519332][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.531179][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.543151][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.556128][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.568597][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.582357][ T6659] device veth0_vlan entered promiscuous mode [ 273.597216][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.607392][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.616520][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.626069][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.655553][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.685637][ T6661] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.705426][ T6661] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.723620][ T6661] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.744777][ T6661] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.783131][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.802853][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.838094][ T6659] device veth1_vlan entered promiscuous mode [ 273.862474][ T6665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.949216][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.965562][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.985269][ T2286] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 274.012706][ T6659] device veth0_macvtap entered promiscuous mode [ 274.083833][ T6659] device veth1_macvtap entered promiscuous mode [ 274.180540][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.228731][ T5419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.230722][ T3043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.262273][ T5419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.272453][ T3043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.317143][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.349322][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.370671][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.386348][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.406951][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.427974][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.449659][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.475500][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.488234][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.500512][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.512315][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.524550][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.539087][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.559577][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.573764][ T7] usb 7-1: USB disconnect, device number 2 [ 274.576893][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.594841][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.608797][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.624677][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.640611][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.659826][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.669535][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.708425][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.724741][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.738609][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.749268][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.770835][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.784986][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.797018][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.807817][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.819089][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.829697][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.841216][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.855944][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.879184][ T5413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.890370][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.900465][ T5413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.911482][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.922465][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.940066][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.965815][ T6659] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.978258][ T6659] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.991862][ T6659] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.002522][ T6659] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.014900][ T2286] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 275.023086][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.024144][ T5413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.044270][ T2286] ath9k_htc: Failed to initialize the device [ 275.055687][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.063585][ T7] usb 7-1: ath9k_htc: USB layer deinitialized [ 275.072581][ T5413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.137658][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.214185][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 275.233731][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.245950][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.263051][ T6665] device veth0_vlan entered promiscuous mode [ 275.282907][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.291743][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.319097][ T6665] device veth1_vlan entered promiscuous mode [ 275.451843][ T3043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.493682][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.507139][ T3043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.537732][ T4387] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 275.582450][ T7] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 275.620740][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.636953][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.655996][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.696226][ T6665] device veth0_macvtap entered promiscuous mode [ 275.711742][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.721974][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.759496][ T4505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.780307][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.793436][ T4505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.804444][ T6665] device veth1_macvtap entered promiscuous mode [ 275.827119][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 275.867366][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.914842][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.940197][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.968216][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.995591][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.016970][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.034866][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.048893][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.063608][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.076437][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.089071][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.108369][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.135584][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.148934][ T4387] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 276.159335][ T7] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 276.173231][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.184158][ T4387] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.194870][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.195225][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.211912][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.233965][ T4387] usb 9-1: Product: syz [ 276.256699][ T4387] usb 9-1: Manufacturer: syz [ 276.271800][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.274061][ T7] usb 7-1: Product: syz [ 276.288253][ T4387] usb 9-1: SerialNumber: syz [ 276.298905][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.322567][ T4387] usb 9-1: config 0 descriptor?? [ 276.328814][ T6913] device syzkaller0 entered promiscuous mode [ 276.334065][ T7] usb 7-1: Manufacturer: syz [ 276.340076][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.344117][ T7] usb 7-1: SerialNumber: syz [ 276.361446][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.377687][ T4387] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 276.380304][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.418124][ T7] usb 7-1: config 0 descriptor?? [ 276.423822][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.449974][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.463557][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.476523][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.489302][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.501266][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.513196][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.529489][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.543255][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.554605][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.566999][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.580768][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.598994][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.625588][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.9.649'. [ 276.640351][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.662984][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.704208][ T7] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 276.748869][ T6665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.758756][ T6665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.770549][ T6665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.806767][ T6665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.463251][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.547440][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.578021][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.610252][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.714393][ T4387] gspca_sunplus: reg_w_riv err -71 [ 277.725630][ T5413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.787718][ T4387] sunplus: probe of 9-1:0.0 failed with error -71 [ 277.821785][ T4387] usb 9-1: USB disconnect, device number 2 [ 277.823008][ T5413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.020684][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.287616][ T6957] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 278.464125][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 278.574073][ T6957] usb 8-1: Using ep0 maxpacket: 8 [ 278.664338][ T4232] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 278.714287][ T7] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 278.744909][ T4229] usb 5-1: Using ep0 maxpacket: 32 [ 278.767731][ T7] usb 7-1: USB disconnect, device number 3 [ 278.864149][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.887358][ T6957] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 278.902431][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.907703][ T6957] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.922788][ T4229] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 278.943166][ T6957] usb 8-1: Product: syz [ 278.948262][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.950920][ T6957] usb 8-1: Manufacturer: syz [ 278.975955][ T6957] usb 8-1: SerialNumber: syz [ 278.983556][ T4229] usb 5-1: config 0 descriptor?? [ 279.008531][ T6957] usb 8-1: config 0 descriptor?? [ 279.054193][ T4232] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.074135][ T23] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 279.075596][ T4232] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.102964][ T4232] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.124031][ T4232] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 279.144016][ T4232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.165463][ T4232] usb 9-1: config 0 descriptor?? [ 279.310088][ T6957] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 279.457199][ T4229] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 279.468657][ T4229] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 279.484534][ T23] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.490709][ T4229] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 279.521475][ T23] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.548809][ T23] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 279.564495][ T23] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.612350][ T23] usb 10-1: config 0 descriptor?? [ 279.635828][ T4232] acrux 0003:1A34:0802.0004: unknown main item tag 0x2 [ 279.654502][ T4232] acrux 0003:1A34:0802.0004: item fetching failed at offset 3/5 [ 279.674092][ T4229] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 279.682130][ T4232] acrux 0003:1A34:0802.0004: parse failed [ 279.688761][ T4232] acrux: probe of 0003:1A34:0802.0004 failed with error -22 [ 279.872717][ T7] usb 9-1: USB disconnect, device number 3 [ 279.879510][ T2286] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 280.094445][ T4229] ft260 0003:0403:6030.0003: failed to retrieve status: -32 [ 280.264214][ T2286] usb 7-1: config 0 has no interfaces? [ 280.270907][ T2286] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 280.299740][ T2286] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.319250][ T2286] usb 7-1: config 0 descriptor?? [ 280.347150][ T4229] usb 5-1: USB disconnect, device number 2 [ 280.361122][ T23] hid-led 0003:1D34:000A.0005: hidraw1: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.9-1/input0 [ 280.382807][ T6957] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 280.436486][ T23] hid-led 0003:1D34:000A.0005: Dream Cheeky Webmail Notifier initialized [ 280.449265][ T6957] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 280.469517][ T6957] usb 8-1: media controller created [ 280.503873][ T6957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.571889][ T7016] udc-core: couldn't find an available UDC or it's busy [ 280.586800][ T154] device hsr_slave_0 left promiscuous mode [ 280.594645][ T7016] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 280.608627][ T6959] usb 10-1: USB disconnect, device number 2 [ 280.625530][ T154] device hsr_slave_1 left promiscuous mode [ 280.633526][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.650941][ T2286] usb 7-1: USB disconnect, device number 4 [ 280.679091][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.696275][ T6957] i2c i2c-2: Added multiplexed i2c bus 1 [ 280.714578][ T6957] rtl2830 2-0010: Realtek RTL2830 successfully attached [ 280.726445][ T6957] usb 8-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 280.726818][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.739208][ T6957] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 280.800849][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.828987][ T154] device bridge_slave_1 left promiscuous mode [ 280.834964][ T6957] DVB: Unable to find symbol mxl5005s_attach() [ 280.850099][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.914651][ T154] device bridge_slave_0 left promiscuous mode [ 280.921738][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.943544][ T154] device hsr_slave_0 left promiscuous mode [ 280.991742][ T154] device hsr_slave_1 left promiscuous mode [ 280.998948][ T6957] usb 8-1: USB disconnect, device number 2 [ 281.017546][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.026248][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.038883][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.051477][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.082606][ T154] device bridge_slave_1 left promiscuous mode [ 281.094246][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.169485][ T154] device bridge_slave_0 left promiscuous mode [ 281.194844][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.257601][ T2286] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 281.281942][ T154] device hsr_slave_0 left promiscuous mode [ 281.294648][ T154] device hsr_slave_1 left promiscuous mode [ 281.308053][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.322129][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.334267][ T154] device bridge_slave_1 left promiscuous mode [ 281.342452][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.360106][ T154] device bridge_slave_0 left promiscuous mode [ 281.367129][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.379881][ T154] device hsr_slave_0 left promiscuous mode [ 281.390922][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.399131][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.407692][ T154] device bridge_slave_1 left promiscuous mode [ 281.414627][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.423596][ T154] device bridge_slave_0 left promiscuous mode [ 281.430679][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.455407][ T154] device veth1_macvtap left promiscuous mode [ 281.461704][ T154] device veth0_macvtap left promiscuous mode [ 281.468534][ T154] device veth1_vlan left promiscuous mode [ 281.484178][ T154] device veth0_vlan left promiscuous mode [ 281.492553][ T154] device veth1_macvtap left promiscuous mode [ 281.514079][ T2286] usb 7-1: Using ep0 maxpacket: 16 [ 281.523431][ T154] device veth0_macvtap left promiscuous mode [ 281.530222][ T154] device veth1_vlan left promiscuous mode [ 281.538005][ T154] device veth0_vlan left promiscuous mode [ 281.544104][ T23] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 281.552206][ T6959] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 281.562569][ T154] device veth1_macvtap left promiscuous mode [ 281.569587][ T154] device veth0_macvtap left promiscuous mode [ 281.579267][ T154] device veth1_vlan left promiscuous mode [ 281.587775][ T154] device veth0_vlan left promiscuous mode [ 281.594325][ T4232] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 281.604871][ T154] device veth1_macvtap left promiscuous mode [ 281.612481][ T154] device veth0_macvtap left promiscuous mode [ 281.619763][ T154] device veth1_vlan left promiscuous mode [ 281.626094][ T154] device veth0_vlan left promiscuous mode [ 281.634572][ T2286] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 281.653984][ T2286] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.794177][ T6959] usb 8-1: Using ep0 maxpacket: 32 [ 281.824160][ T2286] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 281.844100][ T2286] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.852833][ T2286] usb 7-1: Product: syz [ 281.857978][ T2286] usb 7-1: Manufacturer: syz [ 281.862780][ T2286] usb 7-1: SerialNumber: syz [ 281.915326][ T23] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.925601][ T6959] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 281.939041][ T6959] usb 8-1: config 0 has no interface number 0 [ 281.946685][ T23] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 281.959776][ T6959] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 281.964307][ T4232] usb 5-1: config 1 interface 0 has no altsetting 0 [ 281.972046][ T23] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.993067][ T23] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 282.005476][ T23] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 282.122814][ T154] team0 (unregistering): Port device team_slave_1 removed [ 282.146852][ T154] team0 (unregistering): Port device team_slave_0 removed [ 282.155139][ T4232] usb 5-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 282.164402][ T23] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.165237][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.174348][ T6959] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 282.182198][ T4232] usb 5-1: Product: syz [ 282.196361][ T4232] usb 5-1: Manufacturer: syz [ 282.200975][ T4232] usb 5-1: SerialNumber: syz [ 282.201560][ T23] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.205924][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.218672][ T6959] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.238763][ T23] usb 10-1: Product: syz [ 282.243348][ T23] usb 10-1: Manufacturer: syz [ 282.248754][ T6959] usb 8-1: Product: syz [ 282.252634][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.254178][ T6959] usb 8-1: Manufacturer: syz [ 282.269139][ T6959] usb 8-1: SerialNumber: syz [ 282.278093][ T6959] usb 8-1: config 0 descriptor?? [ 282.314358][ T7079] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 282.315200][ T23] cdc_wdm 10-1:1.0: skipping garbage [ 282.328154][ T23] cdc_wdm 10-1:1.0: skipping garbage [ 282.346953][ T23] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 282.353198][ T23] cdc_wdm 10-1:1.0: Unknown control protocol [ 282.391516][ T154] bond0 (unregistering): Released all slaves [ 282.399836][ T2286] usb 7-1: 0:2 : does not exist [ 282.540348][ T7079] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 282.599499][ T154] team0 (unregistering): Port device team_slave_1 removed [ 282.659054][ T154] team0 (unregistering): Port device team_slave_0 removed [ 282.680846][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.703019][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.756504][ T4232] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input13 [ 282.789438][ T154] bond0 (unregistering): Released all slaves [ 282.796692][ T3547] bcm5974 5-1:1.0: could not read from device [ 282.817824][ T4232] usb 5-1: USB disconnect, device number 3 [ 282.834518][ T3547] bcm5974 5-1:1.0: could not read from device [ 282.864515][ T2286] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 282.945685][ T2286] usb 7-1: USB disconnect, device number 5 [ 282.979353][ T6667] udevd[6667]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.093703][ T154] team0 (unregistering): Port device team_slave_1 removed [ 283.110455][ T154] team0 (unregistering): Port device team_slave_0 removed [ 283.122824][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.139553][ T23] usb 10-1: USB disconnect, device number 3 [ 283.192332][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.267984][ T154] bond0 (unregistering): Released all slaves [ 283.448078][ T7102] kvm [7101]: vcpu5, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0 [ 283.466194][ T154] team0 (unregistering): Port device team_slave_1 removed [ 283.471465][ T7102] kvm [7101]: vcpu5, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0 [ 283.475105][ T2286] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 283.497981][ T7102] kvm [7101]: vcpu5, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111 [ 283.523644][ T154] team0 (unregistering): Port device team_slave_0 removed [ 283.551563][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.580799][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.736953][ T2286] usb 7-1: Using ep0 maxpacket: 8 [ 283.771954][ T154] bond0 (unregistering): Released all slaves [ 283.860353][ T4229] lo speed is unknown, defaulting to 1000 [ 283.884236][ T2286] usb 7-1: config 1 has an invalid interface number: 21 but max is 2 [ 283.894481][ T2286] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.910772][ T2286] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 283.922394][ T2286] usb 7-1: config 1 has no interface number 0 [ 283.944076][ T2286] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 284.023995][ T4229] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 284.118003][ T2286] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 284.134004][ T2286] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.152113][ T2286] usb 7-1: Product: syz [ 284.158362][ T2286] usb 7-1: Manufacturer: syz [ 284.163372][ T2286] usb 7-1: SerialNumber: syz [ 284.174053][ T6957] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 284.273999][ T4229] usb 10-1: Using ep0 maxpacket: 8 [ 284.394299][ T4229] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 284.405738][ T4229] usb 10-1: config 0 has no interface number 0 [ 284.413546][ T4229] usb 10-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 284.429727][ T4229] usb 10-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 284.433911][ T6957] usb 5-1: Using ep0 maxpacket: 32 [ 284.457189][ T4229] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 284.483457][ T4229] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 284.502851][ T4229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.529277][ T4229] usb 10-1: config 0 descriptor?? [ 284.584439][ T6957] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 284.585503][ T4229] ldusb 10-1:0.55: Interrupt in endpoint not found [ 284.597870][ T6957] usb 5-1: config 0 has no interface number 0 [ 284.824238][ T6957] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 284.835625][ T6957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.844578][ T6957] usb 5-1: Product: syz [ 284.849317][ T6957] usb 5-1: Manufacturer: syz [ 284.855430][ T6957] usb 5-1: SerialNumber: syz [ 284.862681][ T23] usb 10-1: USB disconnect, device number 4 [ 284.870784][ T6957] usb 5-1: config 0 descriptor?? [ 284.874634][ T2286] usb 7-1: clock source 0 is not valid, cannot use [ 284.942642][ T6957] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 284.964116][ T4229] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 285.084199][ T2286] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 285.124250][ T2286] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 285.167711][ T6957] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 285.188185][ T2286] usb 7-1: USB disconnect, device number 6 [ 285.209551][ T6957] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 285.214283][ T4229] usb 9-1: Using ep0 maxpacket: 16 [ 285.267028][ T4229] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 285.294189][ T6959] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 285.325975][ T6959] asix: probe of 8-1:0.188 failed with error -71 [ 285.355998][ T6959] usb 8-1: USB disconnect, device number 3 [ 285.394252][ T4229] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.508230][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 285.526158][ T4229] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.546055][ T7162] udevd[7162]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.21/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.634249][ T4229] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.707596][ T6959] usb 5-1: USB disconnect, device number 4 [ 285.720137][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 285.744866][ T4229] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.745767][ T6957] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 285.799148][ T6959] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 285.854573][ T6959] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 285.869916][ T6959] quatech2 5-1:0.51: device disconnected [ 285.888158][ T4229] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.014227][ T4229] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.114144][ T4229] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.204044][ T4229] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.229686][ T6957] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.254978][ T6957] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 286.294178][ T4229] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 286.301703][ T6957] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.315386][ T23] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 286.318382][ T4229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 286.330530][ T7199] netlink: 56 bytes leftover after parsing attributes in process `syz.4.676'. [ 286.352703][ T4229] usb 9-1: SerialNumber: syz [ 286.353706][ T6957] usb 10-1: config 0 descriptor?? [ 286.398137][ T4229] usb 9-1: config 0 descriptor?? [ 286.436074][ T6957] pwc: Askey VC010 type 2 USB webcam detected. [ 286.457629][ T4229] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input14 [ 286.659383][ T6957] pwc: send_video_command error -71 [ 286.666168][ T7140] input: syz1 as /devices/virtual/input/input15 [ 286.682812][ T6957] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 286.699876][ T6957] Philips webcam: probe of 10-1:0.0 failed with error -71 [ 286.722107][ T6957] usb 10-1: USB disconnect, device number 5 [ 286.730625][ T3547] bcm5974 9-1:0.0: could not read from device [ 286.750904][ T4229] usb 9-1: USB disconnect, device number 4 [ 286.754153][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 286.770867][ T3547] bcm5974 9-1:0.0: could not read from device [ 286.800737][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.815653][ T7163] udevd[7163]: setting mode of /dev/bus/usb/009/004 to 020664 failed: No such file or directory [ 286.832655][ T23] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 286.873283][ T7163] udevd[7163]: setting owner of /dev/bus/usb/009/004 to uid=0, gid=0 failed: No such file or directory [ 286.904139][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.964628][ T23] usb 8-1: config 0 descriptor?? [ 287.056246][ T23] hub 8-1:0.0: USB hub found [ 287.276302][ T23] hub 8-1:0.0: 1 port detected [ 287.375226][ T6957] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 287.734036][ T4233] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 287.784198][ T6957] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.815173][ T6957] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.848469][ T6957] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.906489][ T6957] usb 10-1: config 0 descriptor?? [ 287.950737][ T6957] pwc: Askey VC010 type 2 USB webcam detected. [ 287.966003][ T4229] usb 8-1: USB disconnect, device number 4 [ 287.974007][ T6959] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 288.104615][ T4233] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 288.123003][ T4233] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 288.152399][ T7250] binder: BINDER_SET_CONTEXT_MGR already set [ 288.181564][ T7250] binder: 7249:7250 ioctl 4018620d 200000001000 returned -16 [ 288.324307][ T4233] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 288.335948][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.364557][ T4233] usb 5-1: Product: syz [ 288.373061][ T4233] usb 5-1: Manufacturer: syz [ 288.380587][ T4233] usb 5-1: SerialNumber: syz [ 288.388952][ T6957] pwc: recv_control_msg error -32 req 02 val 2b00 [ 288.396466][ T4233] usb 5-1: config 0 descriptor?? [ 288.434098][ T6957] pwc: recv_control_msg error -32 req 02 val 2700 [ 288.453554][ T4233] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 288.484144][ T6957] pwc: recv_control_msg error -32 req 02 val 2c00 [ 288.545119][ T6957] pwc: recv_control_msg error -32 req 04 val 1000 [ 288.604109][ T6957] pwc: recv_control_msg error -32 req 04 val 1300 [ 288.824266][ T6959] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 288.870409][ T6957] pwc: recv_control_msg error -71 req 02 val 2000 [ 288.888364][ T7287] device syzkaller1 entered promiscuous mode [ 288.895579][ T6957] pwc: recv_control_msg error -71 req 02 val 2100 [ 288.934258][ T6957] pwc: recv_control_msg error -71 req 04 val 1500 [ 288.964627][ T6957] pwc: recv_control_msg error -71 req 02 val 2500 [ 288.989658][ T6957] pwc: recv_control_msg error -71 req 02 val 2400 [ 289.034215][ T6957] pwc: recv_control_msg error -71 req 02 val 2600 [ 289.069465][ T6957] pwc: recv_control_msg error -71 req 02 val 2900 [ 289.096102][ T6957] pwc: recv_control_msg error -71 req 02 val 2800 [ 289.096694][ T7301] netlink: 60 bytes leftover after parsing attributes in process `syz.6.694'. [ 289.103365][ T6959] usb 9-1: Using ep0 maxpacket: 32 [ 289.113059][ T7301] netlink: 60 bytes leftover after parsing attributes in process `syz.6.694'. [ 289.134530][ T6957] pwc: recv_control_msg error -71 req 04 val 1100 [ 289.141312][ T7301] netlink: 60 bytes leftover after parsing attributes in process `syz.6.694'. [ 289.155600][ T6957] pwc: recv_control_msg error -71 req 04 val 1200 [ 289.175520][ T6957] pwc: Registered as video103. [ 289.183107][ T6957] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input16 [ 289.240548][ T6957] usb 10-1: USB disconnect, device number 6 [ 289.264310][ T6959] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 289.427795][ T6959] usb 9-1: config 0 interface 0 has no altsetting 0 [ 289.436071][ T6959] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 289.446831][ T6959] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.473408][ T6959] usb 9-1: config 0 descriptor?? [ 290.324180][ T4233] gspca_sunplus: reg_r err -110 [ 290.339841][ T4233] sunplus: probe of 5-1:0.0 failed with error -110 [ 290.410077][ T7316] input: syz0 as /devices/virtual/input/input17 [ 290.874049][ T6957] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 290.951738][ T6959] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.8-1/input0 [ 291.084039][ T2857] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 291.187844][ T6959] corsair-cpro: probe of 0003:1B1C:0C10.0006 failed with error -5 [ 291.362594][ T6959] usb 9-1: USB disconnect, device number 5 [ 291.474988][ T6957] usb 10-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 291.498639][ T6957] usb 10-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 291.521333][ T6957] usb 10-1: Product: syz [ 291.537559][ T6957] usb 10-1: Manufacturer: syz [ 291.552459][ T6957] usb 10-1: SerialNumber: syz [ 291.616557][ T6957] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 291.664621][ T2857] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 291.685540][ T2857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.700275][ T2857] usb 7-1: Product: syz [ 291.705493][ T2857] usb 7-1: Manufacturer: syz [ 291.723969][ T2857] usb 7-1: SerialNumber: syz [ 291.736461][ T6959] usb 5-1: USB disconnect, device number 5 [ 291.755813][ T2857] usb 7-1: config 0 descriptor?? [ 291.860118][ T7402] netlink: 60 bytes leftover after parsing attributes in process `syz.4.705'. [ 291.878032][ T7402] netlink: 60 bytes leftover after parsing attributes in process `syz.4.705'. [ 291.891374][ T7402] netlink: 60 bytes leftover after parsing attributes in process `syz.4.705'. [ 292.034364][ T2857] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 292.059631][ T6957] vp7045: USB control message 'in' went wrong. [ 292.074039][ T6957] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 292.086149][ T6957] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 292.232386][ T7419] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 293.220574][ T2286] usb 10-1: USB disconnect, device number 7 [ 293.387274][ T7454] netlink: 60 bytes leftover after parsing attributes in process `syz.9.718'. [ 293.441001][ T7454] netlink: 60 bytes leftover after parsing attributes in process `syz.9.718'. [ 293.465230][ T7458] netlink: 60 bytes leftover after parsing attributes in process `syz.9.718'. [ 293.547143][ T7] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 293.608446][ T7468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.722'. [ 294.113276][ T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.249302][ T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.598759][ T7] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 294.749773][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.801052][ T7] usb 8-1: config 0 descriptor?? [ 294.814315][ T6957] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 294.934843][ T2857] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 294.984803][ T2857] usb 7-1: USB disconnect, device number 7 [ 295.094041][ T6957] usb 5-1: Using ep0 maxpacket: 32 [ 295.224162][ T6957] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 295.241550][ T6957] usb 5-1: config 0 has no interface number 0 [ 295.269938][ T6957] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.305723][ T7] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 295.316973][ T7517] netlink: 60 bytes leftover after parsing attributes in process `syz.8.732'. [ 295.332566][ T7] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 295.349360][ T7517] netlink: 60 bytes leftover after parsing attributes in process `syz.8.732'. [ 295.361751][ T7] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0007/input/input18 [ 295.377245][ T7521] netlink: 60 bytes leftover after parsing attributes in process `syz.8.732'. [ 295.399078][ T2857] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 295.434322][ T7] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 295.464501][ T6957] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 295.500178][ T6957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.550951][ T6957] usb 5-1: Product: syz [ 295.563709][ T6957] usb 5-1: Manufacturer: syz [ 295.581610][ T6957] usb 5-1: SerialNumber: syz [ 295.611944][ T23] usb 8-1: USB disconnect, device number 5 [ 295.622249][ T6957] usb 5-1: config 0 descriptor?? [ 295.684361][ T2857] usb 7-1: Using ep0 maxpacket: 32 [ 295.706899][ T6957] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 295.739191][ T6957] em28xx 5-1:0.132: Video interface 132 found: [ 295.804365][ T2857] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 295.833451][ T2857] usb 7-1: config 0 has no interface number 0 [ 295.857692][ T2857] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 295.924130][ T6746] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 296.024194][ T6957] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 296.074616][ T2857] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 296.088620][ T2857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.102998][ T2857] usb 7-1: Product: syz [ 296.107992][ T2857] usb 7-1: Manufacturer: syz [ 296.113678][ T2857] usb 7-1: SerialNumber: syz [ 296.142727][ T2857] usb 7-1: config 0 descriptor?? [ 296.154047][ T2286] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 296.154161][ T6957] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 296.186962][ T6957] em28xx 5-1:0.132: board has no eeprom [ 296.215583][ T7510] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 296.231489][ T6746] usb 9-1: Using ep0 maxpacket: 8 [ 296.304054][ T6957] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 296.315054][ T6957] em28xx 5-1:0.132: analog set to bulk mode. [ 296.324017][ T6760] em28xx 5-1:0.132: Registering V4L2 extension [ 296.339527][ T6957] usb 5-1: USB disconnect, device number 6 [ 296.369281][ T6957] em28xx 5-1:0.132: Disconnecting em28xx [ 296.458244][ T7510] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 296.487722][ T6760] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 296.497878][ T6760] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 296.506223][ T6760] em28xx 5-1:0.132: No AC97 audio processor [ 296.524290][ T2286] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.538670][ T6760] usb 5-1: Decoder not found [ 296.545384][ T6746] usb 9-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 296.550160][ T2286] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 296.556126][ T23] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 296.556850][ T6760] em28xx 5-1:0.132: failed to create media graph [ 296.593539][ T2286] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.596582][ T6746] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.617864][ T6760] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 296.626790][ T6746] usb 9-1: Product: syz [ 296.631784][ T6746] usb 9-1: Manufacturer: syz [ 296.645625][ T6746] usb 9-1: SerialNumber: syz [ 296.656453][ T6760] em28xx 5-1:0.132: Remote control support is not available for this card. [ 296.666004][ T2286] usb 10-1: config 0 descriptor?? [ 296.673515][ T6957] em28xx 5-1:0.132: Closing input extension [ 296.690080][ T6746] usb 9-1: config 0 descriptor?? [ 296.737097][ T6746] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 296.768064][ T2286] pwc: Askey VC010 type 2 USB webcam detected. [ 296.774144][ T6957] em28xx 5-1:0.132: Freeing device [ 296.814149][ T23] usb 8-1: Using ep0 maxpacket: 8 [ 296.955612][ T23] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.978809][ T23] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 296.995542][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.019083][ T23] usb 8-1: config 0 descriptor?? [ 297.076232][ T23] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 297.210034][ T2286] pwc: recv_control_msg error -32 req 02 val 2b00 [ 297.268305][ T2286] pwc: recv_control_msg error -32 req 02 val 2700 [ 297.339475][ T2286] pwc: recv_control_msg error -32 req 02 val 2c00 [ 297.400115][ T2286] pwc: recv_control_msg error -32 req 04 val 1000 [ 297.459441][ T2286] pwc: recv_control_msg error -32 req 04 val 1300 [ 297.525271][ T2286] pwc: recv_control_msg error -32 req 04 val 1400 [ 297.784027][ T2286] pwc: recv_control_msg error -71 req 02 val 2100 [ 297.815355][ T2286] pwc: recv_control_msg error -71 req 04 val 1500 [ 297.844126][ T2286] pwc: recv_control_msg error -71 req 02 val 2500 [ 297.874079][ T2286] pwc: recv_control_msg error -71 req 02 val 2400 [ 297.904153][ T2286] pwc: recv_control_msg error -71 req 02 val 2600 [ 297.934904][ T2286] pwc: recv_control_msg error -71 req 02 val 2900 [ 297.966628][ T2286] pwc: recv_control_msg error -71 req 02 val 2800 [ 298.004352][ T2286] pwc: recv_control_msg error -71 req 04 val 1100 [ 298.034089][ T2286] pwc: recv_control_msg error -71 req 04 val 1200 [ 298.042188][ T2286] pwc: Registered as video103. [ 298.049854][ T2286] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input19 [ 298.072759][ T2286] usb 10-1: USB disconnect, device number 8 [ 298.449347][ T6746] gspca_sonixj: i2c_w8 err -71 [ 298.524010][ T6746] sonixj: probe of 9-1:0.0 failed with error -71 [ 298.626413][ T6746] usb 9-1: USB disconnect, device number 6 [ 298.734296][ T23] gspca_vc032x: reg_w err -71 [ 299.040332][ T23] vc032x: probe of 8-1:0.0 failed with error -71 [ 299.257489][ T23] usb 8-1: USB disconnect, device number 6 [ 299.284155][ T2857] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 299.295209][ T2857] asix: probe of 7-1:0.188 failed with error -32 [ 299.305529][ T2286] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 299.564315][ T2286] usb 10-1: Using ep0 maxpacket: 32 [ 299.684354][ T2286] usb 10-1: config 0 has no interfaces? [ 299.864415][ T2286] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 299.908131][ T2286] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 299.966471][ T2286] usb 10-1: Product: syz [ 300.033618][ T2286] usb 10-1: Manufacturer: syz [ 300.053432][ T2286] usb 10-1: SerialNumber: syz [ 300.090620][ T4232] usb 7-1: USB disconnect, device number 8 [ 300.103809][ T2286] usb 10-1: config 0 descriptor?? [ 300.354477][ T4230] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 300.382609][ T7625] udc-core: couldn't find an available UDC or it's busy [ 300.410617][ T7625] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 300.437517][ T7625] udc-core: couldn't find an available UDC or it's busy [ 300.499694][ T7625] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 300.530625][ T4232] usb 10-1: USB disconnect, device number 9 [ 300.886192][ T4230] usb 9-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 300.910445][ T4230] usb 9-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 300.932179][ T4230] usb 9-1: Product: syz [ 300.952429][ T4230] usb 9-1: Manufacturer: syz [ 300.971425][ T4230] usb 9-1: SerialNumber: syz [ 300.993815][ T4230] usb 9-1: config 0 descriptor?? [ 301.014197][ T6746] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 301.104017][ T4232] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 301.264278][ T4230] peak_usb 9-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 301.474110][ T4230] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 301.495483][ T4230] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 301.523809][ T4230] peak_usb 9-1:0.0 can0: sending command failure: -22 [ 301.554291][ T4232] usb 10-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 301.581864][ T4232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 301.631433][ T4232] usb 10-1: SerialNumber: syz [ 301.634286][ T6746] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 301.673796][ T4232] usb 10-1: config 0 descriptor?? [ 301.680660][ T6746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.722930][ T6746] usb 5-1: Product: syz [ 301.762418][ T6746] usb 5-1: Manufacturer: syz [ 301.810719][ T6746] usb 5-1: SerialNumber: syz [ 301.814169][ T4232] usb 10-1: can't set config #0, error -71 [ 301.842790][ T6746] usb 5-1: config 0 descriptor?? [ 301.855654][ T4232] usb 10-1: USB disconnect, device