last executing test programs: 28m33.785033393s ago: executing program 4 (id=5): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x14040080) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x43353039}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x1, r4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 28m17.886522106s ago: executing program 32 (id=5): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x14040080) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x43353039}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x1, r4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 26m45.371463545s ago: executing program 3 (id=165): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="000000010000000900"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000200)=""/182) 26m42.993882698s ago: executing program 3 (id=170): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) readv(r0, &(0x7f0000000700), 0x0) 26m41.603070019s ago: executing program 3 (id=174): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d", 0x9c, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e61", 0x7c, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 26m38.96140933s ago: executing program 3 (id=181): rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{0x6c, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x16, 0x1}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x1}, {0x30}, {0xf}, {0x24, 0x1}, {0xb, 0x1}, {0xc}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, 0x0) 26m35.653208586s ago: executing program 3 (id=185): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca1", 0x75, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 26m32.428861923s ago: executing program 3 (id=192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="2a8a436fbb94a01652fc9870dbcbb4bfe1e8ef421582116a9a530aff4adad693fac541798cfbbb0d5c5c6451326a0766ebb7", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xf0}}, 0x4000000) close(0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001cc0)=""/4096, 0x1000, 0x200) 26m14.840943693s ago: executing program 33 (id=192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="2a8a436fbb94a01652fc9870dbcbb4bfe1e8ef421582116a9a530aff4adad693fac541798cfbbb0d5c5c6451326a0766ebb7", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xf0}}, 0x4000000) close(0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001cc0)=""/4096, 0x1000, 0x200) 1m36.250959976s ago: executing program 1 (id=3038): syz_emit_ethernet(0x11, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@llc={0x4, {@llc={0xc2, 0x0, '\b'}}}}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000300)={0x0, 0x8001}, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x9d) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 1m34.446913929s ago: executing program 1 (id=3044): syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f00000001c0), 0xffffffffffffffff, 0x200) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$full(0xffffff9c, &(0x7f0000000240), 0x200200, 0x0) socket$inet6(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) memfd_secret(0x80000) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e61, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m32.067808746s ago: executing program 1 (id=3047): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='maps\x00') read$msr(r0, &(0x7f0000019640)=""/102395, 0x18ffb) r1 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r1, 0x0, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) semop(0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) semget(0x1, 0x1, 0x400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x420000) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000200)={0x18, r6, 0x1, 0x0, &(0x7f0000000040)=[{0xffffffffffffedc7, 0xfffffffffffffff9}]}) 1m27.526339246s ago: executing program 1 (id=3052): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x8, 0x1, 0x7ff}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0xc, 0x59, "a5add5e3f447dc2dfab36341086fa9eb94e6d3d116f34ce238a844d0a7410b1c88f9e38aa3c777412fc95d458c4078d7681a1acb2e4484178ca73cf050c47e4b1162a7266825a37e48991d74b15713dbdca5b70a16ef826276"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x6}}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000002c00)=@buf) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000080)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x22, 0x1d, {0x1d, 0x31, "d5df8eed22f0c5a1bf0947d75298f3a003e9750d4fc1b7ca413c4e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000300)={0x34, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x58}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x9e0d}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "0f1b9471b911a4b9580c72d48899f8aded09ee5a0e38deb5f7aa31e8c7804d046d90a63a540614aa0478ef48bde43a"}}) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x4180, 0x0) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0136277567c902049c348f0125bd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) 1m22.598205292s ago: executing program 1 (id=3057): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='maps\x00') read$msr(r0, &(0x7f0000019640)=""/102395, 0x18ffb) r1 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r1, 0x0, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) semop(0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) semget(0x1, 0x1, 0x400) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x420000) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000200)={0x18, r6, 0x1, 0x0, &(0x7f0000000040)=[{0xffffffffffffedc7, 0xfffffffffffffff9}]}) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0xffffffff, 0x81, 0x401, 0x7}, 0x9, 0x1, 0x0, 0xa6da, 0x0, 0x9}}) 1m20.083647804s ago: executing program 1 (id=3060): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x8, 0x1, 0x7ff}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0xc, 0x59, "a5add5e3f447dc2dfab36341086fa9eb94e6d3d116f34ce238a844d0a7410b1c88f9e38aa3c777412fc95d458c4078d7681a1acb2e4484178ca73cf050c47e4b1162a7266825a37e48991d74b15713dbdca5b70a16ef826276"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x6}}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000002c00)=@buf) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000080)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x22, 0x1d, {0x1d, 0x31, "d5df8eed22f0c5a1bf0947d75298f3a003e9750d4fc1b7ca413c4e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000300)={0x34, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x58}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x9e0d}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "0f1b9471b911a4b9580c72d48899f8aded09ee5a0e38deb5f7aa31e8c7804d046d90a63a540614aa0478ef48bde43a"}}) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x4180, 0x0) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0136277567c902049c348f0125bd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) 1m3.444090375s ago: executing program 34 (id=3060): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x8, 0x1, 0x7ff}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0xc, 0x59, "a5add5e3f447dc2dfab36341086fa9eb94e6d3d116f34ce238a844d0a7410b1c88f9e38aa3c777412fc95d458c4078d7681a1acb2e4484178ca73cf050c47e4b1162a7266825a37e48991d74b15713dbdca5b70a16ef826276"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}, 0x0, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x6}}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000002c00)=@buf) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000080)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x22, 0x1d, {0x1d, 0x31, "d5df8eed22f0c5a1bf0947d75298f3a003e9750d4fc1b7ca413c4e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000300)={0x34, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x58}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x9e0d}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "0f1b9471b911a4b9580c72d48899f8aded09ee5a0e38deb5f7aa31e8c7804d046d90a63a540614aa0478ef48bde43a"}}) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x4180, 0x0) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0136277567c902049c348f0125bd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) 30.281066587s ago: executing program 0 (id=3112): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x119, 0xc}], 0x10}}], 0x1, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 23.523884167s ago: executing program 5 (id=3116): syz_open_procfs(0x0, 0x0) timer_create(0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x7, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.489623806s ago: executing program 0 (id=3117): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$l2tp(0x2, 0x2, 0x73) socket(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 20.357282728s ago: executing program 6 (id=3120): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc000080) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x1b, 0x0}, 0x2}], 0x88, 0x20, 0x0) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, 0x0) 18.449299598s ago: executing program 6 (id=3121): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) gettid() ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCRMFF(r3, 0x801c581f, 0x0) socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a"], 0xf0}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000780), 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 16.989101988s ago: executing program 5 (id=3122): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) 16.506677883s ago: executing program 2 (id=3123): syz_emit_ethernet(0x11, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@llc={0x4, {@llc={0xc2, 0x0, '\b'}}}}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x9d) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 16.44798974s ago: executing program 0 (id=3124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18dcdf731f00000000000023f9a01b29b3793b00", @ANYRES32, @ANYBLOB="0000000000000000b7050000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000050000009500000000000000e8e31b5ff83e5f41845021f0a47b85f685ea536300196b8ec0b8e00c5d6cec71901f66c3396f7aeecc4c3f244daf9b79b9f5a6f98215981d2a7e95acf930095b6e0f6d3fb1f3aea9f20225292c356b9f5a9f8deed26e5ea4d27277c3874364e90fd041cdbf45a62ec8bc1912947ab437b1fc63e4"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.398896014s ago: executing program 5 (id=3125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYRES64=r1, @ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB="b849c3baed17e3c4ca460b599b65e406ad7bd6992bccd9bad45d44e26360cfd39bfa8c67f0f24433957073927de39090807c05a0a7477b4f8ad44708ee6125f38026136802001ca3f8a5ecb87328520b26d5fb76fb6fd7aad61f1d575df27db68d692672aff997b79eb73aab13717e9cbf96a55103238974350aa4e1a5955e3cb52e7a91a28dea3d4603cb7d48944ebfa7992cb27219cf2e988bbdd60be98abf36a878f2b329f48e2a577f3991bca5c4b6d4e365a8282c5ca4266917f54d0484b3751c8e0a6366db33b9abb2a587420820340f6881eb", @ANYRES32, @ANYRESHEX, @ANYRES32=r1, @ANYBLOB="7469b26100883bb50b4f1639741e4ab10cc7a2ef8a8ecce38d2e3d4c8a52d14acb1c2cf3423c9dc076368952c7fc91db127a69b7c28d90be8fe48dbbf95a48e0"], 0x24}, 0x1, 0x0, 0x0, 0x404d}, 0x8090) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18dcdf731f00000000000023f9a01b29b3793b00", @ANYRES32, @ANYBLOB="0000000000000000b7050000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000050000009500000000000000e8e31b5ff83e5f41845021f0a47b85f685ea536300196b8ec0b8e00c5d6cec71901f66c3396f7aeecc4c3f244daf9b79b9f5a6f98215981d2a7e95acf930095b6e0f6d3fb1f3aea9f20225292c356b9f5a9f8deed26e5ea4d27277c3874364e90fd041cdbf45a62ec8bc1912947ab437b1fc63e4"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.915461501s ago: executing program 0 (id=3126): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x119, 0xc}], 0x10}}], 0x1, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.160838996s ago: executing program 6 (id=3127): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 13.626510332s ago: executing program 5 (id=3128): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='maps\x00') read$msr(r0, &(0x7f0000019640)=""/102395, 0x18ffb) r1 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r1, 0x0, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) semget(0x1, 0x1, 0x400) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000200)={0x18, r6, 0x1, 0x0, &(0x7f0000000040)=[{0xffffffffffffedc7, 0xfffffffffffffff9}]}) 12.326519243s ago: executing program 2 (id=3129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[], 0x1e) 11.71828997s ago: executing program 6 (id=3130): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='maps\x00') read$msr(r0, &(0x7f0000019640)=""/102395, 0x18ffb) r1 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r1, 0x0, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) semop(0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) semget(0x1, 0x1, 0x400) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000200)={0x18, r6, 0x1, 0x0, &(0x7f0000000040)=[{0xffffffffffffedc7, 0xfffffffffffffff9}]}) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000180)={0x1, @win={{0xffffffff, 0x81, 0x401, 0x7}, 0x9, 0x1, 0x0, 0xa6da, 0x0, 0x9}}) 10.26188688s ago: executing program 5 (id=3131): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='maps\x00') read$msr(r0, &(0x7f0000019640)=""/102395, 0x18ffb) r1 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r1, 0x0, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6.677302596s ago: executing program 6 (id=3132): fanotify_init(0x0, 0xc0d9e5268d9d54da) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002000000085"], &(0x7f0000000380)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x31df6826721218db) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x2800, 0x0) splice(r7, &(0x7f0000000040)=0x7fffffffffffffff, r6, 0x0, 0x9, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) 6.672310358s ago: executing program 2 (id=3133): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$l2tp(0x2, 0x2, 0x73) socket(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 6.219924495s ago: executing program 2 (id=3134): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) 5.110832549s ago: executing program 2 (id=3135): kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0f", 0x9d, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb77519", 0x40, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.65623654s ago: executing program 0 (id=3136): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="85100000040000009500000000000000180000000000000000000000000000009500000000000000851000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) getdents64(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)={0x20, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0x4, 0x14}]}, 0x20}], 0x1}, 0x0) io_setup(0x81, &(0x7f0000001100)=0x0) r4 = syz_ublk_setup_io_uring(0x6114, &(0x7f0000000180)={0x0, 0xde24, 0x20, 0x3, 0x319, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) r5 = io_uring_setup(0x6d45, &(0x7f0000000500)={0x0, 0xa640, 0x800, 0x1, 0x3e3, 0x0, r4}) r6 = syz_io_uring_setup(0x2afc, &(0x7f0000000900)={0x0, 0xe3f9, 0x11090, 0x3, 0x124, 0x0, r5}, &(0x7f00000003c0), &(0x7f0000000140), &(0x7f0000000580)) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000980)={0x40, r8, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x77}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x60, 0x6c}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x69ac}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x28, 0xc, 0x31}, 0x2c) sendmsg$inet(r0, &(0x7f0000001500)={&(0x7f0000000000)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000080)="afea71239b31cfb7c39490589d9acfaf43c102e2057b55cf0eda177c0336d941ec67e7309c95fd9080ee9c319bdc4e0fac0314fc3787b7b7338488a6f6d5359f48820399ea4f588460eca4e6396d3fca2dfb00d879d230746d6400519b1a6fd56576d45b9f5ac37d7975e5edddef5270549c5742fe5aa4abad71d228b0b021ebda08da1f6010bbcaf5bfa4ee9f076fc8bc75bf31b75e82d77423bf4827a96fd1538c2b64a7", 0xa5}, {&(0x7f0000000200)="400608ab97a5c577c56a42a72793123c9d335851b4f694f5f58297973d207f0f05b0d1325e30559849a11e64539d281368ac66a6a185a2600796d7938d7fb05d8098d41a9564ec8316014e2ae0e58a08006be9480fc0d3346238dfd27855245b921384c1f01a728b58b43a402c463ebaf8e0f959893aca6d544f703158c69605fcb47311bd100e9c6cebe57e", 0x8c}, {&(0x7f00000004c0)="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", 0x1000}], 0x3}, 0x4040000) 1.423539181s ago: executing program 5 (id=3137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYRES64=r1, @ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB="b849c3baed17e3c4ca460b599b65e406ad7bd6992bccd9bad45d44e26360cfd39bfa8c67f0f24433957073927de39090807c05a0a7477b4f8ad44708ee6125f38026136802001ca3f8a5ecb87328520b26d5fb76fb6fd7aad61f1d575df27db68d692672aff997b79eb73aab13717e9cbf96a55103238974350aa4e1a5955e3cb52e7a91a28dea3d4603cb7d48944ebfa7992cb27219cf2e988bbdd60be98abf36a878f2b329f48e2a577f3991bca5c4b6d4e365a8282c5ca4266917f54d0484b3751c8e0a6366db33b9abb2a587420820340f6881eb", @ANYRES32, @ANYRESHEX, @ANYRES32=r1, @ANYBLOB="7469b26100883bb50b4f1639741e4ab10cc7a2ef8a8ecce38d2e3d4c8a52d14acb1c2cf3423c9dc076368952c7fc91db127a69b7c28d90be8fe48dbbf95a48e0"], 0x24}, 0x1, 0x0, 0x0, 0x404d}, 0x8090) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket(0x40000000015, 0x805, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18dcdf731f00000000000023f9a01b29b3793b00", @ANYRES32, @ANYBLOB="0000000000000000b7050000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000050000009500000000000000e8e31b5ff83e5f41845021f0a47b85f685ea536300196b8ec0b8e00c5d6cec71901f66c3396f7aeecc4c3f244daf9b79b9f5a6f98215981d2a7e95acf930095b6e0f6d3fb1f3aea9f20225292c356b9f5a9f8deed26e5ea4d27277c3874364e90fd041cdbf45a62ec8bc1912947ab437b1fc63e4"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.267739059s ago: executing program 0 (id=3138): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000000c0)={r3, 0x160}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2000841) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000140)={0x6c, @private=0xa010101, 0x4e24, 0x4, 'sh\x00', 0x2, 0xffffff83, 0x61}, 0x2c) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x6) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) chroot(&(0x7f0000000200)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xe}}, './file0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') accept4$nfc_llcp(r8, &(0x7f0000000240), &(0x7f00000002c0)=0x60, 0x800) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000800)={{r4}, "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"}) fdatasync(0xffffffffffffffff) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000940)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000480)=ANY=[@ANYRES16=r9, @ANYBLOB="050626bd0c009900169700005d00000004008700", @ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6], 0x24}, 0x1, 0x0, 0x0, 0x240088d8}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000808}, 0x4004814) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) 1.266755114s ago: executing program 2 (id=3139): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="85100000040000009500000000000000180000000000000000000000000000009500000000000000851000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) getdents64(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)={0x20, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0x4, 0x14}]}, 0x20}], 0x1}, 0x0) io_setup(0x81, &(0x7f0000001100)=0x0) syz_ublk_setup_io_uring(0x6114, &(0x7f0000000180)={0x0, 0xde24, 0x20, 0x3, 0x319, 0x0, r1}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) r5 = syz_io_uring_setup(0x2afc, &(0x7f0000000900)={0x0, 0xe3f9, 0x11090, 0x3, 0x124}, &(0x7f00000003c0), &(0x7f0000000140), &(0x7f0000000580)) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000980)={0x40, r7, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x77}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x60, 0x6c}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x69ac}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x28, 0xc, 0x31}, 0x2c) sendmsg$inet(r0, &(0x7f0000001500)={&(0x7f0000000000)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000080)="afea71239b31cfb7c39490589d9acfaf43c102e2057b55cf0eda177c0336d941ec67e7309c95fd9080ee9c319bdc4e0fac0314fc3787b7b7338488a6f6d5359f48820399ea4f588460eca4e6396d3fca2dfb00d879d230746d6400519b1a6fd56576d45b9f5ac37d7975e5edddef5270549c5742fe5aa4abad71d228b0b021ebda08da1f6010bbcaf5bfa4ee9f076fc8bc75bf31b75e82d77423bf4827a96fd1538c2b64a7", 0xa5}, {&(0x7f0000000200)="400608ab97a5c577c56a42a72793123c9d335851b4f694f5f58297973d207f0f05b0d1325e30559849a11e64539d281368ac66a6a185a2600796d7938d7fb05d8098d41a9564ec8316014e2ae0e58a08006be9480fc0d3346238dfd27855245b921384c1f01a728b58b43a402c463ebaf8e0f959893aca6d544f703158c69605fcb47311bd100e9c6cebe57e", 0x8c}, {&(0x7f00000004c0)="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", 0x1000}], 0x3}, 0x4040000) 0s ago: executing program 6 (id=3140): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) kernel console output (not intermixed with test programs): z [ 1019.465786][ T8461] usb 7-1: Manufacturer: syz [ 1019.465793][ T8461] usb 7-1: SerialNumber: syz [ 1019.470256][ T8461] usb 7-1: config 0 descriptor?? [ 1019.822318][ T8461] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 034 [ 1020.703116][ T5871] usb 7-1: USB disconnect, device number 34 [ 1021.720652][ T8461] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1021.873210][ T8461] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.875332][ T8461] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1021.875362][ T8461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1021.875382][ T8461] usb 2-1: Product: syz [ 1021.875396][ T8461] usb 2-1: Manufacturer: syz [ 1021.875408][ T8461] usb 2-1: SerialNumber: syz [ 1021.878271][ T8461] usb 2-1: config 0 descriptor?? [ 1022.177331][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'. [ 1024.510583][ T8461] usb 2-1: USB disconnect, device number 41 [ 1025.610633][ T5593] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1025.760616][ T5593] usb 6-1: Using ep0 maxpacket: 32 [ 1025.768713][ T5593] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1025.768751][ T5593] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.768770][ T5593] usb 6-1: Product: syz [ 1025.768783][ T5593] usb 6-1: Manufacturer: syz [ 1025.768797][ T5593] usb 6-1: SerialNumber: syz [ 1025.834643][ T5593] usb 6-1: config 0 descriptor?? [ 1026.099682][ T5593] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 032 [ 1028.390277][T12435] i2c i2c-1: failure sending STOP [ 1028.438629][ T5593] usb 6-1: USB disconnect, device number 32 [ 1030.171654][ T5593] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1031.244902][ T5593] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.247805][ T5593] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1031.247834][ T5593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1031.247856][ T5593] usb 1-1: Product: syz [ 1031.247870][ T5593] usb 1-1: Manufacturer: syz [ 1031.247885][ T5593] usb 1-1: SerialNumber: syz [ 1031.277495][ T1291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1031.285323][ T5593] usb 1-1: config 0 descriptor?? [ 1033.007147][ T31] usb 1-1: USB disconnect, device number 25 [ 1041.805920][ T8608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1047.250652][ T1291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1047.892344][ T1291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1049.155355][T12605] input: syz0 as /devices/virtual/input/input40 [ 1049.196382][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1050.131382][ T31] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1050.282698][ T31] usb 2-1: config 0 has no interfaces? [ 1050.286835][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1050.286853][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.286864][ T31] usb 2-1: Product: syz [ 1050.286871][ T31] usb 2-1: Manufacturer: syz [ 1050.286878][ T31] usb 2-1: SerialNumber: syz [ 1050.341702][ T31] usb 2-1: config 0 descriptor?? [ 1050.889232][ T8877] usb 2-1: USB disconnect, device number 42 [ 1054.611361][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.611735][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.816272][T12654] tipc: New replicast peer: 0.0.0.0 [ 1057.843939][T12654] tipc: Enabled bearer , priority 10 [ 1060.820736][ T8877] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1061.910608][ T8877] usb 6-1: Using ep0 maxpacket: 16 [ 1061.996061][ T8877] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1061.996098][ T8877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1062.025567][ T8877] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1062.025597][ T8877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.025616][ T8877] usb 6-1: Product: syz [ 1062.025629][ T8877] usb 6-1: Manufacturer: syz [ 1062.025642][ T8877] usb 6-1: SerialNumber: syz [ 1062.033613][ T8877] usb 6-1: config 0 descriptor?? [ 1062.078256][ T8877] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1062.078291][ T8877] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1062.746215][T12676] tipc: Started in network mode [ 1062.746391][T12676] tipc: Node identity 7f000001, cluster identity 4711 [ 1062.755440][T12676] tipc: New replicast peer: 0.0.0.0 [ 1062.762520][T12676] tipc: Enabled bearer , priority 10 [ 1062.811884][T12676] bridge0: entered promiscuous mode [ 1062.812077][T12676] bridge0: entered allmulticast mode [ 1064.547028][ T31] tipc: Node number set to 2130706433 [ 1064.550157][ T8877] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1064.553240][ T8877] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1064.577538][ T8877] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1064.577758][ T8877] em28xx 6-1:0.0: No AC97 audio processor [ 1064.767473][ T8877] usb 6-1: USB disconnect, device number 33 [ 1065.528677][ T8877] em28xx 6-1:0.0: Disconnecting em28xx [ 1066.101942][ T1498] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1066.295154][ T8877] em28xx 6-1:0.0: Freeing device [ 1067.570563][ T5720] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1071.234339][ T5720] usb 1-1: unable to read config index 0 descriptor/all [ 1071.234384][ T5720] usb 1-1: can't read configurations, error -71 [ 1072.660418][T12712] input: syz0 as /devices/virtual/input/input41 [ 1073.020841][ T31] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1073.771918][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.772121][ T31] usb 6-1: config 0 has no interfaces? [ 1074.006828][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1074.006859][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.006879][ T31] usb 6-1: Product: syz [ 1074.006893][ T31] usb 6-1: Manufacturer: syz [ 1074.006907][ T31] usb 6-1: SerialNumber: syz [ 1074.022238][ T31] usb 6-1: config 0 descriptor?? [ 1074.314738][ T31] usb 6-1: USB disconnect, device number 34 [ 1077.033311][ T5720] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1077.181665][ T5720] usb 7-1: Using ep0 maxpacket: 32 [ 1077.183893][ T5720] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.183917][ T5720] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1077.183953][ T5720] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1077.183977][ T5720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.241156][ T5720] usb 7-1: config 0 descriptor?? [ 1077.534337][ T5720] usb 7-1: USB disconnect, device number 35 [ 1079.253467][ T8608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1079.253551][ T8608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1080.638858][T12758] input: syz0 as /devices/virtual/input/input42 [ 1080.940611][ T8877] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1081.103140][ T8877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.103168][ T8877] usb 2-1: config 0 has no interfaces? [ 1081.106319][ T8877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1081.106348][ T8877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.106368][ T8877] usb 2-1: Product: syz [ 1081.106382][ T8877] usb 2-1: Manufacturer: syz [ 1081.106397][ T8877] usb 2-1: SerialNumber: syz [ 1081.159732][ T8877] usb 2-1: config 0 descriptor?? [ 1081.701324][ T8877] usb 2-1: USB disconnect, device number 43 [ 1081.810651][ T8608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1082.230672][ T8877] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1082.390565][ T8877] usb 1-1: Using ep0 maxpacket: 32 [ 1082.392860][ T8877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.392891][ T8877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.392928][ T8877] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1082.392951][ T8877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.396322][ T8877] usb 1-1: config 0 descriptor?? [ 1082.450614][ T8877] hub 1-1:0.0: USB hub found [ 1082.714845][ T8877] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1082.730020][ T8877] usbhid 1-1:0.0: can't add hid device: -71 [ 1082.730138][ T8877] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1082.761475][ T8877] usb 1-1: USB disconnect, device number 28 [ 1085.809331][T12819] input: syz0 as /devices/virtual/input/input43 [ 1086.090662][ T8877] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1086.252575][ T8877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.252611][ T8877] usb 2-1: config 0 has no interfaces? [ 1086.256974][ T8877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1086.257003][ T8877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.257023][ T8877] usb 2-1: Product: syz [ 1086.257036][ T8877] usb 2-1: Manufacturer: syz [ 1086.257049][ T8877] usb 2-1: SerialNumber: syz [ 1086.309252][ T8877] usb 2-1: config 0 descriptor?? [ 1086.519295][ T5720] usb 2-1: USB disconnect, device number 44 [ 1087.021286][ T5720] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1087.171875][ T5720] usb 6-1: Using ep0 maxpacket: 32 [ 1087.173804][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.173837][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.173871][ T5720] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1087.173884][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.177396][ T5720] usb 6-1: config 0 descriptor?? [ 1087.217597][ T5720] hub 6-1:0.0: USB hub found [ 1087.483023][ T5720] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1087.494112][ T5720] usbhid 6-1:0.0: can't add hid device: -71 [ 1087.494227][ T5720] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1087.512327][ T5720] usb 6-1: USB disconnect, device number 35 [ 1089.894283][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1999'. [ 1096.854544][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2014'. [ 1099.467372][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2029'. [ 1099.646849][T12960] bridge0: entered promiscuous mode [ 1099.647019][T12960] bridge0: entered allmulticast mode [ 1102.013442][T12969] bridge0: entered promiscuous mode [ 1102.013549][T12969] bridge0: entered allmulticast mode [ 1102.930604][ T1570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1104.222428][T12974] Invalid source name [ 1109.856383][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2043'. [ 1110.103229][T13008] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1111.451127][T13017] bridge2: entered promiscuous mode [ 1111.451170][T13017] bridge2: entered allmulticast mode [ 1111.894989][T13023] Invalid source name [ 1113.175841][ T1570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1114.864588][ T1570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1114.864723][ T1570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1115.754822][T13039] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1116.662553][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.662621][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.048386][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'. [ 1122.484705][T13087] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2068'. [ 1124.182358][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 1124.640585][T13113] binder: BINDER_SET_CONTEXT_MGR already set [ 1124.640642][T13113] binder: 13106:13113 ioctl 4018620d 200000000040 returned -16 [ 1130.392915][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1131.523610][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2091'. [ 1131.781333][T13161] overlayfs: failed to resolve './file1': -2 [ 1132.858783][T13163] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2093'. [ 1135.147152][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2104'. [ 1136.755771][T13212] bridge2: entered promiscuous mode [ 1136.755823][T13212] bridge2: entered allmulticast mode [ 1138.771072][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1141.688819][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1141.772712][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1141.776077][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1141.777676][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1141.792318][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1142.564248][T13280] bridge0: entered promiscuous mode [ 1142.564423][T13280] bridge0: entered allmulticast mode [ 1144.217186][ T5615] Bluetooth: hci0: command tx timeout [ 1146.353693][ T5615] Bluetooth: hci0: command tx timeout [ 1147.344080][T13296] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5609] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13296] [ 1147.731927][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1147.732371][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1147.732631][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1148.370631][ T5615] Bluetooth: hci0: command tx timeout [ 1148.698072][ T9670] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.456242][ T5615] Bluetooth: hci0: command tx timeout [ 1152.673250][ T9670] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.176977][ T5720] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1154.177151][ T5593] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1155.020732][ T5593] usb 2-1: Using ep0 maxpacket: 32 [ 1155.024674][ T5593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.024706][ T5593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.024956][ T5593] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1155.024979][ T5593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.025373][ T5720] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.025420][ T5720] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1155.026080][ T9670] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.058707][ T5720] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1155.058737][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.058755][ T5720] usb 6-1: Product: syz [ 1155.058768][ T5720] usb 6-1: Manufacturer: syz [ 1155.058781][ T5720] usb 6-1: SerialNumber: syz [ 1155.166911][ T5593] usb 2-1: config 0 descriptor?? [ 1155.227367][ T5593] hub 2-1:0.0: USB hub found [ 1156.382981][ T5720] cdc_ncm 6-1:1.0: bind() failure [ 1156.383185][ T5593] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1156.503664][ T5720] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1156.503692][ T5720] cdc_ncm 6-1:1.1: bind() failure [ 1156.563338][ T5593] usbhid 2-1:0.0: can't add hid device: -71 [ 1156.563460][ T5593] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1156.667685][ T5720] usb 6-1: USB disconnect, device number 36 [ 1156.690621][ T5593] usb 2-1: USB disconnect, device number 45 [ 1156.943170][ T9670] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.862040][ T1570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1164.527696][T13377] tipc: Enabling of bearer rejected, already enabled [ 1164.870827][ T9670] bridge_slave_1: left allmulticast mode [ 1164.870860][ T9670] bridge_slave_1: left promiscuous mode [ 1164.871672][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.635571][ T9670] bridge_slave_0: left allmulticast mode [ 1165.635595][ T9670] bridge_slave_0: left promiscuous mode [ 1166.662129][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.081011][ T9670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.233333][ T9670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.980670][ T9670] bond0 (unregistering): Released all slaves [ 1171.036432][T13396] tipc: Enabling of bearer rejected, already enabled [ 1173.165938][T13265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.166045][T13265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.166272][T13265] bridge_slave_0: entered allmulticast mode [ 1173.169580][T13265] bridge_slave_0: entered promiscuous mode [ 1173.175253][T13265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.175464][T13265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.175647][T13265] bridge_slave_1: entered allmulticast mode [ 1173.197289][ T1570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1173.448377][T13265] bridge_slave_1: entered promiscuous mode [ 1173.849110][T13265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.861189][T13265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.925614][T13265] team0: Port device team_slave_0 added [ 1173.928958][T13265] team0: Port device team_slave_1 added [ 1173.962583][T13265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.962599][T13265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.962621][T13265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.964739][T13265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.964753][T13265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.964775][T13265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.023181][T13265] hsr_slave_0: entered promiscuous mode [ 1177.026090][T13265] hsr_slave_1: entered promiscuous mode [ 1177.028578][T13265] debugfs: 'hsr0' already exists in 'hsr' [ 1177.028603][T13265] Cannot create hsr debugfs directory [ 1177.245815][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.246629][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.311635][ T5266] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1178.505620][T13463] binder: BINDER_SET_CONTEXT_MGR already set [ 1178.505675][T13463] binder: 13460:13463 ioctl 4018620d 200000000040 returned -16 [ 1179.463077][ T1059] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1179.463201][ T1059] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1182.803335][T13492] overlayfs: failed to resolve './file1': -2 [ 1183.750748][ T9670] hsr_slave_0: left promiscuous mode [ 1183.814781][ T9670] hsr_slave_1: left promiscuous mode [ 1183.817337][ T9670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.864744][ T9670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.417297][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 1188.222016][ T9670] team0 (unregistering): Port device team_slave_1 removed [ 1188.302288][ T9670] team0 (unregistering): Port device team_slave_0 removed [ 1188.685382][ T5266] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1193.524079][T13563] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1195.090764][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1197.692730][T13265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1198.308738][T13265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1198.309861][T13265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1198.401265][T13265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1198.406127][T13265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1198.467718][T13265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1198.480017][T13265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1198.548482][T13265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1199.008478][T13265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.175114][T13265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.206448][ T1570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.206524][ T1570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.287424][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.287546][ T9670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.277866][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1204.311671][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1204.314038][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1204.335033][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1204.336267][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1206.459334][ T5615] Bluetooth: hci4: command tx timeout [ 1207.252024][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1209.435831][ T5615] Bluetooth: hci4: command tx timeout [ 1211.037412][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2194'. [ 1211.490559][ T5615] Bluetooth: hci4: command tx timeout [ 1212.427456][T13731] Invalid source name [ 1215.580913][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1215.581028][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1215.583695][ T5615] Bluetooth: hci4: command tx timeout [ 1215.936335][T13643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.936537][T13643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.936709][T13643] bridge_slave_0: entered allmulticast mode [ 1215.939620][T13643] bridge_slave_0: entered promiscuous mode [ 1215.943270][T13643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.943477][T13643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.943644][T13643] bridge_slave_1: entered allmulticast mode [ 1215.946422][T13643] bridge_slave_1: entered promiscuous mode [ 1216.052616][T13643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.083059][T13643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.138386][T13643] team0: Port device team_slave_0 added [ 1216.154006][T13643] team0: Port device team_slave_1 added [ 1216.207148][T13643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.207164][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.207191][T13643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.209706][T13643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.209719][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.209746][T13643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.191289][T13643] hsr_slave_0: entered promiscuous mode [ 1218.196919][T13643] hsr_slave_1: entered promiscuous mode [ 1218.212171][T13643] debugfs: 'hsr0' already exists in 'hsr' [ 1218.212198][T13643] Cannot create hsr debugfs directory [ 1218.893093][T13339] IPVS: starting estimator thread 0... [ 1219.013064][T13760] IPVS: using max 9 ests per chain, 21600 per kthread [ 1219.864871][ T1399] bridge_slave_1: left allmulticast mode [ 1219.864905][ T1399] bridge_slave_1: left promiscuous mode [ 1219.866328][ T1399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.249907][ T1399] bridge_slave_0: left allmulticast mode [ 1220.249939][ T1399] bridge_slave_0: left promiscuous mode [ 1220.250193][ T1399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.401507][ T1399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1222.493139][ T1399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.642809][ T1399] bond0 (unregistering): Released all slaves [ 1223.811585][ T5266] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1226.579270][T13824] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1227.520491][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1229.260747][ T1399] hsr_slave_0: left promiscuous mode [ 1229.301306][ T1399] hsr_slave_1: left promiscuous mode [ 1229.302339][ T1399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1229.356901][ T1399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.269113][T13863] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1231.269748][T13863] overlayfs: overlapping lowerdir path [ 1236.281266][ T1399] team0 (unregistering): Port device team_slave_1 removed [ 1236.344505][ T1399] team0 (unregistering): Port device team_slave_0 removed [ 1236.542814][ T5266] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1238.616881][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.616952][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.406872][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1247.586284][T13643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1247.758816][T13643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1247.760218][T13643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1248.260328][ T1059] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1248.260339][ T1498] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1248.346826][T13643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1248.350132][T13643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1248.487294][T13643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1248.488341][T13643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1248.618608][T13643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1248.888879][T13643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.061224][T13643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.108792][T13985] overlayfs: failed to resolve './file1': -2 [ 1250.114820][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.116555][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.148640][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.148713][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1251.276591][T13643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.362188][T13643] veth0_vlan: entered promiscuous mode [ 1252.441536][T13643] veth1_vlan: entered promiscuous mode [ 1252.584578][T13643] veth0_macvtap: entered promiscuous mode [ 1252.599344][T13643] veth1_macvtap: entered promiscuous mode [ 1252.627043][T13643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.648527][T13643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.688061][ T8608] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.688910][ T8608] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.725987][ T8608] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.726921][ T8608] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.076915][ T1498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.076936][ T1498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.191964][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.191984][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.026790][ T1498] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1263.398800][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1263.413132][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1263.418941][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1263.419997][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1263.431881][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1263.883584][T14054] tipc: New replicast peer: 0.0.0.0 [ 1263.883942][T14054] tipc: Enabled bearer , priority 10 [ 1267.304295][ T5616] Bluetooth: hci0: command tx timeout [ 1269.657632][ T5616] Bluetooth: hci0: command tx timeout [ 1270.355249][T14079] tipc: Enabling of bearer rejected, already enabled [ 1271.485692][T14043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.485863][T14043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.486031][T14043] bridge_slave_0: entered allmulticast mode [ 1271.488671][T14043] bridge_slave_0: entered promiscuous mode [ 1271.492572][T14043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.492755][T14043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.493256][T14043] bridge_slave_1: entered allmulticast mode [ 1271.495892][T14043] bridge_slave_1: entered promiscuous mode [ 1271.551632][T14043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.555886][T14043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.602579][T14043] team0: Port device team_slave_0 added [ 1271.606134][T14043] team0: Port device team_slave_1 added [ 1271.647193][T14043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.647209][T14043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.647236][T14043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.649688][T14043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.649702][T14043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.649728][T14043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.888729][T14043] hsr_slave_0: entered promiscuous mode [ 1271.900926][T14043] hsr_slave_1: entered promiscuous mode [ 1271.902017][T14043] debugfs: 'hsr0' already exists in 'hsr' [ 1271.902055][T14043] Cannot create hsr debugfs directory [ 1272.289828][ T5616] Bluetooth: hci0: command tx timeout [ 1274.343382][ T5616] Bluetooth: hci0: command tx timeout [ 1274.408995][T14043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.480591][T14102] bridge4: entered promiscuous mode [ 1277.480622][T14102] bridge4: entered allmulticast mode [ 1278.523436][T14113] Mount JFS Failure: -5 [ 1278.941753][ T1442] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1280.210817][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1280.211000][ T8608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1281.466819][T14043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.898216][T14043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.478954][T14043] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.253673][ T1399] bridge_slave_1: left allmulticast mode [ 1287.253709][ T1399] bridge_slave_1: left promiscuous mode [ 1287.254003][ T1399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.348768][ T1399] bridge_slave_0: left allmulticast mode [ 1287.348800][ T1399] bridge_slave_0: left promiscuous mode [ 1287.349045][ T1399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.054831][ T1399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1289.100595][T14193] hub 8-0:1.0: USB hub found [ 1289.100914][T14193] hub 8-0:1.0: 1 port detected [ 1289.133316][ T1399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1289.176999][ T1399] bond0 (unregistering): Released all slaves [ 1289.672350][T14043] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1289.748141][T14043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1289.749468][T14043] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1289.845667][T14043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1289.857603][T14043] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1289.906173][T14043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1292.095314][T14043] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1292.139873][T14043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1294.839378][T14043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.897335][T14043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.003102][T14043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1295.003127][T14043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1295.158121][ T1291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.158258][ T1291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.160602][ T1291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.160726][ T1291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.208040][T14240] Invalid source name [ 1298.542197][T14246] tipc: New replicast peer: 0.0.0.0 [ 1298.542570][T14246] tipc: Enabled bearer , priority 10 [ 1299.564736][ T1291] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1299.865450][ T5871] tipc: Node number set to 1146406833 [ 1300.054057][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.054129][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.502882][ T1399] hsr_slave_0: left promiscuous mode [ 1302.563020][T14261] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1303.054818][T14261] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1303.058578][T14261] overlayfs: failed to look up (tracing) for ino (-66) [ 1304.502913][ T1399] hsr_slave_1: left promiscuous mode [ 1304.503961][ T1399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1304.503987][ T1399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.534067][ T1399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1304.534094][ T1399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.594193][ T1399] veth1_macvtap: left promiscuous mode [ 1304.594259][ T1399] veth0_macvtap: left promiscuous mode [ 1304.594393][ T1399] veth1_vlan: left promiscuous mode [ 1304.594480][ T1399] veth0_vlan: left promiscuous mode [ 1305.271145][ T1399] team0 (unregistering): Port device team_slave_1 removed [ 1305.301071][ T1399] team0 (unregistering): Port device team_slave_0 removed [ 1305.444941][T13339] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1305.477054][T14257] bridge4: entered promiscuous mode [ 1305.477084][T14257] bridge4: entered allmulticast mode [ 1305.720526][T13339] usb 6-1: Using ep0 maxpacket: 32 [ 1305.722705][T13339] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.722781][T13339] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1305.722830][T13339] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1305.722850][T13339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.778505][T13339] usb 6-1: config 0 descriptor?? [ 1305.850517][ T5729] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1305.993207][T13339] usb 6-1: USB disconnect, device number 37 [ 1305.999385][T14043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.070600][ T5729] usb 1-1: Using ep0 maxpacket: 32 [ 1306.072407][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.072436][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.072468][ T5729] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1306.072481][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.075966][ T5729] usb 1-1: config 0 descriptor?? [ 1306.145783][T14043] veth0_vlan: entered promiscuous mode [ 1306.159215][T14043] veth1_vlan: entered promiscuous mode [ 1306.181017][ T5729] hub 1-1:0.0: USB hub found [ 1306.300241][ T5729] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1306.311739][ T5729] usbhid 1-1:0.0: can't add hid device: -71 [ 1306.311860][ T5729] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1306.357101][ T8877] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1306.382830][T14043] veth0_macvtap: entered promiscuous mode [ 1306.391543][ T5729] usb 1-1: USB disconnect, device number 29 [ 1306.424647][T14043] veth1_macvtap: entered promiscuous mode [ 1306.445032][T14043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.460233][T14043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.526461][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.526725][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.526761][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.526793][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.557019][ T8877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.557074][ T8877] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1306.557096][ T8877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.613927][ T8877] usb 7-1: config 0 descriptor?? [ 1306.634910][ T8877] pwc: Askey VC010 type 2 USB webcam detected. [ 1307.078143][ T8877] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1307.193429][ T8877] pwc: recv_control_msg error -32 req 02 val 2700 [ 1307.194530][ T8877] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1307.195404][ T8877] pwc: recv_control_msg error -32 req 04 val 1000 [ 1307.196372][ T8877] pwc: recv_control_msg error -32 req 04 val 1300 [ 1307.197191][ T8877] pwc: recv_control_msg error -32 req 04 val 1400 [ 1307.197843][ T8877] pwc: recv_control_msg error -32 req 02 val 2000 [ 1307.198977][ T8877] pwc: recv_control_msg error -32 req 02 val 2100 [ 1307.203775][ T8877] pwc: recv_control_msg error -32 req 04 val 1500 [ 1307.204775][ T8877] pwc: recv_control_msg error -32 req 02 val 2500 [ 1307.432431][ T8877] pwc: recv_control_msg error -71 req 02 val 2600 [ 1307.445175][ T8877] pwc: recv_control_msg error -71 req 02 val 2900 [ 1307.448333][ T8877] pwc: recv_control_msg error -71 req 02 val 2800 [ 1307.449028][ T8877] pwc: recv_control_msg error -71 req 04 val 1100 [ 1307.458132][ T8877] pwc: recv_control_msg error -71 req 04 val 1200 [ 1307.947105][T14295] Mount JFS Failure: -5 [ 1308.108907][ T1570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.108927][ T1570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.261316][T13339] IPVS: starting estimator thread 0... [ 1308.354286][T14297] IPVS: using max 8 ests per chain, 19200 per kthread [ 1309.156329][T14302] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1309.592846][T14302] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1309.593401][T14302] overlayfs: failed to look up (tracing) for ino (-66) [ 1312.563741][ T1442] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1312.563864][ T1442] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1312.563959][ T1442] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1313.198334][ T8877] pwc: Registered as video103. [ 1313.209614][ T8877] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input44 [ 1313.311027][ T8877] usb 7-1: USB disconnect, device number 36 [ 1313.854494][ T1291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.854514][ T1291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.400469][T13339] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1314.581811][T13339] usb 3-1: Using ep0 maxpacket: 32 [ 1314.585817][T13339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.585856][T13339] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1314.585892][T13339] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1314.585922][T13339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.765325][T13339] usb 3-1: config 0 descriptor?? [ 1317.002792][T13339] usb 3-1: USB disconnect, device number 30 [ 1317.468950][ T8877] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1318.490472][ T8877] usb 1-1: Using ep0 maxpacket: 32 [ 1318.494345][ T8877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.494379][ T8877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.494418][ T8877] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1318.494442][ T8877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.072680][ T8877] usb 1-1: config 0 descriptor?? [ 1319.093119][ T8877] hub 1-1:0.0: USB hub found [ 1319.477431][ T8877] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1319.514449][ T8877] usbhid 1-1:0.0: can't add hid device: -71 [ 1319.514564][ T8877] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1319.553272][ T8877] usb 1-1: USB disconnect, device number 30 [ 1320.234974][T14342] bridge2: entered promiscuous mode [ 1320.235155][T14342] bridge2: entered allmulticast mode [ 1324.713035][T14349] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1324.888656][T14349] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1324.888738][T14349] overlayfs: failed to look up (tracing) for ino (-66) [ 1331.683158][T14369] Mount JFS Failure: -5 [ 1332.790843][T13339] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1332.804063][T14386] Mount JFS Failure: -5 [ 1332.950664][T13339] usb 2-1: Using ep0 maxpacket: 32 [ 1332.957592][T13339] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.957624][T13339] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1332.957719][T13339] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1332.957756][T13339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.249344][T13339] usb 2-1: config 0 descriptor?? [ 1333.861887][ T5593] usb 2-1: USB disconnect, device number 46 [ 1335.422724][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1335.483196][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2330'. [ 1348.090414][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1348.092289][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1348.448978][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1349.100592][ T5593] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1349.801682][ T5593] usb 6-1: Using ep0 maxpacket: 32 [ 1349.803424][ T5593] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.803447][ T5593] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1349.803481][ T5593] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1349.803494][ T5593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.854629][ T5593] usb 6-1: config 0 descriptor?? [ 1350.144429][ T31] usb 6-1: USB disconnect, device number 38 [ 1350.307472][T14461] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1350.676269][T14461] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1350.676741][T14461] overlayfs: failed to look up (tracing) for ino (-66) [ 1351.721554][T14466] fuse: Bad value for 'rootmode' [ 1351.730216][ T37] audit: type=1326 audit(1779985940.029:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14464 comm="syz.1.2348" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ed1fbce59 code=0x0 [ 1351.789557][T14468] netlink: 'syz.1.2348': attribute type 1 has an invalid length. [ 1354.439219][T14487] Mount JFS Failure: -5 [ 1355.731577][T14496] Mount JFS Failure: -5 [ 1355.986351][ T5593] IPVS: starting estimator thread 0... [ 1356.079667][T14498] IPVS: using max 8 ests per chain, 19200 per kthread [ 1357.802184][ T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1358.072047][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1358.072478][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1358.154164][ T31] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1358.154359][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.154516][ T31] usb 1-1: Product: syz [ 1358.154793][ T31] usb 1-1: Manufacturer: syz [ 1358.154989][ T31] usb 1-1: SerialNumber: syz [ 1360.758648][T14516] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1360.813651][T14517] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 1361.562590][T14521] syz.6.2361 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1362.551634][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.551773][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.706254][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1362.816743][ T31] usb 1-1: USB disconnect, device number 31 [ 1363.057749][T14325] udevd[14325]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1364.620434][T14538] fuse: Bad value for 'rootmode' [ 1364.640187][ T37] audit: type=1326 audit(1779985952.939:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14537 comm="syz.1.2367" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ed1fbce59 code=0x0 [ 1364.721094][T14543] netlink: 'syz.1.2367': attribute type 1 has an invalid length. [ 1367.964099][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1368.503161][T14570] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1368.935088][T14570] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1368.935552][T14570] overlayfs: failed to look up (tracing) for ino (-66) [ 1374.112060][T13339] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1374.351000][T13339] usb 6-1: Using ep0 maxpacket: 32 [ 1374.377015][T13339] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.377042][T13339] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1374.377080][T13339] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1374.377113][T13339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.583935][T13339] usb 6-1: config 0 descriptor?? [ 1375.164398][T13339] usb 6-1: USB disconnect, device number 39 [ 1377.344445][T14605] Mount JFS Failure: -5 [ 1380.733042][T14624] Mount JFS Failure: -5 [ 1381.071251][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1381.076208][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1381.331385][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1381.717463][T14628] fuse: Bad value for 'rootmode' [ 1381.965948][T13339] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1382.310543][T13339] usb 7-1: device descriptor read/64, error -71 [ 1383.480571][T13339] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1384.367712][T13339] usb 7-1: device descriptor read/64, error -71 [ 1384.471310][T13339] usb usb7-port1: attempt power cycle [ 1384.689581][T14648] binder_alloc: 14647: binder_alloc_buf, no vma [ 1385.893561][T14657] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1387.235680][T14669] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1387.498701][T14669] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1387.499387][T14669] overlayfs: failed to look up (tracing) for ino (-66) [ 1391.203044][ T37] audit: type=1326 audit(1779985979.509:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.5.2406" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82902dce59 code=0x7ffc0000 [ 1391.203387][ T37] audit: type=1326 audit(1779985979.509:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.5.2406" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82902dce59 code=0x7ffc0000 [ 1391.204344][ T37] audit: type=1326 audit(1779985979.509:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.5.2406" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82902dce59 code=0x7ffc0000 [ 1391.204749][ T37] audit: type=1326 audit(1779985979.509:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.5.2406" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82902dce59 code=0x7ffc0000 [ 1391.205024][ T37] audit: type=1326 audit(1779985979.509:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.5.2406" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82902dce59 code=0x7ffc0000 [ 1391.205458][ T37] audit: type=1326 audit(1779985979.509:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.5.2406" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82902dce59 code=0x7ffc0000 [ 1391.205971][ T37] audit: type=1326 audit(1779985979.509:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.5.2406" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82902dce59 code=0x7ffc0000 [ 1391.209384][ T37] audit: type=1326 audit(1779985979.509:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.5.2406" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f82902dce59 code=0x7ffc0000 [ 1391.210164][ T37] audit: type=1326 audit(1779985979.509:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.5.2406" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82902dce59 code=0x7ffc0000 [ 1391.275280][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 1391.309631][ T37] audit: type=1326 audit(1779985979.609:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14681 comm="syz.5.2406" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82902dce59 code=0x7ffc0000 [ 1391.952594][T14698] fuse: Bad value for 'rootmode' [ 1392.290616][ T8461] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1392.420440][ T8461] usb 1-1: device descriptor read/64, error -71 [ 1392.771706][T14706] tipc: Started in network mode [ 1392.771888][T14706] tipc: Node identity 7f000001, cluster identity 4711 [ 1392.787408][T14706] tipc: Enabling of bearer rejected, failed to enable media [ 1392.938645][T14706] bridge3: entered promiscuous mode [ 1392.940444][T14706] bridge3: entered allmulticast mode [ 1393.950544][ T8461] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1394.080491][ T8461] usb 1-1: device descriptor read/64, error -71 [ 1394.195766][ T8461] usb usb1-port1: attempt power cycle [ 1394.530808][ T8461] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1394.551793][ T8461] usb 1-1: device descriptor read/8, error -71 [ 1394.874834][T14717] Mount JFS Failure: -5 [ 1395.110592][ T8461] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1395.231702][ T8461] usb 1-1: device descriptor read/8, error -71 [ 1395.834130][ T8461] usb usb1-port1: unable to enumerate USB device [ 1397.352825][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2427'. [ 1397.907728][T14752] fuse: Bad value for 'rootmode' [ 1398.464365][ T8461] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1398.465550][T13339] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1399.292261][ T8461] usb 1-1: device descriptor read/64, error -71 [ 1399.312910][T13339] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1399.312941][T13339] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.312962][T13339] usb 2-1: config 0 has no interface number 0 [ 1399.313005][T13339] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1399.313039][T13339] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1399.313062][T13339] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1399.313089][T13339] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1399.315053][T13339] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1399.315079][T13339] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1399.315101][T13339] usb 2-1: Product: syz [ 1399.315116][T13339] usb 2-1: SerialNumber: syz [ 1399.326924][T13339] usb 2-1: config 0 descriptor?? [ 1400.845047][ T8461] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1400.889363][T13339] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1400.889613][T13339] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1400.980495][ T8461] usb 1-1: device descriptor read/64, error -71 [ 1401.090870][ T8461] usb usb1-port1: attempt power cycle [ 1401.265713][T13339] usb 2-1: USB disconnect, device number 47 [ 1405.440511][ T31] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1405.830491][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 1405.832688][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1405.832726][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 1405.832750][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.858225][ T31] usb 1-1: config 0 descriptor?? [ 1408.054505][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 1408.054576][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1408.088119][ T31] usb 1-1: USB disconnect, device number 39 [ 1410.070443][T14836] tipc: Enabling of bearer rejected, failed to enable media [ 1410.226859][T14836] bridge4: entered promiscuous mode [ 1410.227018][T14836] bridge4: entered allmulticast mode [ 1412.724758][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1413.331907][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1413.978527][ T1442] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1415.224062][T14879] Invalid source name [ 1421.153399][T14916] fuse: Bad value for 'rootmode' [ 1424.997010][T14917] bridge6: entered promiscuous mode [ 1424.998020][T14917] bridge6: entered allmulticast mode [ 1425.200418][ C0] sched: DL replenish lagged too much [ 1426.266511][T14919] binder: BINDER_SET_CONTEXT_MGR already set [ 1426.266526][T14919] binder: 14914:14919 ioctl 4018620d 200000000040 returned -16 [ 1426.341643][ T37] kauditd_printk_skb: 44 callbacks suppressed [ 1426.341659][ T37] audit: type=1326 audit(1779986014.649:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14913 comm="syz.0.2476" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb76a41ce59 code=0x0 [ 1426.383419][T14250] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1426.471268][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1426.471336][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.325603][T14937] Invalid source name [ 1433.209476][T14965] fuse: Bad value for 'rootmode' [ 1433.287378][T14966] loop6: detected capacity change from 0 to 8 [ 1433.461271][T13339] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1433.689478][T13339] usb 3-1: device descriptor read/64, error -71 [ 1433.923933][ T8608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1433.953308][T14966] loop6: detected capacity change from 8 to 7 [ 