number 10 [ 301.881897][ T4203] Bluetooth: hci7: unexpected event for opcode 0x1005 [ 301.904464][ T4230] peak_usb: probe of 9-1:0.0 failed with error -22 [ 301.916320][ T6746] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 301.984115][ T4230] usb 9-1: USB disconnect, device number 7 [ 302.404555][ T7714] netlink: 'syz.8.758': attribute type 29 has an invalid length. [ 302.470948][ T7714] netlink: 'syz.8.758': attribute type 29 has an invalid length. [ 302.509924][ T7710] netlink: 'syz.8.758': attribute type 29 has an invalid length. [ 302.663133][ T7724] netlink: 60 bytes leftover after parsing attributes in process `syz.8.761'. [ 302.694219][ T7724] netlink: 60 bytes leftover after parsing attributes in process `syz.8.761'. [ 302.728851][ T7728] netlink: 60 bytes leftover after parsing attributes in process `syz.8.761'. [ 304.124005][ T23] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 304.704239][ T23] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 304.718301][ T23] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.729020][ T23] usb 9-1: Product: syz [ 304.733501][ T23] usb 9-1: Manufacturer: syz [ 304.749051][ T23] usb 9-1: SerialNumber: syz [ 304.769447][ T23] usb 9-1: config 0 descriptor?? [ 304.779861][ T7775] netlink: 'syz.9.772': attribute type 29 has an invalid length. [ 304.811996][ T7775] netlink: 'syz.9.772': attribute type 29 has an invalid length. [ 304.852400][ T7773] netlink: 'syz.9.772': attribute type 29 has an invalid length. [ 304.874329][ T6746] gspca_stk1135: reg_w 0x300 err -71 [ 304.881552][ T6746] gspca_stk1135: serial bus timeout: status=0x00 [ 304.940618][ T6746] gspca_stk1135: Sensor write failed [ 304.971369][ T6746] gspca_stk1135: serial bus timeout: status=0x00 [ 304.984327][ T6746] gspca_stk1135: Sensor write failed [ 304.992863][ T6746] gspca_stk1135: serial bus timeout: status=0x00 [ 305.023553][ T6746] gspca_stk1135: Sensor read failed [ 305.049453][ T23] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 305.062736][ T6746] gspca_stk1135: serial bus timeout: status=0x00 [ 305.090605][ T6746] gspca_stk1135: Sensor read failed [ 305.100734][ T6746] gspca_stk1135: Detected sensor type unknown (0x0) [ 305.114091][ T6746] gspca_stk1135: serial bus timeout: status=0x00 [ 305.131372][ T6746] gspca_stk1135: Sensor read failed [ 305.141523][ T6746] gspca_stk1135: serial bus timeout: status=0x00 [ 305.159346][ T6746] gspca_stk1135: Sensor read failed [ 305.179602][ T6746] gspca_stk1135: serial bus timeout: status=0x00 [ 305.199162][ T6746] gspca_stk1135: Sensor write failed [ 305.209034][ T6746] gspca_stk1135: serial bus timeout: status=0x00 [ 305.216592][ T6746] gspca_stk1135: Sensor write failed [ 305.222372][ T6746] stk1135: probe of 5-1:0.0 failed with error -71 [ 305.231253][ T7781] netlink: 60 bytes leftover after parsing attributes in process `syz.6.773'. [ 305.247770][ T6746] usb 5-1: USB disconnect, device number 7 [ 305.264009][ T4233] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 305.266830][ T7781] netlink: 60 bytes leftover after parsing attributes in process `syz.6.773'. [ 305.287837][ T7782] netlink: 60 bytes leftover after parsing attributes in process `syz.6.773'. [ 305.544086][ T4233] usb 10-1: Using ep0 maxpacket: 8 [ 305.664165][ T4233] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 305.686532][ T4233] usb 10-1: config 179 has no interface number 0 [ 305.697939][ T4233] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 305.714263][ T7790] binder: BINDER_SET_CONTEXT_MGR already set [ 305.721052][ T7790] binder: 7789:7790 ioctl 4018620d 200000004a80 returned -16 [ 305.748591][ T4233] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 305.824725][ T4233] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 305.874021][ T4233] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 305.940521][ T4233] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 306.084220][ T4233] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 306.129065][ T4233] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.204410][ T7779] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 306.505031][ T7779] udc-core: couldn't find an available UDC or it's busy [ 306.520136][ T7779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 306.755386][ T4230] usb 10-1: USB disconnect, device number 11 [ 306.773939][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 306.782933][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 307.095332][ T4232] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 307.164047][ T23] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 307.184295][ T23] usb 9-1: USB disconnect, device number 8 [ 307.476244][ T4232] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 307.494054][ T6760] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 307.507438][ T4232] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.540941][ T4232] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.597717][ T2286] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 307.611096][ T4232] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.659903][ T4232] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.698985][ T4232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.770678][ T4232] usb 8-1: config 0 descriptor?? [ 307.824010][ T6760] usb 5-1: Using ep0 maxpacket: 8 [ 307.994557][ T2286] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.046131][ T2286] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 308.090020][ T6760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.102151][ T6760] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 308.112091][ T6760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.123815][ T6760] usb 5-1: config 0 descriptor?? [ 308.129440][ T2286] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.491094][ T6760] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 308.800773][ T4232] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 308.833353][ T6760] usb 5-1: USB disconnect, device number 8 [ 308.884677][ T4232] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 308.929467][ T2286] usb 10-1: config 0 descriptor?? [ 308.939271][ T4232] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 308.997054][ T4232] usb 8-1: USB disconnect, device number 7 [ 309.006091][ T2286] pwc: Askey VC010 type 2 USB webcam detected. [ 309.093586][ T7848] fido_id[7848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 309.329121][ T7853] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 309.342047][ T7853] SQUASHFS error: Failed to read block 0x0: -5 [ 309.883690][ T2286] pwc: recv_control_msg error -32 req 02 val 2b00 [ 309.924061][ T2286] pwc: recv_control_msg error -32 req 02 val 2700 [ 309.982221][ T2286] pwc: recv_control_msg error -32 req 02 val 2c00 [ 310.074023][ T2286] pwc: recv_control_msg error -32 req 04 val 1000 [ 310.114105][ T2286] pwc: recv_control_msg error -32 req 04 val 1300 [ 310.174177][ T2286] pwc: recv_control_msg error -32 req 04 val 1400 [ 310.224159][ T2286] pwc: recv_control_msg error -32 req 02 val 2000 [ 310.264107][ T2286] pwc: recv_control_msg error -32 req 02 val 2100 [ 310.304128][ T2286] pwc: recv_control_msg error -32 req 04 val 1500 [ 310.554082][ T2286] pwc: recv_control_msg error -71 req 02 val 2400 [ 310.595375][ T2286] pwc: recv_control_msg error -71 req 02 val 2600 [ 310.654080][ T2286] pwc: recv_control_msg error -71 req 02 val 2900 [ 310.684106][ T2286] pwc: recv_control_msg error -71 req 02 val 2800 [ 310.729260][ T2286] pwc: recv_control_msg error -71 req 04 val 1100 [ 311.293976][ T2286] pwc: recv_control_msg error -71 req 04 val 1200 [ 311.362498][ T7895] netlink: 60 bytes leftover after parsing attributes in process `syz.4.807'. [ 311.364623][ T2286] pwc: Registered as video103. [ 311.403260][ T7896] netlink: 'syz.9.806': attribute type 29 has an invalid length. [ 311.422059][ T7895] netlink: 60 bytes leftover after parsing attributes in process `syz.4.807'. [ 311.437130][ T2286] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input21 [ 311.453636][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.4.807'. [ 311.485537][ T7896] netlink: 'syz.9.806': attribute type 29 has an invalid length. [ 311.528775][ T2286] usb 10-1: USB disconnect, device number 12 [ 311.536405][ T7893] netlink: 'syz.9.806': attribute type 29 has an invalid length. [ 311.670356][ T7907] fuse: Bad value for 'fd' [ 311.758187][ T7912] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 312.969289][ T7953] netlink: 60 bytes leftover after parsing attributes in process `syz.8.820'. [ 313.021945][ T7953] netlink: 60 bytes leftover after parsing attributes in process `syz.8.820'. [ 313.100097][ T7956] netlink: 60 bytes leftover after parsing attributes in process `syz.8.820'. [ 313.112702][ T7963] netlink: 'syz.7.822': attribute type 29 has an invalid length. [ 313.172655][ T7963] netlink: 'syz.7.822': attribute type 29 has an invalid length. [ 313.194089][ T4233] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 313.210983][ T7961] netlink: 'syz.7.822': attribute type 29 has an invalid length. [ 313.444055][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 313.564198][ T4233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.614118][ T4233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.834056][ T6959] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 313.834180][ T4233] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 313.862446][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.871259][ T4233] usb 5-1: Product: syz [ 313.876014][ T4233] usb 5-1: Manufacturer: syz [ 313.881209][ T4233] usb 5-1: SerialNumber: syz [ 313.984627][ T2857] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 314.244885][ T6959] usb 7-1: Using ep0 maxpacket: 32 [ 314.416456][ T6959] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 314.462459][ T6959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.644550][ T2857] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 314.698201][ T2857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.734206][ T4233] usb 5-1: 0:2 : does not exist [ 314.774849][ T2857] usb 8-1: Product: syz [ 314.779240][ T2857] usb 8-1: Manufacturer: syz [ 314.785461][ T6959] usb 7-1: config 0 descriptor?? [ 314.804072][ T2857] usb 8-1: SerialNumber: syz [ 314.824870][ T4233] usb 5-1: USB disconnect, device number 9 [ 314.867285][ T6959] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 314.888813][ T6667] udevd[6667]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.987787][ T8011] binder: 8010:8011 ioctl c0306201 200000000080 returned -14 [ 315.013372][ T8011] binder: 8010:8011 ioctl c0306201 2000000003c0 returned -14 [ 315.267620][ T8016] netlink: 'syz.8.837': attribute type 29 has an invalid length. [ 315.294313][ T8016] netlink: 'syz.8.837': attribute type 29 has an invalid length. [ 315.313772][ T8015] netlink: 'syz.8.837': attribute type 29 has an invalid length. [ 315.334315][ T2857] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 315.684061][ T6746] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 315.829453][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.4.842'. [ 316.868639][ T23] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 316.934671][ T6746] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 316.949625][ T6746] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.959019][ T6746] usb 10-1: Product: syz [ 316.963810][ T6746] usb 10-1: Manufacturer: syz [ 316.974133][ T6746] usb 10-1: SerialNumber: syz [ 317.121336][ T6959] gspca_vc032x: reg_w err -71 [ 317.127595][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.133464][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.140864][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.147385][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.155051][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.161476][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.168683][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.177918][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.184190][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.189757][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.196120][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.201967][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.210319][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.288684][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.341237][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.350348][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.375453][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.485297][ T2857] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 317.514565][ T23] usb 9-1: config 0 has an invalid interface number: 231 but max is 0 [ 317.556053][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.563298][ T23] usb 9-1: config 0 has no interface number 0 [ 317.631024][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.651028][ T23] usb 9-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 317.665281][ T6746] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 317.729358][ T6959] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.737537][ T6959] gspca_vc032x: Unknown sensor... [ 317.746645][ T6959] vc032x: probe of 7-1:0.0 failed with error -22 [ 317.765712][ T6959] usb 7-1: USB disconnect, device number 9 [ 317.904294][ T2857] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 317.954078][ T2857] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 317.974167][ T23] usb 9-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 318.002925][ T23] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.023310][ T23] usb 9-1: Product: syz [ 318.038149][ T23] usb 9-1: Manufacturer: syz [ 318.043589][ T23] usb 9-1: SerialNumber: syz [ 318.048815][ T2857] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 318.089026][ T23] usb 9-1: config 0 descriptor?? [ 318.104047][ T2857] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 318.144277][ T8043] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 318.154106][ T2857] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 318.174648][ T23] plusb 9-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.8-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 16:a3:e6:bb:a1:e4 [ 318.214036][ T2857] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 318.264065][ T2857] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 318.356403][ T2857] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 319.171881][ T2857] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 319.204709][ T2857] lan78xx: probe of 8-1:1.0 failed with error -71 [ 319.226767][ T2857] usb 8-1: USB disconnect, device number 8 [ 319.561544][ T4231] usb 9-1: USB disconnect, device number 9 [ 319.609765][ T4231] plusb 9-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.8-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 319.664208][ T2286] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 319.828656][ T4387] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 320.284102][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 320.637445][ T6746] net_ratelimit: 2 callbacks suppressed [ 320.637468][ T6746] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -71 [ 320.674064][ T6746] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -71 [ 320.674171][ T2286] usb 7-1: config 0 has no interfaces? [ 320.694222][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 320.697166][ T2286] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 320.710445][ T2286] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.714100][ T6746] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -71 [ 320.727188][ T2286] usb 7-1: config 0 descriptor?? [ 320.736764][ T8145] blktrace: Concurrent blktraces are not allowed on sg0 [ 320.754366][ T8147] netlink: 'syz.9.861': attribute type 29 has an invalid length. [ 320.778710][ T8147] netlink: 'syz.9.861': attribute type 29 has an invalid length. [ 320.787073][ T6746] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -71 [ 320.798321][ T8144] netlink: 'syz.9.861': attribute type 29 has an invalid length. [ 320.814255][ T6746] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -71 [ 320.844201][ T23] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 320.858224][ T23] usb 5-1: config 0 has no interface number 0 [ 320.865983][ T6746] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -71 [ 320.887038][ T23] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 320.914092][ T6746] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -71 [ 320.954060][ T6746] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000090. ret = -71 [ 321.004339][ T4387] usb 8-1: config 1 interface 0 has no altsetting 0 [ 321.194802][ T4387] usb 8-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 321.223075][ T4387] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.266450][ T4387] usb 8-1: Product: syz [ 321.311976][ T4387] usb 8-1: Manufacturer: syz [ 321.458896][ T4387] usb 8-1: SerialNumber: syz [ 321.668845][ T6746] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 321.686223][ T6746] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 321.698540][ T6746] lan78xx: probe of 10-1:1.0 failed with error -71 [ 321.747591][ T6746] usb 10-1: USB disconnect, device number 13 [ 321.760903][ T2286] usb 7-1: USB disconnect, device number 10 [ 321.849317][ T23] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 321.862344][ T8167] device syzkaller0 entered promiscuous mode [ 321.868094][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.883049][ T23] usb 5-1: Product: syz [ 321.890635][ T23] usb 5-1: Manufacturer: syz [ 321.901748][ T23] usb 5-1: SerialNumber: syz [ 321.941222][ T23] usb 5-1: config 0 descriptor?? [ 321.978538][ T8138] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 322.036363][ T4387] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input22 [ 322.064187][ T3547] bcm5974 8-1:1.0: could not read from device [ 322.087214][ T4387] usb 8-1: USB disconnect, device number 9 [ 322.167400][ T6746] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 322.209978][ T8138] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 322.474091][ T6746] usb 10-1: Using ep0 maxpacket: 32 [ 322.614221][ T6746] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 322.627947][ T6746] usb 10-1: config 0 has no interface number 0 [ 322.638699][ T6746] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 322.659706][ T6746] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 322.903188][ T8221] netlink: 'syz.6.874': attribute type 29 has an invalid length. [ 322.919048][ T8221] netlink: 'syz.6.874': attribute type 29 has an invalid length. [ 322.927961][ T8213] netlink: 'syz.6.874': attribute type 29 has an invalid length. [ 323.024132][ T6746] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 323.039648][ T6746] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.051245][ T6746] usb 10-1: Product: syz [ 323.157147][ T8227] overlayfs: failed to clone upperpath [ 323.318192][ T6746] usb 10-1: Manufacturer: syz [ 323.325045][ T6746] usb 10-1: SerialNumber: syz [ 323.333767][ T6959] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 323.360351][ T6959] Bluetooth: hci6: Injecting HCI hardware error event [ 323.374884][ T6746] usb 10-1: config 0 descriptor?? [ 323.401716][ T4203] Bluetooth: hci6: hardware error 0x00 [ 323.634977][ T8236] device syzkaller0 entered promiscuous mode [ 324.009644][ T6746] radio-si470x 10-1:0.35: DeviceID=0xe8fd ChipID=0xc700 [ 324.038845][ T2857] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 324.294005][ T4387] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 324.694877][ T4387] usb 8-1: config 1 interface 0 has no altsetting 0 [ 324.924239][ T4387] usb 8-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 324.957439][ T6746] radio-si470x 10-1:0.35: software version 232, hardware version 253 [ 324.982533][ T4387] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.994050][ T6746] radio-si470x 10-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 325.003332][ T6746] radio-si470x 10-1:0.35: submitting int urb failed (-90) [ 325.004802][ T4387] usb 8-1: Product: syz [ 325.011310][ T23] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 325.021455][ T4387] usb 8-1: Manufacturer: syz [ 325.040499][ T4387] usb 8-1: SerialNumber: syz [ 325.046894][ T23] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 325.073358][ T23] asix: probe of 5-1:0.188 failed with error -71 [ 325.080629][ T6746] radio-si470x 10-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 325.101055][ T6746] radio-si470x: probe of 10-1:0.35 failed with error -22 [ 325.114493][ T23] usb 5-1: USB disconnect, device number 10 [ 325.175936][ T2857] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 325.196958][ T6746] radio-raremono 10-1:0.35: this is not Thanko's Raremono. [ 325.217585][ T2857] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.273510][ T6746] usb 10-1: USB disconnect, device number 14 [ 325.434422][ T2857] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 325.457591][ T8284] netlink: 'syz.9.887': attribute type 29 has an invalid length. [ 325.461303][ T2857] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 325.479480][ T4387] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input23 [ 325.481733][ T2857] usb 7-1: Product: syz [ 325.497088][ T8284] netlink: 'syz.9.887': attribute type 29 has an invalid length. [ 325.504167][ T2857] usb 7-1: Manufacturer: syz [ 325.514080][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 325.525278][ T2857] usb 7-1: SerialNumber: syz [ 325.531651][ T8282] netlink: 'syz.9.887': attribute type 29 has an invalid length. [ 325.544016][ T3547] bcm5974 8-1:1.0: could not read from device [ 325.574417][ T4387] usb 8-1: USB disconnect, device number 10 [ 325.594289][ T8244] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 325.609651][ T3547] bcm5974 8-1:1.0: could not read from device [ 325.625441][ T3547] bcm5974 8-1:1.0: could not read from device [ 325.636112][ T2857] appletouch 7-1:1.0: Could not find int-in endpoint [ 325.643502][ T2857] appletouch: probe of 7-1:1.0 failed with error -5 [ 325.681124][ T2857] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 325.804016][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 325.917601][ T2857] usb 7-1: USB disconnect, device number 11 [ 