1434.074066][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1434.076191][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1434.076354][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1434.109663][T13339] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1434.117473][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1434.117507][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1434.152647][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1434.152683][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1434.153537][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1434.153564][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1434.212157][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1434.212208][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1434.260635][T13339] usb 3-1: device descriptor read/64, error -71 [ 1435.163180][T13339] usb usb3-port1: attempt power cycle [ 1435.653720][T13339] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1436.342636][T13339] usb 3-1: device descriptor read/8, error -71 [ 1436.526188][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2494'. [ 1437.109632][T14994] Invalid source name [ 1439.742197][ T31] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1439.944615][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1439.944809][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1439.997553][ T31] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1439.997583][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.997602][ T31] usb 2-1: Product: syz [ 1439.997616][ T31] usb 2-1: Manufacturer: syz [ 1439.997629][ T31] usb 2-1: SerialNumber: syz [ 1443.662652][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1443.907013][ T31] usb 2-1: USB disconnect, device number 48 [ 1443.933015][T15019] fuse: Bad value for 'rootmode' [ 1444.103199][T14325] udevd[14325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1444.200479][ T5729] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1444.350484][ T5729] usb 7-1: Using ep0 maxpacket: 16 [ 1444.353377][ T5729] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.353402][ T5729] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1444.355805][ T5729] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1444.355832][ T5729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.355851][ T5729] usb 7-1: Product: syz [ 1444.355864][ T5729] usb 7-1: Manufacturer: syz [ 1444.355877][ T5729] usb 7-1: SerialNumber: syz [ 1444.430438][ T8461] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1444.584942][ T8461] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.585000][ T8461] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1444.585024][ T8461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.597527][ T8461] usb 6-1: config 0 descriptor?? [ 1444.608031][ T8461] pwc: Askey VC010 type 2 USB webcam detected. [ 1444.637072][ T37] audit: type=1326 audit(1779986032.939:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15018 comm="syz.6.2505" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67b46dce59 code=0x0 [ 1444.707317][T15034] netlink: 'syz.6.2505': attribute type 1 has an invalid length. [ 1445.009410][ T8461] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1445.021325][ T8461] pwc: recv_control_msg error -32 req 02 val 2700 [ 1445.024543][ T8461] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1445.028544][ T8461] pwc: recv_control_msg error -32 req 04 val 1000 [ 1445.029671][ T8461] pwc: recv_control_msg error -32 req 04 val 1300 [ 1445.051419][ T8461] pwc: recv_control_msg error -32 req 04 val 1400 [ 1445.052082][ T8461] pwc: recv_control_msg error -32 req 02 val 2000 [ 1445.053350][ T8461] pwc: recv_control_msg error -32 req 02 val 2100 [ 1445.054147][ T8461] pwc: recv_control_msg error -32 req 04 val 1500 [ 1445.257776][ T8461] pwc: recv_control_msg error -71 req 02 val 2400 [ 1445.258260][ T8461] pwc: recv_control_msg error -71 req 02 val 2600 [ 1445.258701][ T8461] pwc: recv_control_msg error -71 req 02 val 2900 [ 1445.259145][ T8461] pwc: recv_control_msg error -71 req 02 val 2800 [ 1445.261823][ T8461] pwc: recv_control_msg error -71 req 04 val 1100 [ 1445.262774][ T8461] pwc: recv_control_msg error -71 req 04 val 1200 [ 1445.330511][ T1570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1445.422021][ T8461] pwc: Registered as video103. [ 1445.429148][ T8461] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46 [ 1445.457206][ T8461] usb 6-1: USB disconnect, device number 40 [ 1447.138595][ T5729] usb 7-1: USB disconnect, device number 40 [ 1447.254233][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1447.351075][ T9670] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1447.664736][T14325] udevd[14325]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1447.831495][T15056] Mount JFS Failure: -5 [ 1448.130516][ T5593] IPVS: starting estimator thread 0... [ 1448.220770][T15060] IPVS: using max 9 ests per chain, 21600 per kthread [ 1449.906832][T15084] fuse: Bad value for 'rootmode' [ 1450.172034][ T5871] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1450.320582][ T5871] usb 6-1: Using ep0 maxpacket: 16 [ 1450.322924][ T5871] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.322949][ T5871] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1450.325116][ T5871] usb 6-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1450.325141][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.325161][ T5871] usb 6-1: Product: syz [ 1450.325175][ T5871] usb 6-1: Manufacturer: syz [ 1450.325189][ T5871] usb 6-1: SerialNumber: syz [ 1450.545334][ T37] audit: type=1326 audit(1779986038.849:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15082 comm="syz.5.2528" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82902dce59 code=0x0 [ 1450.599644][T15094] netlink: 'syz.5.2528': attribute type 1 has an invalid length. [ 1451.179002][T15105] Invalid source name [ 1451.500635][ T5593] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1451.653537][ T5593] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.653591][ T5593] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1451.653617][ T5593] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1451.653643][ T5593] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1451.653664][ T5593] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1451.657480][ T5593] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1451.657509][ T5593] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1451.657528][ T5593] usb 7-1: Product: syz [ 1451.657540][ T5593] usb 7-1: Manufacturer: syz [ 1451.657553][ T5593] usb 7-1: SerialNumber: syz [ 1451.760934][ T5593] usb 7-1: config 0 descriptor?? [ 1451.969292][ T5593] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1451.969677][ T5593] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1452.089746][ T5593] usb 7-1: USB disconnect, device number 41 [ 1453.094655][ T5871] usb 6-1: USB disconnect, device number 41 [ 1453.499550][T14325] udevd[14325]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1457.002197][T15181] Invalid source name [ 1461.250443][ T31] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1461.410447][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1461.414545][ T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1461.414572][ T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1461.414592][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1461.414639][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1461.414660][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1461.414684][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1461.414732][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1461.414754][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.430547][ T31] usb 3-1: config 0 descriptor?? [ 1461.770219][ T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1462.028394][ C0] usblp0: nonzero read bulk status received: -71 [ 1462.029483][T15226] usblp0: error -71 reading from printer [ 1462.031437][ T5871] usb 3-1: USB disconnect, device number 35 [ 1462.252415][ T5871] usblp0: removed [ 1462.674420][T15244] Invalid source name [ 1467.260576][T15271] overlayfs: failed to resolve './file1': -2 [ 1467.268637][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1467.482378][ T8461] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1467.909663][ T8461] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.909870][ T8461] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1467.909932][ T8461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.131426][ T8461] usb 3-1: config 0 descriptor?? [ 1468.318997][ T8461] pwc: Askey VC010 type 2 USB webcam detected. [ 1469.525929][ T8461] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1469.526816][ T8461] pwc: recv_control_msg error -32 req 02 val 2700 [ 1469.527580][ T8461] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1469.528690][ T8461] pwc: recv_control_msg error -32 req 04 val 1000 [ 1469.529262][ T8461] pwc: recv_control_msg error -32 req 04 val 1300 [ 1469.529766][ T8461] pwc: recv_control_msg error -32 req 04 val 1400 [ 1469.530547][ T8461] pwc: recv_control_msg error -32 req 02 val 2000 [ 1469.533781][ T8461] pwc: recv_control_msg error -32 req 02 val 2100 [ 1469.534415][ T8461] pwc: recv_control_msg error -32 req 04 val 1500 [ 1469.534861][ T8461] pwc: recv_control_msg error -71 req 02 val 2500 [ 1469.535280][ T8461] pwc: recv_control_msg error -71 req 02 val 2400 [ 1469.535720][ T8461] pwc: recv_control_msg error -71 req 02 val 2600 [ 1469.536151][ T8461] pwc: recv_control_msg error -71 req 02 val 2900 [ 1469.536615][ T8461] pwc: recv_control_msg error -71 req 02 val 2800 [ 1469.537207][ T8461] pwc: recv_control_msg error -71 req 04 val 1100 [ 1469.537658][ T8461] pwc: recv_control_msg error -71 req 04 val 1200 [ 1469.673991][ T8461] pwc: Registered as video103. [ 1469.685693][ T8461] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47 [ 1469.689305][ T8461] usb 3-1: USB disconnect, device number 36 [ 1470.477057][T15288] Invalid source name [ 1472.281659][T15302] overlayfs: failed to resolve './file1': -2 [ 1474.555894][T15328] Invalid source name [ 1474.661798][ T31] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1474.932891][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.932944][ T31] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1474.932967][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.947889][ T31] usb 6-1: config 0 descriptor?? [ 1474.962159][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 1475.385428][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1475.387564][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 1475.389986][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1475.392705][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 1475.393854][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 1475.397034][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 1475.397701][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 1475.398484][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 1475.400098][ T31] pwc: recv_control_msg error -32 req 04 val 1500 [ 1475.409367][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 1475.409818][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 1475.410253][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 1475.410888][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 1475.411366][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 1475.411967][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 1475.412460][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 1475.466581][ T31] pwc: Registered as video103. [ 1475.489899][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input48 [ 1475.621532][ T31] usb 6-1: USB disconnect, device number 42 [ 1478.566492][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1479.252293][ T1570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1479.285678][ T1570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1482.108856][T15370] overlayfs: failed to resolve './file1': -2 [ 1483.681472][ T5871] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1483.852923][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.852961][ T5871] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1483.852974][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.856908][ T5871] usb 2-1: config 0 descriptor?? [ 1483.910264][ T5871] pwc: Askey VC010 type 2 USB webcam detected. [ 1483.999334][T15400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2640'. [ 1484.262940][ T5871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1484.263501][ T5871] pwc: recv_control_msg error -32 req 02 val 2700 [ 1484.264010][ T5871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1484.264531][ T5871] pwc: recv_control_msg error -32 req 04 val 1000 [ 1484.265087][ T5871] pwc: recv_control_msg error -32 req 04 val 1300 [ 1484.265604][ T5871] pwc: recv_control_msg error -32 req 04 val 1400 [ 1484.266295][ T5871] pwc: recv_control_msg error -32 req 02 val 2000 [ 1484.267133][ T5871] pwc: recv_control_msg error -32 req 02 val 2100 [ 1484.267960][ T5871] pwc: recv_control_msg error -32 req 04 val 1500 [ 1484.268266][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1484.268353][ T5871] pwc: recv_control_msg error -32 req 02 val 2500 [ 1484.268606][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1484.268682][ T5871] pwc: recv_control_msg error -32 req 02 val 2400 [ 1484.268929][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1484.269004][ T5871] pwc: recv_control_msg error -32 req 02 val 2600 [ 1484.269335][ T5871] pwc: recv_control_msg error -71 req 02 val 2900 [ 1484.269689][ T5871] pwc: recv_control_msg error -71 req 02 val 2800 [ 1484.270106][ T5871] pwc: recv_control_msg error -71 req 04 val 1100 [ 1484.270742][ T5871] pwc: recv_control_msg error -71 req 04 val 1200 [ 1484.346827][ T5871] pwc: Registered as video103. [ 1484.356206][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input49 [ 1484.389047][ T5871] usb 2-1: USB disconnect, device number 49 [ 1485.634963][T15406] Invalid source name [ 1486.294788][T15418] overlayfs: failed to resolve './file0': -2 [ 1489.320552][ T5871] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1489.350668][T15448] kvm: kvm [15447]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xf7b1 [ 1489.479980][ T5871] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.480014][ T5871] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1489.480026][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.488699][ T5871] usb 7-1: config 0 descriptor?? [ 1489.492638][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.492698][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.521757][ T5871] pwc: Askey VC010 type 2 USB webcam detected. [ 1489.921461][ T5871] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1489.922050][ T5871] pwc: recv_control_msg error -32 req 02 val 2700 [ 1489.922554][ T5871] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1489.925667][ T5871] pwc: recv_control_msg error -32 req 04 val 1000 [ 1489.927616][T15461] overlayfs: failed to resolve './file0': -2 [ 1489.928297][ T5871] pwc: recv_control_msg error -32 req 04 val 1300 [ 1489.929938][ T5871] pwc: recv_control_msg error -32 req 04 val 1400 [ 1489.933701][ T5871] pwc: recv_control_msg error -32 req 02 val 2000 [ 1489.936250][ T5871] pwc: recv_control_msg error -32 req 02 val 2100 [ 1490.150905][ T5871] pwc: recv_control_msg error -71 req 02 val 2500 [ 1490.151228][ T5871] pwc: recv_control_msg error -71 req 02 val 2400 [ 1490.151539][ T5871] pwc: recv_control_msg error -71 req 02 val 2600 [ 1490.151904][ T5871] pwc: recv_control_msg error -71 req 02 val 2900 [ 1490.153598][ T5871] pwc: recv_control_msg error -71 req 02 val 2800 [ 1490.154577][ T5871] pwc: recv_control_msg error -71 req 04 val 1100 [ 1490.156146][ T5871] pwc: recv_control_msg error -71 req 04 val 1200 [ 1490.171888][ T5871] pwc: Registered as video103. [ 1490.188105][ T5871] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input50 [ 1490.325565][ T5871] usb 7-1: USB disconnect, device number 42 [ 1491.557604][T15486] Invalid source name [ 1497.011127][T14250] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1497.163992][T14250] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1497.164042][T14250] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1497.166855][T14250] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1497.166886][T14250] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.166906][T14250] usb 7-1: Product: syz [ 1497.166920][T14250] usb 7-1: Manufacturer: syz [ 1497.166935][T14250] usb 7-1: SerialNumber: syz [ 1497.447857][T14250] usb 7-1: can't set config #1, error -71 [ 1497.451466][T14250] usb 7-1: USB disconnect, device number 43 [ 1498.973047][T14250] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1499.034317][T15526] Invalid source name [ 1499.137209][T14250] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.137265][T14250] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1499.137282][T14250] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.144457][T14250] usb 7-1: config 0 descriptor?? [ 1499.192066][T14250] pwc: Askey VC010 type 2 USB webcam detected. [ 1499.584998][T14250] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1499.586283][T14250] pwc: recv_control_msg error -32 req 02 val 2700 [ 1499.587559][T14250] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1499.588125][T14250] pwc: recv_control_msg error -32 req 04 val 1000 [ 1499.588835][T14250] pwc: recv_control_msg error -32 req 04 val 1300 [ 1499.589342][T14250] pwc: recv_control_msg error -32 req 04 val 1400 [ 1499.589874][T14250] pwc: recv_control_msg error -32 req 02 val 2000 [ 1499.590626][T14250] pwc: recv_control_msg error -32 req 02 val 2100 [ 1499.731035][ T1059] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1499.823074][T14250] pwc: recv_control_msg error -71 req 02 val 2500 [ 1499.823457][T14250] pwc: recv_control_msg error -71 req 02 val 2400 [ 1499.823813][T14250] pwc: recv_control_msg error -71 req 02 val 2600 [ 1499.824121][T14250] pwc: recv_control_msg error -71 req 02 val 2900 [ 1499.824933][T14250] pwc: recv_control_msg error -71 req 02 val 2800 [ 1499.825418][T14250] pwc: recv_control_msg error -71 req 04 val 1100 [ 1499.826229][T14250] pwc: recv_control_msg error -71 req 04 val 1200 [ 1499.828024][T14250] pwc: Registered as video103. [ 1499.829829][T14250] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input51 [ 1499.837149][T14250] usb 7-1: USB disconnect, device number 44 [ 1499.845127][ T5871] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1500.017520][ T5871] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1500.017572][ T5871] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1500.031069][ T5871] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1500.031099][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.031118][ T5871] usb 2-1: Product: syz [ 1500.031132][ T5871] usb 2-1: Manufacturer: syz [ 1500.031146][ T5871] usb 2-1: SerialNumber: syz [ 1500.304192][ T5871] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1500.399950][ T5871] usb 2-1: USB disconnect, device number 50 [ 1500.512287][T13428] udevd[13428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1501.726911][T15569] Invalid source name [ 1504.921153][ T31] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1505.073593][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1505.073641][ T31] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1505.077790][ T31] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1505.077818][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.077837][ T31] usb 6-1: Product: syz [ 1505.077850][ T31] usb 6-1: Manufacturer: syz [ 1505.077863][ T31] usb 6-1: SerialNumber: syz [ 1505.366767][ T31] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1507.009438][ T31] usb 6-1: USB disconnect, device number 43 [ 1509.340385][T13339] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1509.393182][T15628] hub 8-0:1.0: USB hub found [ 1509.395838][T15628] hub 8-0:1.0: 1 port detected [ 1509.490853][ T8461] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1509.513546][T13339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.513601][T13339] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1509.513625][T13339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.516836][T13339] usb 3-1: config 0 descriptor?? [ 1509.531332][T13339] pwc: Askey VC010 type 2 USB webcam detected. [ 1509.662603][ T8461] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.662658][ T8461] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1509.662712][ T8461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.669595][ T8461] usb 7-1: config 0 descriptor?? [ 1509.717323][ T8461] pwc: Askey VC010 type 2 USB webcam detected. [ 1509.951941][T13339] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1509.953546][T13339] pwc: recv_control_msg error -32 req 02 val 2700 [ 1509.955135][T13339] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1509.956586][T13339] pwc: recv_control_msg error -32 req 04 val 1000 [ 1509.958021][T13339] pwc: recv_control_msg error -32 req 04 val 1300 [ 1509.959417][T13339] pwc: recv_control_msg error -32 req 04 val 1400 [ 1509.964585][T13339] pwc: recv_control_msg error -32 req 02 val 2000 [ 1509.967720][T13339] pwc: recv_control_msg error -32 req 02 val 2100 [ 1509.969222][T13339] pwc: recv_control_msg error -32 req 04 val 1500 [ 1510.108051][ T8461] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1510.108832][ T8461] pwc: recv_control_msg error -32 req 02 val 2700 [ 1510.109576][ T8461] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1510.133206][ T8461] pwc: recv_control_msg error -32 req 04 val 1000 [ 1510.138115][ T8461] pwc: recv_control_msg error -32 req 04 val 1300 [ 1510.138866][ T8461] pwc: recv_control_msg error -32 req 04 val 1400 [ 1510.139551][ T8461] pwc: recv_control_msg error -32 req 02 val 2000 [ 1510.141424][ T8461] pwc: recv_control_msg error -32 req 02 val 2100 [ 1510.178831][T13339] pwc: recv_control_msg error -71 req 02 val 2400 [ 1510.184549][T13339] pwc: recv_control_msg error -71 req 02 val 2600 [ 1510.186555][T13339] pwc: recv_control_msg error -71 req 02 val 2900 [ 1510.188855][T13339] pwc: recv_control_msg error -71 req 02 val 2800 [ 1510.189663][T13339] pwc: recv_control_msg error -71 req 04 val 1100 [ 1510.190172][T13339] pwc: recv_control_msg error -71 req 04 val 1200 [ 1510.204496][T13339] pwc: Registered as video103. [ 1510.211915][T13339] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input52 [ 1510.248019][T13339] usb 3-1: USB disconnect, device number 37 [ 1510.402439][ T8461] pwc: recv_control_msg error -71 req 02 val 2500 [ 1510.402900][ T8461] pwc: recv_control_msg error -71 req 02 val 2400 [ 1510.403296][ T8461] pwc: recv_control_msg error -71 req 02 val 2600 [ 1510.405046][ T8461] pwc: recv_control_msg error -71 req 02 val 2900 [ 1510.406456][ T8461] pwc: recv_control_msg error -71 req 02 val 2800 [ 1510.408981][ T8461] pwc: recv_control_msg error -71 req 04 val 1100 [ 1510.410467][ T8461] pwc: recv_control_msg error -71 req 04 val 1200 [ 1510.534937][ T8461] pwc: Registered as video103. [ 1511.099415][ T8461] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input53 [ 1511.165406][ T8461] usb 7-1: USB disconnect, device number 45 [ 1512.447799][ T1059] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1512.447925][ T1059] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1512.448022][ T1059] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1514.968257][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2739'. [ 1517.450482][ T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1518.354489][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.354548][ T31] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1518.354572][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.363566][ T31] usb 3-1: config 0 descriptor?? [ 1518.373667][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 1518.960031][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1519.033923][T13339] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1519.212949][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 1519.213614][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1519.216128][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 1519.216723][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 1519.218990][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 1519.229424][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 1519.234844][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 1519.360420][T13339] usb 6-1: Using ep0 maxpacket: 32 [ 1519.362652][T13339] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1519.362669][T13339] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1519.362688][T13339] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1519.362736][T13339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1519.362759][T13339] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1519.362782][T13339] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1519.362815][T13339] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1519.362827][T13339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.441957][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 1519.442441][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 1519.442871][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 1519.443305][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 1519.446670][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 1519.451280][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 1519.454816][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 1519.470509][T13339] usb 6-1: config 0 descriptor?? [ 1519.502774][ T31] pwc: Registered as video103. [ 1519.682218][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input54 [ 1519.746474][T13339] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1519.773199][ T31] usb 3-1: USB disconnect, device number 38 [ 1519.998539][ C0] usblp0: nonzero read bulk status received: -71 [ 1520.013862][T15701] usblp0: error -71 reading from printer [ 1520.400643][ T5729] usb 6-1: USB disconnect, device number 44 [ 1520.522304][ T5729] usblp0: removed [ 1531.431384][ T1059] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1539.546247][T15867] bridge8: entered promiscuous mode [ 1539.546268][T15867] bridge8: entered allmulticast mode [ 1544.664739][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1544.950919][ T1059] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1544.951040][ T1059] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1546.494065][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1546.530585][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1546.534697][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1546.537539][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1546.538232][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1548.610454][ T5615] Bluetooth: hci4: command tx timeout [ 1549.488545][T15940] overlayfs: missing 'lowerdir' [ 1551.359780][ T5615] Bluetooth: hci4: command tx timeout [ 1551.360651][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.360723][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.010516][ T5615] Bluetooth: hci4: command tx timeout [ 1554.446928][T15915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.447051][T15915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.447284][T15915] bridge_slave_0: entered allmulticast mode [ 1554.449203][T15915] bridge_slave_0: entered promiscuous mode [ 1554.454057][T15915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.454666][T15915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.454862][T15915] bridge_slave_1: entered allmulticast mode [ 1554.458777][T15915] bridge_slave_1: entered promiscuous mode [ 1554.505605][T15915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.510844][T15915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.544996][T15915] team0: Port device team_slave_0 added [ 1554.547003][T15915] team0: Port device team_slave_1 added [ 1554.631097][T15915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.631114][T15915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.631145][T15915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.633069][T15915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1554.633082][T15915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.633102][T15915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.146005][ T5615] Bluetooth: hci4: command tx timeout [ 1556.155293][T15988] Mount JFS Failure: -5 [ 1557.007704][T15986] tipc: Enabling of bearer rejected, already enabled [ 1557.138219][T15915] hsr_slave_0: entered promiscuous mode [ 1557.151266][T15915] hsr_slave_1: entered promiscuous mode [ 1557.151802][T15915] debugfs: 'hsr0' already exists in 'hsr' [ 1557.151817][T15915] Cannot create hsr debugfs directory [ 1557.929133][T16006] hub 8-0:1.0: USB hub found [ 1557.936904][T16006] hub 8-0:1.0: 1 port detected [ 1559.250136][T16013] hub 8-0:1.0: USB hub found [ 1559.256460][T16013] hub 8-0:1.0: 1 port detected [ 1560.070653][ T9670] bridge_slave_1: left allmulticast mode [ 1560.070687][ T9670] bridge_slave_1: left promiscuous mode [ 1560.070958][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.255396][ T9670] bridge_slave_0: left allmulticast mode [ 1561.255430][ T9670] bridge_slave_0: left promiscuous mode [ 1561.255669][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.097150][ T1442] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1563.671638][ T8877] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1563.831463][ T9670] bond0 (unregistering): (slave 30): Releasing backup interface [ 1563.832650][ T8877] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.832702][ T8877] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1563.832726][ T8877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.837507][ T8877] usb 7-1: config 0 descriptor?? [ 1563.847425][ T8877] pwc: Askey VC010 type 2 USB webcam detected. [ 1563.931222][ T9670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1563.971466][ T9670] bond0 (unregistering): Released all slaves [ 1564.299620][ T5266] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1564.299737][ T8877] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1564.305196][ T8877] pwc: recv_control_msg error -32 req 02 val 2700 [ 1564.306317][ T8877] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1564.307269][ T8877] pwc: recv_control_msg error -32 req 04 val 1000 [ 1564.307888][ T8877] pwc: recv_control_msg error -32 req 04 val 1300 [ 1564.308656][ T8877] pwc: recv_control_msg error -32 req 04 val 1400 [ 1564.315915][ T8877] pwc: recv_control_msg error -32 req 02 val 2000 [ 1564.316874][ T8877] pwc: recv_control_msg error -32 req 02 val 2100 [ 1565.261259][ T8877] pwc: recv_control_msg error -71 req 02 val 2500 [ 1565.261762][ T8877] pwc: recv_control_msg error -71 req 02 val 2400 [ 1565.262203][ T8877] pwc: recv_control_msg error -71 req 02 val 2600 [ 1565.262635][ T8877] pwc: recv_control_msg error -71 req 02 val 2900 [ 1565.263101][ T8877] pwc: recv_control_msg error -71 req 02 val 2800 [ 1565.263706][ T8877] pwc: recv_control_msg error -71 req 04 val 1100 [ 1565.264172][ T8877] pwc: recv_control_msg error -71 req 04 val 1200 [ 1565.326623][ T8877] pwc: Registered as video103. [ 1565.341463][ T8877] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input55 [ 1565.382701][ T8877] usb 7-1: USB disconnect, device number 46 [ 1565.410295][ T9670] tipc: Disabling bearer [ 1565.450736][ T9670] tipc: Left network mode [ 1566.426645][ T5266] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1570.842784][ T9670] hsr_slave_0: left promiscuous mode [ 1570.881308][ T9670] hsr_slave_1: left promiscuous mode [ 1570.882324][ T9670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1570.922358][ T9670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.381553][ T9670] team0 (unregistering): Port device team_slave_1 removed [ 1573.442586][ T9670] team0 (unregistering): Port device team_slave_0 removed [ 1574.213356][T15915] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1574.287088][T15915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1574.288251][T15915] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1574.419990][T15915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1574.429359][T15915] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1574.470113][T15915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1574.478543][T15915] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1574.587374][T15915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1574.974614][T15915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.108519][T15915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.305944][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.306018][ T8608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.985217][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1578.985345][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1579.112303][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.112455][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.948325][ T9670] IPVS: stop unused estimator thread 0... [ 1583.048668][T16230] bridge6: entered promiscuous mode [ 1583.048699][T16230] bridge6: entered allmulticast mode [ 1588.019970][T15915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1588.090100][T15915] veth0_vlan: entered promiscuous mode [ 1588.102100][T15915] veth1_vlan: entered promiscuous mode [ 1588.152240][T15915] veth0_macvtap: entered promiscuous mode [ 1588.156503][T15915] veth1_macvtap: entered promiscuous mode [ 1588.174514][T15915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1588.192454][T15915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1588.221272][ T1462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.221609][ T1462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.221648][ T1462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.221682][ T1462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.720563][T16215] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1590.034179][T16215] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.034235][T16215] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1590.034260][T16215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.131307][T16215] usb 6-1: config 0 descriptor?? [ 1590.137464][T16215] pwc: Askey VC010 type 2 USB webcam detected. [ 1590.137999][ T9670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.138016][ T9670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.354797][ T8608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.354818][ T8608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.971922][T16215] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1591.977012][T16215] pwc: recv_control_msg error -32 req 02 val 2700 [ 1592.024796][T16215] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1592.028372][T16215] pwc: recv_control_msg error -32 req 04 val 1000 [ 1592.029191][T16215] pwc: recv_control_msg error -32 req 04 val 1300 [ 1592.030023][T16215] pwc: recv_control_msg error -32 req 04 val 1400 [ 1592.032128][T16215] pwc: recv_control_msg error -32 req 02 val 2000 [ 1592.032997][T16215] pwc: recv_control_msg error -32 req 02 val 2100 [ 1592.236483][T16215] pwc: recv_control_msg error -71 req 02 val 2500 [ 1592.236880][T16215] pwc: recv_control_msg error -71 req 02 val 2400 [ 1592.240832][T16215] pwc: recv_control_msg error -71 req 02 val 2600 [ 1592.243407][T16215] pwc: recv_control_msg error -71 req 02 val 2900 [ 1592.243886][T16215] pwc: recv_control_msg error -71 req 02 val 2800 [ 1592.247573][T16215] pwc: recv_control_msg error -71 req 04 val 1100 [ 1592.248017][T16215] pwc: recv_control_msg error -71 req 04 val 1200 [ 1592.407168][T16215] pwc: Registered as video103. [ 1592.414627][T16215] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input56 [ 1592.441527][T16215] usb 6-1: USB disconnect, device number 45 [ 1595.210395][ T9670] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1600.158439][T16299] overlayfs: missing 'lowerdir' [ 1601.347222][ T8877] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1602.612367][ T8877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.612418][ T8877] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1602.612432][ T8877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1602.612446][ T8877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1602.612458][ T8877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1602.616087][ T8877] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1602.616115][ T8877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1602.616134][ T8877] usb 3-1: Product: syz [ 1602.616148][ T8877] usb 3-1: Manufacturer: syz [ 1602.616161][ T8877] usb 3-1: SerialNumber: syz [ 1602.712659][ T8877] usb 3-1: config 0 descriptor?? [ 1602.753748][T16317] fuse: Bad value for 'rootmode' [ 1602.919880][ T8877] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1602.919897][ T8877] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1603.030441][ T31] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1603.178747][ T8877] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1603.178763][ T8877] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1603.178774][ T8877] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1603.203383][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 1603.221724][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.221750][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1603.221870][ T31] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1603.221897][ T31] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1603.870989][ T8877] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1603.871044][ T8877] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1603.871529][ T8877] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1603.872495][ T8877] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1603.931613][ T31] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1603.931644][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.931664][ T31] usb 2-1: Product: syz [ 1603.931679][ T31] usb 2-1: Manufacturer: syz [ 1603.931692][ T31] usb 2-1: SerialNumber: syz [ 1604.337655][ T37] audit: type=1326 audit(1779986192.639:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16316 comm="syz.1.2888" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ed1fbce59 code=0x0 [ 1604.456922][T16331] netlink: 'syz.1.2888': attribute type 1 has an invalid length. [ 1605.003452][ T8877] usb 3-1: USB disconnect, device number 39 [ 1605.635740][T16349] Invalid source name [ 1607.320065][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1608.527157][ T31] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1608.541959][ T31] usb 2-1: USB disconnect, device number 51 [ 1608.603072][T13428] udevd[13428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1612.413259][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.413662][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.023369][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1613.023490][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1614.445368][T16401] Invalid source name [ 1617.938382][T16405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1617.954349][T16407] fuse: Bad value for 'rootmode' [ 1618.144280][T16413] Mount JFS Failure: -5 [ 1618.200906][ T8461] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1618.364931][ T8461] usb 7-1: Using ep0 maxpacket: 16 [ 1618.431764][ T8461] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.431790][ T8461] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1618.431931][ T8461] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1618.431992][ T8461] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1618.587908][ T8461] usb 7-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1618.587971][ T8461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.588022][ T8461] usb 7-1: Product: syz [ 1618.588081][ T8461] usb 7-1: Manufacturer: syz [ 1618.588096][ T8461] usb 7-1: SerialNumber: syz [ 1619.198759][ T37] audit: type=1326 audit(1779986207.419:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16406 comm="syz.6.2907" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67b46dce59 code=0x0 [ 1619.234603][T16417] netlink: 'syz.6.2907': attribute type 1 has an invalid length. [ 1619.501899][T16421] Mount JFS Failure: -5 [ 1620.409047][T16271] IPVS: starting estimator thread 0... [ 1620.500490][T16425] IPVS: using max 8 ests per chain, 19200 per kthread [ 1622.522604][ T8461] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1623.660796][ T8461] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1623.673793][ T8461] usb 7-1: USB disconnect, device number 47 [ 1624.192265][T16403] udevd[16403]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1624.480379][ T8461] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1624.632716][ T8461] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.632774][ T8461] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1624.632797][ T8461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.639848][ T8461] usb 7-1: config 0 descriptor?? [ 1624.739683][T16459] Invalid source name [ 1628.221290][ T8461] usb 7-1: can't set config #0, error -71 [ 1628.237913][ T8461] usb 7-1: USB disconnect, device number 48 [ 1630.292953][ T1570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1636.270617][T16505] bridge3: entered promiscuous mode [ 1636.270770][T16505] bridge3: entered allmulticast mode [ 1638.769745][T16513] Invalid source name [ 1640.040520][T16518] overlayfs: missing 'workdir' [ 1641.510088][ T31] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1641.672098][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1641.672128][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1641.674014][ T31] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1641.674031][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.674041][ T31] usb 3-1: Product: syz [ 1641.674048][ T31] usb 3-1: Manufacturer: syz [ 1641.674056][ T31] usb 3-1: SerialNumber: syz [ 1641.894570][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1641.906993][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2938'. [ 1642.959629][T16537] Mount JFS Failure: -5 [ 1644.125011][ T31] usb 3-1: USB disconnect, device number 40 [ 1644.587182][T16403] udevd[16403]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1645.076326][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1645.076451][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1646.332665][T16566] Invalid source name [ 1650.315627][T16572] overlayfs: missing 'workdir' [ 1650.342882][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2951'. [ 1654.421276][ T5729] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1654.701764][ T5729] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1654.701812][ T5729] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1654.706271][ T5729] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1654.706300][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.706319][ T5729] usb 3-1: Product: syz [ 1654.706333][ T5729] usb 3-1: Manufacturer: syz [ 1654.706347][ T5729] usb 3-1: SerialNumber: syz [ 1656.669032][ T5729] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1657.094245][ T5729] usb 3-1: USB disconnect, device number 41 [ 1657.291589][T16531] udevd[16531]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1657.719828][T16610] hub 8-0:1.0: USB hub found [ 1657.836189][T16614] Invalid source name [ 1659.311401][T16610] hub 8-0:1.0: 1 port detected [ 1661.489447][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 1661.621564][T16622] Mount JFS Failure: -5 [ 1662.930646][ T1498] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1662.966794][ T5615] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 1664.619785][T16652] Invalid source name [ 1670.766620][T16682] capability: warning: `syz.0.2981' uses deprecated v2 capabilities in a way that may be insecure [ 1671.235575][T16668] Bluetooth: hci4: command 0x0406 tx timeout [ 1673.814473][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.814541][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.203422][T16699] Invalid source name [ 1677.505351][T16729] Mount JFS Failure: -5 [ 1678.453121][T14250] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1678.652197][T14250] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.652251][T14250] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1678.652274][T14250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.655859][T14250] usb 6-1: config 0 descriptor?? [ 1678.695928][T14250] pwc: Askey VC010 type 2 USB webcam detected. [ 1679.180717][T14250] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1679.187008][T14250] pwc: recv_control_msg error -32 req 02 val 2700 [ 1679.194322][T14250] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1679.226432][T14250] pwc: recv_control_msg error -32 req 04 val 1000 [ 1679.255710][T14250] pwc: recv_control_msg error -32 req 04 val 1300 [ 1679.345518][T14250] pwc: recv_control_msg error -32 req 04 val 1400 [ 1679.424982][T14250] pwc: recv_control_msg error -32 req 02 val 2000 [ 1679.468066][T14250] pwc: recv_control_msg error -32 req 02 val 2100 [ 1679.603049][T14250] pwc: recv_control_msg error -32 req 04 val 1500 [ 1679.967489][T14250] pwc: recv_control_msg error -71 req 02 val 2400 [ 1679.969507][T14250] pwc: recv_control_msg error -71 req 02 val 2600 [ 1679.971115][T14250] pwc: recv_control_msg error -71 req 02 val 2900 [ 1679.972974][T14250] pwc: recv_control_msg error -71 req 02 val 2800 [ 1680.234381][T14250] pwc: recv_control_msg error -71 req 04 val 1100 [ 1680.609062][T16745] bridge5: entered promiscuous mode [ 1680.609093][T16745] bridge5: entered allmulticast mode [ 1680.634570][ T1059] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1680.634698][ T1059] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1686.126074][T16749] Invalid source name [ 1686.133850][T14250] pwc: recv_control_msg error -71 req 04 val 1200 [ 1686.201228][T14250] pwc: Registered as video103. [ 1686.207493][T14250] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input57 [ 1686.212850][T14250] usb 6-1: USB disconnect, device number 46 [ 1692.868133][T16803] Mount JFS Failure: -5 [ 1693.131451][T16805] bridge2: entered promiscuous mode [ 1693.131482][T16805] bridge2: entered allmulticast mode [ 1695.224422][T16810] Invalid source name [ 1698.172257][ T9670] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1698.440010][T16815] hub 8-0:1.0: USB hub found [ 1698.442123][T16815] hub 8-0:1.0: 1 port detected [ 1703.759394][T16823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1705.756501][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3024'. [ 1707.258745][T16849] Mount JFS Failure: -5 [ 1709.574466][T16861] Invalid source name [ 1712.759939][T16854] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1712.760063][T16854] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1713.038537][T16863] Mount JFS Failure: -5 [ 1714.286370][T16878] bridge7: entered promiscuous mode [ 1714.286401][T16878] bridge7: entered allmulticast mode [ 1715.399323][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3037'. [ 1719.272109][T16899] Bluetooth: MGMT ver 1.23 [ 1719.592832][T16915] Invalid source name [ 1725.116003][T16928] bridge8: entered promiscuous mode [ 1725.116157][T16928] bridge8: entered allmulticast mode [ 1727.896867][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3054'. [ 1728.480456][T14250] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1728.676981][T14250] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1728.677013][T14250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.677033][T14250] usb 2-1: Product: syz [ 1728.677046][T14250] usb 2-1: Manufacturer: syz [ 1728.677060][T14250] usb 2-1: SerialNumber: syz [ 1728.846431][T14250] usb 2-1: config 0 descriptor?? [ 1728.960477][T14250] usb 2-1: can't set config #0, error -71 [ 1728.969606][T14250] usb 2-1: USB disconnect, device number 52 [ 1729.064806][T16946] Mount JFS Failure: -5 [ 1732.367720][T16964] Invalid source name [ 1736.101341][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.101416][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.114410][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1739.476166][T16986] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3065'. [ 1740.783751][T16992] bridge4: entered promiscuous mode [ 1740.783782][T16992] bridge4: entered allmulticast mode [ 1744.220370][T14250] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1744.378705][T14250] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1744.378735][T14250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.378755][T14250] usb 2-1: Product: syz [ 1744.378767][T14250] usb 2-1: Manufacturer: syz [ 1744.378781][T14250] usb 2-1: SerialNumber: syz [ 1744.399876][T14250] usb 2-1: config 0 descriptor?? [ 1744.764641][T17010] Invalid source name [ 1745.659628][T14250] usb 2-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 1746.667169][T14250] usb 2-1: failed to fetch extended address, random address set [ 1746.667342][T14250] usb 2-1: atusb_probe: initialization failed, error = -524 [ 1746.812329][T14250] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 1747.945853][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1747.945934][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1748.075584][ T5871] usb 2-1: USB disconnect, device number 53 [ 1748.605099][T17016] Mount JFS Failure: -5 [ 1749.837656][T16668] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1749.918901][T16668] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1749.941224][T16668] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1749.948633][T16668] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1749.949433][T16668] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1752.153527][T16668] Bluetooth: hci3: command tx timeout [ 1753.366184][T17043] hub 8-0:1.0: USB hub found [ 1753.374206][T17043] hub 8-0:1.0: 1 port detected [ 1754.247789][T16668] Bluetooth: hci3: command tx timeout [ 1756.924299][T16668] Bluetooth: hci3: command tx timeout [ 1757.042531][T17054] Mount JFS Failure: -5 [ 1757.336270][T16271] IPVS: starting estimator thread 0... [ 1757.430524][T17056] IPVS: using max 8 ests per chain, 19200 per kthread [ 1758.941430][T16668] Bluetooth: hci3: command tx timeout [ 1760.851834][T17084] Invalid source name [ 1764.372925][T17020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.373118][T17020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.373305][T17020] bridge_slave_0: entered allmulticast mode [ 1764.377334][T17020] bridge_slave_0: entered promiscuous mode [ 1764.413249][T17020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.413450][T17020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.413643][T17020] bridge_slave_1: entered allmulticast mode [ 1764.416184][T17020] bridge_slave_1: entered promiscuous mode [ 1764.595758][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3089'. [ 1765.863648][T17020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1765.898215][T17020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1766.266364][T17020] team0: Port device team_slave_0 added [ 1766.275815][T17020] team0: Port device team_slave_1 added [ 1766.309191][T17020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1766.309203][T17020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.309218][T17020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1766.465094][T17109] hub 8-0:1.0: USB hub found [ 1766.467074][T17109] hub 8-0:1.0: 1 port detected [ 1766.996353][T17020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1766.996395][T17020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.996447][T17020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1767.438882][T17020] hsr_slave_0: entered promiscuous mode [ 1767.458253][T17020] hsr_slave_1: entered promiscuous mode [ 1769.822381][T17112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1770.026363][ T8608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1771.954446][T17141] Invalid source name [ 1772.838854][ T1399] bridge_slave_1: left allmulticast mode [ 1772.838888][ T1399] bridge_slave_1: left promiscuous mode [ 1772.839209][ T1399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.468384][T17148] Mount JFS Failure: -5 [ 1775.052086][ T1399] bridge_slave_0: left allmulticast mode [ 1775.052111][ T1399] bridge_slave_0: left promiscuous mode [ 1775.052279][ T1399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.936566][T17157] hub 8-0:1.0: USB hub found [ 1775.941621][T17157] hub 8-0:1.0: 1 port detected [ 1779.941315][ T1399] bond0 (unregistering): (slave 30): Releasing backup interface [ 1780.051114][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1780.051238][ T1462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1780.120885][ T1399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1780.585933][ T1399] bond0 (unregistering): (slave team0): Releasing backup interface [ 1780.961255][ T1399] bond0 (unregistering): Released all slaves [ 1781.093066][ T5266] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1781.191322][ T1399] tipc: Disabling bearer [ 1781.191496][ T1399] tipc: Left network mode [ 1781.201044][T17020] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1781.451085][T17020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1781.452359][T17020] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1782.256135][T17020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1782.547719][T17188] Mount JFS Failure: -5 [ 1783.935608][T17020] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1784.014082][T17195] Mount JFS Failure: -5 [ 1785.109770][T17020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1785.216928][T17020] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1785.281271][T17020] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1785.546369][T17208] Mount JFS Failure: -5 [ 1788.255712][T17020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1788.632627][T17020] 8021q: adding VLAN 0 to HW filter on device team0 [ 1788.805041][ T1399] hsr_slave_0: left promiscuous mode [ 1788.851854][ T1399] hsr_slave_1: left promiscuous mode [ 1788.861947][ T1399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1790.399283][ T1399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1791.477355][T15990] smbdirect: ib_dev[syz0] removed [ 1794.720904][ T1399] team0 (unregistering): Port device team_slave_1 removed [ 1794.752453][ T1399] team0 (unregistering): Port device team_slave_0 removed [ 1795.016004][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'. [ 1795.019179][ T5266] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1795.073071][ T1570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.074339][ T1570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1795.200908][ T1570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.200981][ T1570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1796.694340][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.694482][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.890577][ T1399] IPVS: stop unused estimator thread 0... [ 1799.780807][ T5266] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1799.857948][T17020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1802.736146][T17317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1804.913538][ T8608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1805.223742][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3133'. [ 1805.699799][T17020] veth0_vlan: entered promiscuous mode [ 1805.731653][T17020] veth1_vlan: entered promiscuous mode [ 1806.434647][T17020] veth0_macvtap: entered promiscuous mode [ 1806.465317][T17020] veth1_macvtap: entered promiscuous mode [ 1806.509959][T17020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1806.631420][T17020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1806.677411][ T1399] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.697242][ T1399] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.710475][ T1399] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.710783][ T1399] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.779555][ T5266] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1807.533026][T17352] Mount JFS Failure: -5 [ 1808.556628][ T1399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.556647][ T1399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.348507][T17373] Mount JFS Failure: -5 [ 1812.724647][ T1399] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1813.068753][T17376] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20004 [ 1813.595988][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1813.675498][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1813.689091][T17375] ================================================================== [ 1813.689110][T17375] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 1813.689278][T17375] Read of size 1 at addr ffff8880339f6418 by task syz.0.3138/17375 [ 1813.689296][T17375] [ 1813.689323][T17375] CPU: 0 UID: 0 PID: 17375 Comm: syz.0.3138 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1813.689354][T17375] Tainted: [L]=SOFTLOCKUP [ 1813.689361][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1813.689381][T17375] Call Trace: [ 1813.689390][T17375] [ 1813.689399][T17375] dump_stack_lvl+0xe8/0x150 [ 1813.689423][T17375] print_address_description+0x55/0x1e0 [ 1813.689446][T17375] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1813.689474][T17375] print_report+0x58/0x70 [ 1813.689501][T17375] kasan_report+0x117/0x150 [ 1813.689571][T17375] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1813.689602][T17375] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1813.689629][T17375] __kasan_check_byte+0x2a/0x40 [ 1813.689652][T17375] lock_acquire+0x84/0x350 [ 1813.689734][T17375] ? preempt_schedule_thunk+0x16/0x30 [ 1813.689764][T17375] ? rcu_is_watching+0x15/0xb0 [ 1813.689840][T17375] _raw_spin_lock_irqsave+0x40/0x60 [ 1813.689866][T17375] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1813.689890][T17375] rt_mutex_slowunlock+0xbf/0x8b0 [ 1813.689912][T17375] ? reacquire_held_locks+0x104/0x190 [ 1813.689940][T17375] ? rt_spin_lock+0x1e0/0x400 [ 1813.689963][T17375] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1813.689987][T17375] ? rt_spin_unlock+0x14f/0x200 [ 1813.690011][T17375] ? rt_spin_unlock+0x160/0x200 [ 1813.690034][T17375] kbd_event+0x2f91/0x42f0 [ 1813.690095][T17375] ? __pfx_kbd_event+0x10/0x10 [ 1813.690118][T17375] ? try_to_take_rt_mutex+0x840/0xb00 [ 1813.690151][T17375] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1813.690174][T17375] ? __lock_acquire+0x6b5/0x2cf0 [ 1813.690200][T17375] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1813.690225][T17375] ? input_pass_values+0x8d/0x890 [ 1813.690322][T17375] input_handle_events_default+0xd4/0x1a0 [ 1813.690346][T17375] ? input_pass_values+0x8d/0x890 [ 1813.690374][T17375] input_pass_values+0x288/0x890 [ 1813.690406][T17375] ? input_handle_event+0x70c/0xf30 [ 1813.690432][T17375] input_event_dispose+0x330/0x6b0 [ 1813.690459][T17375] input_inject_event+0x1d7/0x320 [ 1813.690483][T17375] ? input_inject_event+0xb0/0x320 [ 1813.690518][T17375] evdev_write+0x328/0x4c0 [ 1813.690566][T17375] ? __pfx_evdev_write+0x10/0x10 [ 1813.690585][T17375] ? __pfx_evdev_write+0x10/0x10 [ 1813.690603][T17375] ? vfs_write+0x288/0xba0 [ 1813.690655][T17375] ? __pfx_evdev_write+0x10/0x10 [ 1813.690675][T17375] vfs_write+0x2a3/0xba0 [ 1813.690700][T17375] ? __pfx_vfs_write+0x10/0x10 [ 1813.690724][T17375] ? __rcu_read_unlock+0x83/0xe0 [ 1813.690777][T17375] ? __fget_files+0x2a/0x420 [ 1813.690820][T17375] ? __fget_files+0x3a6/0x420 [ 1813.690837][T17375] ? __fget_files+0x2a/0x420 [ 1813.690858][T17375] ksys_write+0x156/0x270 [ 1813.690880][T17375] ? __pfx_ksys_write+0x10/0x10 [ 1813.690907][T17375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.690928][T17375] do_syscall_64+0x174/0x580 [ 1813.691008][T17375] ? trace_irq_disable+0x3b/0x140 [ 1813.691079][T17375] ? clear_bhb_loop+0x40/0x90 [ 1813.691103][T17375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.691128][T17375] RIP: 0033:0x7f9962c4ce59 [ 1813.691150][T17375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1813.691173][T17375] RSP: 002b:00007f9960e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1813.691207][T17375] RAX: ffffffffffffffda RBX: 00007f9962ec5fa0 RCX: 00007f9962c4ce59 [ 1813.691222][T17375] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000008 [ 1813.691236][T17375] RBP: 00007f9962ce2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1813.691249][T17375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1813.691265][T17375] R13: 00007f9962ec6038 R14: 00007f9962ec5fa0 R15: 00007fff9ea1a2b8 [ 1813.691292][T17375] [ 1813.691300][T17375] [ 1813.691304][T17375] Allocated by task 17375: [ 1813.691315][T17375] kasan_save_track+0x3e/0x80 [ 1813.691334][T17375] __kasan_kmalloc+0x93/0xb0 [ 1813.691353][T17375] __kmalloc_cache_noprof+0x3a6/0x690 [ 1813.691429][T17375] alloc_tty_struct+0xa6/0x7b0 [ 1813.691474][T17375] tty_init_dev+0x59/0x4d0 [ 1813.691490][T17375] tty_open+0x86e/0xd80 [ 1813.691541][T17375] chrdev_open+0x4d0/0x5f0 [ 1813.691589][T17375] do_dentry_open+0x83d/0x13e0 [ 1813.691638][T17375] vfs_open+0x3b/0x350 [ 1813.691663][T17375] path_openat+0x2e43/0x38a0 [ 1813.691728][T17375] do_file_open+0x23e/0x4a0 [ 1813.691748][T17375] do_sys_openat2+0x113/0x200 [ 1813.691775][T17375] __x64_sys_openat+0x138/0x170 [ 1813.691791][T17375] do_syscall_64+0x174/0x580 [ 1813.691816][T17375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.691833][T17375] [ 1813.691838][T17375] Freed by task 5871: [ 1813.691847][T17375] kasan_save_track+0x3e/0x80 [ 1813.691865][T17375] kasan_save_free_info+0x46/0x50 [ 1813.691891][T17375] __kasan_slab_free+0x5c/0x80 [ 1813.691909][T17375] kfree+0x1c5/0x6c0 [ 1813.691925][T17375] process_scheduled_works+0xb5d/0x1860 [ 1813.691943][T17375] worker_thread+0xa53/0xfc0 [ 1813.691961][T17375] kthread+0x388/0x470 [ 1813.691983][T17375] ret_from_fork+0x514/0xb70 [ 1813.692002][T17375] ret_from_fork_asm+0x1a/0x30 [ 1813.692023][T17375] [ 1813.692028][T17375] Last potentially related work creation: [ 1813.692035][T17375] kasan_save_stack+0x3e/0x60 [ 1813.692052][T17375] kasan_record_aux_stack+0xbd/0xd0 [ 1813.692077][T17375] insert_work+0x3d/0x330 [ 1813.692092][T17375] __queue_work+0xd1d/0x1090 [ 1813.692112][T17375] queue_work_on+0x106/0x1d0 [ 1813.692131][T17375] tty_release_struct+0xb8/0xd0 [ 1813.692147][T17375] tty_release+0xcb6/0x1710 [ 1813.692162][T17375] __fput+0x461/0xa70 [ 1813.692176][T17375] task_work_run+0x1d9/0x270 [ 1813.692200][T17375] exit_to_user_mode_loop+0x193/0x680 [ 1813.692278][T17375] do_syscall_64+0x353/0x580 [ 1813.692304][T17375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.692321][T17375] [ 1813.692326][T17375] The buggy address belongs to the object at ffff8880339f6000 [ 1813.692326][T17375] which belongs to the cache kmalloc-cg-2k of size 2048 [ 1813.692343][T17375] The buggy address is located 1048 bytes inside of [ 1813.692343][T17375] freed 2048-byte region [ffff8880339f6000, ffff8880339f6800) [ 1813.692365][T17375] [ 1813.692370][T17375] The buggy address belongs to the physical page: [ 1813.692389][T17375] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x339f0 [ 1813.692409][T17375] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1813.692425][T17375] memcg:ffff8880368d3581 [ 1813.692433][T17375] flags: 0x80000000000040(head|node=0|zone=1) [ 1813.692455][T17375] page_type: f5(slab) [ 1813.692473][T17375] raw: 0080000000000040 ffff88813fe263c0 dead000000000100 dead000000000122 [ 1813.692492][T17375] raw: 0000000000000000 0000000800080008 00000000f5000000 ffff8880368d3581 [ 1813.692517][T17375] head: 0080000000000040 ffff88813fe263c0 dead000000000100 dead000000000122 [ 1813.692534][T17375] head: 0000000000000000 0000000800080008 00000000f5000000 ffff8880368d3581 [ 1813.692552][T17375] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1813.692569][T17375] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1813.692579][T17375] page dumped because: kasan: bad access detected [ 1813.692593][T17375] page_owner tracks the page as allocated [ 1813.692600][T17375] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5611, tgid 5611 (syz-executor), ts 87082757978, free_ts 87080592537 [ 1813.692637][T17375] post_alloc_hook+0x22d/0x280 [ 1813.692710][T17375] get_page_from_freelist+0x28b2/0x2930 [ 1813.692735][T17375] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1813.692759][T17375] allocate_slab+0x77/0x660 [ 1813.692785][T17375] refill_objects+0x33c/0x3d0 [ 1813.692810][T17375] __pcs_replace_empty_main+0x373/0x720 [ 1813.692837][T17375] __kmalloc_noprof+0x530/0x7b0 [ 1813.692856][T17375] __register_sysctl_table+0x72/0x1340 [ 1813.692899][T17375] __devinet_sysctl_register+0x386/0x490 [ 1813.692954][T17375] devinet_sysctl_register+0x187/0x200 [ 1813.692976][T17375] inetdev_init+0x2a4/0x4e0 [ 1813.692996][T17375] inetdev_event+0x30d/0x1610 [ 1813.693018][T17375] notifier_call_chain+0x1ad/0x3d0 [ 1813.693040][T17375] register_netdevice+0x18d5/0x1ed0 [ 1813.693096][T17375] register_vlan_dev+0x388/0x800 [ 1813.693176][T17375] vlan_newlink+0x4b2/0x610 [ 1813.693220][T17375] page last free pid 5611 tgid 5611 stack trace: [ 1813.693231][T17375] __free_frozen_pages+0xfe5/0x10d0 [ 1813.693256][T17375] __slab_free+0x252/0x2a0 [ 1813.693281][T17375] qlist_free_all+0x99/0x100 [ 1813.693323][T17375] kasan_quarantine_reduce+0x148/0x160 [ 1813.693340][T17375] __kasan_slab_alloc+0x22/0x80 [ 1813.693359][T17375] __kmalloc_cache_noprof+0x338/0x690 [ 1813.693380][T17375] kset_create_and_add+0x5a/0x180 [ 1813.693426][T17375] netdev_register_kobject+0x1a2/0x310 [ 1813.693471][T17375] register_netdevice+0x146d/0x1ed0 [ 1813.693505][T17375] register_vlan_dev+0x388/0x800 [ 1813.693532][T17375] vlan_newlink+0x4b2/0x610 [ 1813.693553][T17375] rtnl_newlink_create+0x329/0xb70 [ 1813.693626][T17375] rtnl_newlink+0x166a/0x1bb0 [ 1813.693649][T17375] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1813.693670][T17375] netlink_rcv_skb+0x232/0x4b0 [ 1813.693720][T17375] netlink_unicast+0x780/0x920 [ 1813.693743][T17375] [ 1813.693747][T17375] Memory state around the buggy address: [ 1813.693759][T17375] ffff8880339f6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1813.693772][T17375] ffff8880339f6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1813.693785][T17375] >ffff8880339f6400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1813.693796][T17375] ^ [ 1813.693806][T17375] ffff8880339f6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1813.693819][T17375] ffff8880339f6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1813.693830][T17375] ================================================================== [ 1813.693850][T17375] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1813.693868][T17375] CPU: 0 UID: 0 PID: 17375 Comm: syz.0.3138 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1813.693898][T17375] Tainted: [L]=SOFTLOCKUP [ 1813.693905][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1813.693918][T17375] Call Trace: [ 1813.693926][T17375] [ 1813.693934][T17375] vpanic+0x56c/0xa60 [ 1813.693960][T17375] ? __pfx_vpanic+0x10/0x10 [ 1813.693988][T17375] panic+0xc5/0xd0 [ 1813.694009][T17375] ? __pfx_panic+0x10/0x10 [ 1813.694032][T17375] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1813.694059][T17375] ? rcu_is_watching+0x15/0xb0 [ 1813.694088][T17375] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1813.694115][T17375] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1813.694141][T17375] check_panic_on_warn+0x89/0xb0 [ 1813.694168][T17375] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1813.694195][T17375] end_report+0x73/0x170 [ 1813.694217][T17375] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1813.694244][T17375] kasan_report+0x128/0x150 [ 1813.694268][T17375] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1813.694299][T17375] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1813.694321][T17375] __kasan_check_byte+0x2a/0x40 [ 1813.694343][T17375] lock_acquire+0x84/0x350 [ 1813.694369][T17375] ? preempt_schedule_thunk+0x16/0x30 [ 1813.694399][T17375] ? rcu_is_watching+0x15/0xb0 [ 1813.694433][T17375] _raw_spin_lock_irqsave+0x40/0x60 [ 1813.694461][T17375] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 1813.694483][T17375] rt_mutex_slowunlock+0xbf/0x8b0 [ 1813.694514][T17375] ? reacquire_held_locks+0x104/0x190 [ 1813.694543][T17375] ? rt_spin_lock+0x1e0/0x400 [ 1813.694568][T17375] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1813.694592][T17375] ? rt_spin_unlock+0x14f/0x200 [ 1813.694617][T17375] ? rt_spin_unlock+0x160/0x200 [ 1813.694640][T17375] kbd_event+0x2f91/0x42f0 [ 1813.694665][T17375] ? __pfx_kbd_event+0x10/0x10 [ 1813.694686][T17375] ? try_to_take_rt_mutex+0x840/0xb00 [ 1813.694715][T17375] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 1813.694743][T17375] ? __lock_acquire+0x6b5/0x2cf0 [ 1813.694773][T17375] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1813.694801][T17375] ? input_pass_values+0x8d/0x890 [ 1813.694834][T17375] input_handle_events_default+0xd4/0x1a0 [ 1813.694858][T17375] ? input_pass_values+0x8d/0x890 [ 1813.694885][T17375] input_pass_values+0x288/0x890 [ 1813.694917][T17375] ? input_handle_event+0x70c/0xf30 [ 1813.694942][T17375] input_event_dispose+0x330/0x6b0 [ 1813.694969][T17375] input_inject_event+0x1d7/0x320 [ 1813.694994][T17375] ? input_inject_event+0xb0/0x320 [ 1813.695019][T17375] evdev_write+0x328/0x4c0 [ 1813.695041][T17375] ? __pfx_evdev_write+0x10/0x10 [ 1813.695060][T17375] ? __pfx_evdev_write+0x10/0x10 [ 1813.695079][T17375] ? vfs_write+0x288/0xba0 [ 1813.695102][T17375] ? __pfx_evdev_write+0x10/0x10 [ 1813.695121][T17375] vfs_write+0x2a3/0xba0 [ 1813.695148][T17375] ? __pfx_vfs_write+0x10/0x10 [ 1813.695171][T17375] ? __rcu_read_unlock+0x83/0xe0 [ 1813.695193][T17375] ? __fget_files+0x2a/0x420 [ 1813.695212][T17375] ? __fget_files+0x3a6/0x420 [ 1813.695229][T17375] ? __fget_files+0x2a/0x420 [ 1813.695260][T17375] ksys_write+0x156/0x270 [ 1813.695285][T17375] ? __pfx_ksys_write+0x10/0x10 [ 1813.695311][T17375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.695331][T17375] do_syscall_64+0x174/0x580 [ 1813.695359][T17375] ? trace_irq_disable+0x3b/0x140 [ 1813.695381][T17375] ? clear_bhb_loop+0x40/0x90 [ 1813.695403][T17375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.695422][T17375] RIP: 0033:0x7f9962c4ce59 [ 1813.695440][T17375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1813.695458][T17375] RSP: 002b:00007f9960e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1813.695480][T17375] RAX: ffffffffffffffda RBX: 00007f9962ec5fa0 RCX: 00007f9962c4ce59 [ 1813.695502][T17375] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000008 [ 1813.695516][T17375] RBP: 00007f9962ce2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1813.695531][T17375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1813.695543][T17375] R13: 00007f9962ec6038 R14: 00007f9962ec5fa0 R15: 00007fff9ea1a2b8 [ 1813.695567][T17375] [ 1813.695828][T17375] Kernel Offset: disabled