325.948561][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.003033][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 326.034244][ T8299] device syzkaller0 entered promiscuous mode [ 326.065846][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 326.084501][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.117332][ T23] usb 5-1: config 0 descriptor?? [ 326.174328][ T23] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 326.404158][ T23] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 326.488970][ T8312] usb usb8: usbfs: process 8312 (syz.7.893) did not claim interface 0 before use [ 326.509205][ T6746] usb 5-1: USB disconnect, device number 11 [ 327.874072][ T4233] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 327.894506][ T23] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 327.924681][ T8339] netlink: 'syz.4.899': attribute type 29 has an invalid length. [ 327.943315][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.971649][ T8339] netlink: 'syz.4.899': attribute type 29 has an invalid length. [ 327.991083][ T23] usb 10-1: Product: syz [ 328.004064][ T23] usb 10-1: Manufacturer: syz [ 328.014400][ T23] usb 10-1: SerialNumber: syz [ 328.020603][ T8338] netlink: 'syz.4.899': attribute type 29 has an invalid length. [ 328.034117][ T4231] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 328.127727][ T4233] usb 8-1: Using ep0 maxpacket: 32 [ 328.254229][ T4233] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 328.275685][ T4233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.287584][ T4231] usb 7-1: Using ep0 maxpacket: 16 [ 328.303100][ T4233] usb 8-1: config 0 descriptor?? [ 328.346073][ T4233] gspca_main: sunplus-2.14.0 probing 041e:400b [ 328.364380][ T4387] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 328.404286][ T4231] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.422761][ T8358] device syzkaller0 entered promiscuous mode [ 328.424174][ T4231] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.514161][ T23] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 328.597415][ T4231] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.613267][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.633592][ T4231] usb 7-1: Product: syz [ 328.639785][ T4231] usb 7-1: Manufacturer: syz [ 328.653010][ T4231] usb 7-1: SerialNumber: syz [ 328.744353][ T4387] usb 5-1: config 1 interface 0 has no altsetting 0 [ 328.914302][ T4387] usb 5-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 328.941134][ T4387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.953452][ T4387] usb 5-1: Product: syz [ 328.962983][ T4387] usb 5-1: Manufacturer: syz [ 328.972370][ T4387] usb 5-1: SerialNumber: syz [ 328.994355][ T4231] usb 7-1: 0:2 : does not exist [ 329.033439][ T4231] usb 7-1: USB disconnect, device number 12 [ 329.255649][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.366513][ T4387] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input24 [ 329.404483][ T3547] bcm5974 5-1:1.0: could not read from device [ 329.417436][ T4387] usb 5-1: USB disconnect, device number 12 [ 329.854221][ T4231] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 329.884188][ T6957] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 329.924567][ T23] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 330.094124][ T4233] gspca_sunplus: reg_w_riv err -71 [ 330.104970][ T4233] sunplus: probe of 8-1:0.0 failed with error -71 [ 330.115829][ T4231] usb 9-1: Using ep0 maxpacket: 32 [ 330.124342][ T4387] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 330.150918][ T4233] usb 8-1: USB disconnect, device number 11 [ 330.254523][ T4231] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.267889][ T4231] usb 9-1: config 0 has no interface number 0 [ 330.275312][ T4231] usb 9-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 330.287632][ T4231] usb 9-1: config 0 interface 1 has no altsetting 0 [ 330.325570][ T6957] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 330.340724][ T6957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.355598][ T6957] usb 7-1: config 0 descriptor?? [ 330.454057][ T4231] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 330.464655][ T4231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.473722][ T4231] usb 9-1: Product: syz [ 330.479801][ T4231] usb 9-1: Manufacturer: syz [ 330.486165][ T4231] usb 9-1: SerialNumber: syz [ 330.495292][ T4231] usb 9-1: config 0 descriptor?? [ 330.670008][ T4387] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 330.690806][ T4387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.704264][ T23] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -71 [ 330.736390][ T4387] usb 5-1: Product: syz [ 330.741558][ T4387] usb 5-1: Manufacturer: syz [ 330.747298][ T23] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 330.772891][ T4387] usb 5-1: SerialNumber: syz [ 330.780875][ T4231] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 330.814867][ T4387] usb 5-1: config 0 descriptor?? [ 330.824163][ T23] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 330.834580][ T4231] cx231xx 9-1:0.1: Failed to read PCB config [ 330.856115][ T4387] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 330.863339][ T4231] cx231xx: probe of 9-1:0.1 failed with error -71 [ 330.873300][ T4231] usb 9-1: USB disconnect, device number 10 [ 330.874044][ T23] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 330.914103][ T23] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 330.944244][ T23] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 330.979148][ T23] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 331.014204][ T23] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 331.054068][ T23] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 331.076436][ T23] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 331.090881][ T23] lan78xx: probe of 10-1:1.0 failed with error -71 [ 331.124006][ T2857] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 331.132466][ T23] usb 10-1: USB disconnect, device number 15 [ 331.276180][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 331.276193][ T26] audit: type=1326 audit(1775731633.834:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.9.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfc6c0819 code=0x7ffc0000 [ 331.317760][ T26] audit: type=1326 audit(1775731633.864:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.9.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfc6c0819 code=0x7ffc0000 [ 331.344255][ T4231] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 331.425032][ T2857] usb 8-1: Using ep0 maxpacket: 16 [ 331.472494][ T26] audit: type=1326 audit(1775731633.874:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.9.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdbfc6c0819 code=0x7ffc0000 [ 331.519586][ T26] audit: type=1326 audit(1775731633.874:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.9.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfc6c0819 code=0x7ffc0000 [ 331.553841][ T26] audit: type=1326 audit(1775731633.904:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.9.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdbfc6c0819 code=0x7ffc0000 [ 331.594140][ T2857] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.615624][ T2857] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.634036][ T26] audit: type=1326 audit(1775731633.904:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.9.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfc6c0819 code=0x7ffc0000 [ 331.664068][ T26] audit: type=1326 audit(1775731633.904:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.9.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfc6c0819 code=0x7ffc0000 [ 331.664088][ T4231] usb 9-1: Using ep0 maxpacket: 32 [ 331.700118][ T26] audit: type=1326 audit(1775731633.904:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.9.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbfc6c0819 code=0x7ffc0000 [ 331.741300][ T26] audit: type=1326 audit(1775731633.904:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.9.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfc6c0819 code=0x7ffc0000 [ 331.808315][ T26] audit: type=1326 audit(1775731633.904:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.9.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfc6c0819 code=0x7ffc0000 [ 331.884381][ T2857] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 331.917041][ T2857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.924485][ T4231] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.933440][ T2857] usb 8-1: Product: syz [ 331.964183][ T4231] usb 9-1: config 0 has no interface number 0 [ 331.968224][ T2857] usb 8-1: Manufacturer: syz [ 331.974723][ T4231] usb 9-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 331.986962][ T2857] usb 8-1: SerialNumber: syz [ 332.052135][ T4231] usb 9-1: config 0 interface 1 has no altsetting 0 [ 332.254336][ T4231] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 332.275866][ T4231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.291375][ T4231] usb 9-1: Product: syz [ 332.299008][ T4231] usb 9-1: Manufacturer: syz [ 332.306493][ T4231] usb 9-1: SerialNumber: syz [ 332.322965][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.9.912'. [ 332.323015][ T4231] usb 9-1: config 0 descriptor?? [ 332.374172][ T4387] gspca_sunplus: reg_w_riv err -71 [ 332.386185][ T6957] usb 7-1: Cannot set autoneg [ 332.389592][ T4387] sunplus: probe of 5-1:0.0 failed with error -71 [ 332.395875][ T6957] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 332.416374][ T4387] usb 5-1: USB disconnect, device number 13 [ 332.436497][ T8501] device syzkaller0 entered promiscuous mode [ 332.460299][ T6957] usb 7-1: USB disconnect, device number 13 [ 332.574977][ T2857] usb 8-1: 0:2 : does not exist [ 332.606694][ T4231] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 332.635971][ T2857] usb 8-1: USB disconnect, device number 12 [ 332.667485][ T4231] cx231xx 9-1:0.1: Failed to read PCB config [ 332.677983][ T4231] cx231xx: probe of 9-1:0.1 failed with error -71 [ 332.737639][ T4231] usb 9-1: USB disconnect, device number 11 [ 333.284132][ T23] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 333.434085][ T4231] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 333.694058][ T4231] usb 9-1: Using ep0 maxpacket: 32 [ 333.749148][ T23] usb 7-1: config 1 interface 0 has no altsetting 0 [ 333.814270][ T4231] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 333.934982][ T23] usb 7-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 333.955499][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.977277][ T23] usb 7-1: Product: syz [ 333.995118][ T4231] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 333.995263][ T8569] device syzkaller0 entered promiscuous mode [ 334.011208][ T4231] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 334.016615][ T23] usb 7-1: Manufacturer: syz [ 334.031875][ T4231] usb 9-1: Product: syz [ 334.032450][ T23] usb 7-1: SerialNumber: syz [ 334.042034][ T4231] usb 9-1: Manufacturer: syz [ 334.055534][ T4231] usb 9-1: SerialNumber: syz [ 334.081201][ T4231] usb 9-1: config 0 descriptor?? [ 334.114215][ T8533] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 334.371119][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 334.418589][ T8582] ================================================================== [ 334.427492][ T8582] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 334.434830][ T8582] Read of size 8 at addr ffff8880235c7008 by task syz.9.929/8582 [ 334.443263][ T8582] [ 334.445854][ T8582] CPU: 0 PID: 8582 Comm: syz.9.929 Not tainted syzkaller #0 [ 334.454508][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 334.465265][ T8582] Call Trace: [ 334.468640][ T8582] [ 334.471565][ T8582] dump_stack_lvl+0x188/0x250 [ 334.476681][ T8582] ? show_regs_print_info+0x20/0x20 [ 334.482217][ T8582] ? _printk+0xda/0x130 [ 334.486538][ T8582] ? ax25_release+0x5ca/0x870 [ 334.492119][ T8582] ? load_image+0x400/0x400 [ 334.496787][ T8582] ? __timer_delete_sync+0x1f5/0x290 [ 334.502332][ T8582] print_address_description+0x60/0x2d0 [ 334.508307][ T8582] ? ax25_release+0x5ca/0x870 [ 334.513087][ T8582] kasan_report+0xdf/0x130 [ 334.517933][ T8582] ? ax25_release+0x5ca/0x870 [ 334.522950][ T8582] ax25_release+0x5ca/0x870 [ 334.527821][ T8582] sock_close+0xd5/0x240 [ 334.532404][ T8582] ? sock_mmap+0x90/0x90 [ 334.536821][ T8582] __fput+0x234/0x930 [ 334.541599][ T8582] task_work_run+0x125/0x1a0 [ 334.546548][ T8582] exit_to_user_mode_loop+0x10f/0x130 [ 334.552176][ T8582] exit_to_user_mode_prepare+0xee/0x180 [ 334.557828][ T8582] syscall_exit_to_user_mode+0x16/0x40 [ 334.563458][ T8582] do_syscall_64+0x58/0xa0 [ 334.567885][ T8582] ? clear_bhb_loop+0x30/0x80 [ 334.573196][ T8582] ? clear_bhb_loop+0x30/0x80 [ 334.577949][ T8582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.583918][ T8582] RIP: 0033:0x7fdbfc6c0819 [ 334.588493][ T8582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.609138][ T8582] RSP: 002b:00007ffeb354b048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 334.617906][ T8582] RAX: 0000000000000000 RBX: 00007ffeb354b130 RCX: 00007fdbfc6c0819 [ 334.626052][ T8582] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 334.634275][ T8582] RBP: 00000000000519a6 R08: 0000000000000001 R09: 0000000000000000 [ 334.642865][ T8582] R10: 0000001b2c020000 R11: 0000000000000246 R12: 00007ffeb354b170 [ 334.651379][ T8582] R13: 00007fdbfc939fac R14: 0000000000051a38 R15: 00007fdbfc939fa0 [ 334.659726][ T8582] [ 334.662858][ T8582] [ 334.665175][ T8582] Allocated by task 6486: [ 334.669856][ T8582] __kasan_kmalloc+0xb5/0xf0 [ 334.674708][ T8582] ax25_dev_device_up+0x50/0x580 [ 334.679833][ T8582] ax25_device_event+0x483/0x4f0 [ 334.685114][ T8582] raw_notifier_call_chain+0xcb/0x160 [ 334.690765][ T8582] __dev_notify_flags+0x194/0x300 [ 334.696206][ T8582] dev_change_flags+0xe3/0x1a0 [ 334.701694][ T8582] dev_ifsioc+0x130/0xd50 [ 334.706739][ T8582] dev_ioctl+0x545/0xe30 [ 334.711383][ T8582] sock_do_ioctl+0x245/0x320 [ 334.717178][ T8582] sock_ioctl+0x4d2/0x710 [ 334.721873][ T8582] __se_sys_ioctl+0xfa/0x170 [ 334.726659][ T8582] do_syscall_64+0x4c/0xa0 [ 334.731363][ T8582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.738123][ T8582] [ 334.741066][ T8582] Freed by task 8584: [ 334.745171][ T8582] kasan_set_track+0x4b/0x70 [ 334.750747][ T8582] kasan_set_free_info+0x1f/0x40 [ 334.756533][ T8582] ____kasan_slab_free+0xd5/0x110 [ 334.761740][ T8582] slab_free_freelist_hook+0xea/0x170 [ 334.767901][ T8582] kfree+0xef/0x2a0 [ 334.772287][ T8582] ax25_device_event+0x4b4/0x4f0 [ 334.777384][ T8582] raw_notifier_call_chain+0xcb/0x160 [ 334.783042][ T8582] __dev_notify_flags+0x158/0x300 [ 334.788552][ T8582] dev_change_flags+0xe3/0x1a0 [ 334.794287][ T8582] dev_ifsioc+0x130/0xd50 [ 334.799060][ T8582] dev_ioctl+0x545/0xe30 [ 334.803563][ T8582] sock_do_ioctl+0x245/0x320 [ 334.809282][ T8582] sock_ioctl+0x4d2/0x710 [ 334.814070][ T8582] __se_sys_ioctl+0xfa/0x170 [ 334.819708][ T8582] do_syscall_64+0x4c/0xa0 [ 334.824732][ T8582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.831084][ T8582] [ 334.833571][ T8582] Last potentially related work creation: [ 334.839450][ T8582] kasan_save_stack+0x35/0x60 [ 334.844511][ T8582] kasan_record_aux_stack+0xb8/0x100 [ 334.850160][ T8582] insert_work+0x54/0x3d0 [ 334.854887][ T8582] __queue_work+0x9c5/0xd50 [ 334.859553][ T8582] queue_work_on+0x124/0x1f0 [ 334.864404][ T8582] netdevice_event+0x803/0x900 [ 334.869166][ T8582] raw_notifier_call_chain+0xcb/0x160 [ 334.874933][ T8582] __dev_notify_flags+0x194/0x300 [ 334.880577][ T8582] dev_change_flags+0xe3/0x1a0 [ 334.885598][ T8582] do_setlink+0xcdb/0x3d60 [ 334.890175][ T8582] rtnl_newlink+0x1658/0x1a50 [ 334.895103][ T8582] rtnetlink_rcv_msg+0x844/0xf30 [ 334.900560][ T8582] netlink_rcv_skb+0x1f5/0x440 [ 334.905401][ T8582] netlink_unicast+0x774/0x920 [ 334.910942][ T8582] netlink_sendmsg+0x8ba/0xbe0 [ 334.915788][ T8582] __sys_sendto+0x46d/0x620 [ 334.920471][ T8582] __x64_sys_sendto+0xda/0xf0 [ 334.925243][ T8582] do_syscall_64+0x4c/0xa0 [ 334.930206][ T8582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.937652][ T8582] [ 334.940064][ T8582] Second to last potentially related work creation: [ 334.946731][ T8582] kasan_save_stack+0x35/0x60 [ 334.951496][ T8582] kasan_record_aux_stack+0xb8/0x100 [ 334.957147][ T8582] insert_work+0x54/0x3d0 [ 334.961747][ T8582] __queue_work+0x9c5/0xd50 [ 334.966327][ T8582] queue_work_on+0x124/0x1f0 [ 334.971794][ T8582] netdevice_event+0x803/0x900 [ 334.977412][ T8582] raw_notifier_call_chain+0xcb/0x160 [ 334.982953][ T8582] __dev_notify_flags+0x194/0x300 [ 334.988251][ T8582] dev_change_flags+0xe3/0x1a0 [ 334.993278][ T8582] do_setlink+0xcdb/0x3d60 [ 334.998207][ T8582] rtnl_newlink+0x1658/0x1a50 [ 335.003267][ T8582] rtnetlink_rcv_msg+0x844/0xf30 [ 335.008672][ T8582] netlink_rcv_skb+0x1f5/0x440 [ 335.013720][ T8582] netlink_unicast+0x774/0x920 [ 335.018875][ T8582] netlink_sendmsg+0x8ba/0xbe0 [ 335.023890][ T8582] __sys_sendto+0x46d/0x620 [ 335.028403][ T8582] __x64_sys_sendto+0xda/0xf0 [ 335.033087][ T8582] do_syscall_64+0x4c/0xa0 [ 335.037875][ T8582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 335.044217][ T8582] [ 335.046974][ T8582] The buggy address belongs to the object at ffff8880235c7000 [ 335.046974][ T8582] which belongs to the cache kmalloc-192 of size 192 [ 335.062075][ T8582] The buggy address is located 8 bytes inside of [ 335.062075][ T8582] 192-byte region [ffff8880235c7000, ffff8880235c70c0) [ 335.076232][ T8582] The buggy address belongs to the page: [ 335.082230][ T8582] page:ffffea00008d71c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880235c7e00 pfn:0x235c7 [ 335.094680][ T8582] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 335.103124][ T8582] raw: 00fff00000000200 ffffea0001e24e40 0000000400000004 ffff888016c41a00 [ 335.112298][ T8582] raw: ffff8880235c7e00 000000008010000f 00000001ffffffff 0000000000000000 [ 335.120879][ T8582] page dumped because: kasan: bad access detected [ 335.127738][ T8582] page_owner tracks the page as allocated [ 335.133620][ T8582] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 9896465300, free_ts 9842767044 [ 335.149622][ T8582] get_page_from_freelist+0x1bbd/0x1ca0 [ 335.155604][ T8582] __alloc_pages+0x1ee/0x480 [ 335.160381][ T8582] alloc_page_interleave+0x24/0x1e0 [ 335.165657][ T8582] new_slab+0xc0/0x4b0 [ 335.169804][ T8582] ___slab_alloc+0x80a/0xdd0 [ 335.174385][ T8582] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 335.180089][ T8582] call_usermodehelper_setup+0x8a/0x260 [ 335.185782][ T8582] kobject_uevent_env+0x65e/0x890 [ 335.190802][ T8582] driver_register+0x3e2/0x430 [ 335.195812][ T8582] do_one_initcall+0x272/0x730 [ 335.200745][ T8582] do_initcall_level+0x137/0x1f0 [ 335.205842][ T8582] do_initcalls+0x4b/0x90 [ 335.210153][ T8582] kernel_init_freeable+0x3e9/0x570 [ 335.215602][ T8582] kernel_init+0x19/0x1b0 [ 335.220099][ T8582] ret_from_fork+0x1f/0x30 [ 335.224860][ T8582] page last free stack trace: [ 335.230156][ T8582] free_unref_page_prepare+0x637/0x6c0 [ 335.236115][ T8582] free_unref_page+0x8f/0x2a0 [ 335.241085][ T8582] __vunmap+0x8b9/0xa50 [ 335.245654][ T8582] free_work+0x56/0x80 [ 335.249996][ T8582] process_one_work+0x85f/0x1010 [ 335.255711][ T8582] worker_thread+0xaa6/0x1290 [ 335.260580][ T8582] kthread+0x436/0x520 [ 335.264856][ T8582] ret_from_fork+0x1f/0x30 [ 335.269938][ T8582] [ 335.272533][ T8582] Memory state around the buggy address: [ 335.279139][ T8582] ffff8880235c6f00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 335.288162][ T8582] ffff8880235c6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 335.296661][ T8582] >ffff8880235c7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 335.305554][ T8582] ^ [ 335.310150][ T8582] ffff8880235c7080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 335.318829][ T8582] ffff8880235c7100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 335.328231][ T8582] ================================================================== [ 335.337337][ T8582] Disabling lock debugging due to kernel taint [ 335.371578][ T8582] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 335.379178][ T8582] CPU: 1 PID: 8582 Comm: syz.9.929 Tainted: G B syzkaller #0 [ 335.388041][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 335.398498][ T8582] Call Trace: [ 335.402049][ T8582] [ 335.404989][ T8582] dump_stack_lvl+0x188/0x250 [ 335.409859][ T8582] ? show_regs_print_info+0x20/0x20 [ 335.415776][ T8582] ? load_image+0x400/0x400 [ 335.420476][ T8582] panic+0x2e5/0x810 [ 335.424509][ T8582] ? bpf_jit_dump+0xd0/0xd0 [ 335.429022][ T8582] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 335.435138][ T8582] ? _raw_spin_unlock+0x40/0x40 [ 335.441004][ T8582] ? print_memory_metadata+0x314/0x400 [ 335.446557][ T8582] ? ax25_release+0x5ca/0x870 [ 335.452053][ T8582] check_panic_on_warn+0x80/0xa0 [ 335.457377][ T8582] ? ax25_release+0x5ca/0x870 [ 335.462394][ T8582] end_report+0x6d/0xf0 [ 335.466928][ T8582] kasan_report+0x102/0x130 [ 335.471816][ T8582] ? ax25_release+0x5ca/0x870 [ 335.477117][ T8582] ax25_release+0x5ca/0x870 [ 335.482048][ T8582] sock_close+0xd5/0x240 [ 335.486300][ T8582] ? sock_mmap+0x90/0x90 [ 335.490717][ T8582] __fput+0x234/0x930 [ 335.495037][ T8582] task_work_run+0x125/0x1a0 [ 335.499912][ T8582] exit_to_user_mode_loop+0x10f/0x130 [ 335.505753][ T8582] exit_to_user_mode_prepare+0xee/0x180 [ 335.511699][ T8582] syscall_exit_to_user_mode+0x16/0x40 [ 335.517589][ T8582] do_syscall_64+0x58/0xa0 [ 335.522265][ T8582] ? clear_bhb_loop+0x30/0x80 [ 335.527361][ T8582] ? clear_bhb_loop+0x30/0x80 [ 335.532240][ T8582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 335.538538][ T8582] RIP: 0033:0x7fdbfc6c0819 [ 335.543049][ T8582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.564683][ T8582] RSP: 002b:00007ffeb354b048 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 335.573180][ T8582] RAX: 0000000000000000 RBX: 00007ffeb354b130 RCX: 00007fdbfc6c0819 [ 335.581763][ T8582] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 335.590178][ T8582] RBP: 00000000000519a6 R08: 0000000000000001 R09: 0000000000000000 [ 335.598568][ T8582] R10: 0000001b2c020000 R11: 0000000000000246 R12: 00007ffeb354b170 [ 335.606787][ T8582] R13: 00007fdbfc939fac R14: 0000000000051a38 R15: 00007fdbfc939fa0 [ 335.615351][ T8582] [ 335.619244][ T8582] Kernel Offset: disabled [ 335.623699][ T8582] Rebooting in 86400 seconds..