last executing test programs: 16.431562801s ago: executing program 3 (id=57): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00400300000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 14.979929669s ago: executing program 3 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000180), 0x9, 0x0) r1 = getpid() symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40040) r4 = io_uring_setup(0x3454, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x181000, &(0x7f0000000400)={[{@verity_off}, {@xino_auto}, {@uuid_auto}, {@uuid_off}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@flag='async'}, {@appraise}, {@obj_type={'obj_type', 0x3d, '/dev/cpu/#/msr\x00'}}, {@euid_gt}]}) eventfd2(0x49d, 0x800) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 12.718904233s ago: executing program 3 (id=60): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x50) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 12.686240904s ago: executing program 1 (id=61): r0 = socket(0xa, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x4bfa, 0x600000000000003e) r4 = syz_usb_connect$uac3(0x5, 0x80, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000e40)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r2, @ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = inotify_init() r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x4b8200, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x20) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000080)={0x20004, r8, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000280)={0x1, r11, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r7, 0xc01864c1, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r10, 0xc01864c1, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000340)={0x4, 0x9, 0x4adb, 0x58e}, &(0x7f0000000380)=0x10) close_range(r5, 0xffffffffffffffff, 0x0) 11.857327291s ago: executing program 1 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(r1, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4847, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x24004040) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x50}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sync_file_range(r6, 0x1, 0x2, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 8.882423258s ago: executing program 1 (id=69): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r5) ioctl$UBLK_U_CMD_ADD_DEV(r1, 0xc0207504, 0x0) getsockname$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x1c) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1402", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c0004800500030080ff000008000200010000000400088008000100ffffffff24000c8004000b801c"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) io_uring_setup(0xd94, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240000d4}, 0x24048801) sendmsg$nl_route_sched(r7, 0x0, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000039000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 8.83203016s ago: executing program 2 (id=70): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a298", 0x56, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c99", 0x3c}], 0x1}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.760598535s ago: executing program 3 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) writev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 7.195913594s ago: executing program 0 (id=74): r0 = socket(0xa, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x4bfa, 0x600000000000003e) r4 = syz_usb_connect$uac3(0x5, 0x80, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000e40)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r2, @ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = inotify_init() r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x4b8200, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x20) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000080)={0x20004, r8, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000280)={0x1, r11, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r7, 0xc01864c1, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r10, 0xc01864c1, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000340)={0x4, 0x9, 0x4adb, 0x58e}, &(0x7f0000000380)=0x10) close_range(r5, 0xffffffffffffffff, 0x0) 6.453195808s ago: executing program 0 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x800) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.230692745s ago: executing program 0 (id=76): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00400300000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 6.115817379s ago: executing program 2 (id=77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(r1, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4847, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x24004040) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x50}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sync_file_range(r6, 0x1, 0x2, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 5.740907052s ago: executing program 1 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000180), 0x9, 0x0) r1 = getpid() symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40040) r4 = io_uring_setup(0x3454, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x181000, &(0x7f0000000400)={[{@verity_off}, {@xino_auto}, {@uuid_auto}, {@uuid_off}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@flag='async'}, {@appraise}, {@obj_type={'obj_type', 0x3d, '/dev/cpu/#/msr\x00'}}, {@euid_gt}]}) eventfd2(0x49d, 0x800) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.093961686s ago: executing program 1 (id=79): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x4}) 3.992223819s ago: executing program 0 (id=80): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004cfe9, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r1, 0x53220000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 3.799172065s ago: executing program 3 (id=81): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x50) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 2.924872814s ago: executing program 2 (id=82): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x5}, 0x0) 2.720034021s ago: executing program 2 (id=83): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10) recvmmsg(r1, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40012002, 0x0) 2.484867428s ago: executing program 0 (id=84): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000"], 0x110}}, 0x0) 2.353353923s ago: executing program 2 (id=85): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.122997071s ago: executing program 2 (id=86): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r5) ioctl$UBLK_U_CMD_ADD_DEV(r1, 0xc0207504, 0x0) getsockname$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x1c) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1402", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c0004800500030080ff000008000200010000000400088008000100ffffffff24000c8004000b801c"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) io_uring_setup(0xd94, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240000d4}, 0x24048801) sendmsg$nl_route_sched(r7, 0x0, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000039000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 1.384578475s ago: executing program 0 (id=87): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x100, '\x00', 0x0, 0x0}, 0x50) r2 = socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbeeb, 0xa031, 0xffffffffffffffff, 0xe539e000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x7, @local}, 0x42, {0x2, 0x0, @private=0xa010102}, 'syz_tun\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 486.032104ms ago: executing program 3 (id=88): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) 0s ago: executing program 1 (id=89): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 76.305553][ T5763] cgroup: Unknown subsys name 'net' [ 76.430323][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.096084][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.273070][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.276015][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.281553][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.295634][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.299637][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.304274][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.311292][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.318231][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.331740][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.333834][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.339231][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.347022][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.360592][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.360951][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.376298][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.389481][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.404510][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.415134][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.425093][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.440712][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.451621][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.473693][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.482536][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.489927][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.909011][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 80.928526][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 81.027480][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 81.084241][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.158938][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.166871][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.174730][ T5780] bridge_slave_0: entered allmulticast mode [ 81.181554][ T5780] bridge_slave_0: entered promiscuous mode [ 81.212215][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.219931][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.227402][ T5780] bridge_slave_1: entered allmulticast mode [ 81.234449][ T5780] bridge_slave_1: entered promiscuous mode [ 81.250930][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.258260][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.265723][ T5781] bridge_slave_0: entered allmulticast mode [ 81.272857][ T5781] bridge_slave_0: entered promiscuous mode [ 81.290613][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.298238][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.305741][ T5781] bridge_slave_1: entered allmulticast mode [ 81.315165][ T5781] bridge_slave_1: entered promiscuous mode [ 81.369709][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.376994][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.384403][ T5776] bridge_slave_0: entered allmulticast mode [ 81.391219][ T5776] bridge_slave_0: entered promiscuous mode [ 81.411886][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.427255][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.434948][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.442110][ T5776] bridge_slave_1: entered allmulticast mode [ 81.449221][ T5776] bridge_slave_1: entered promiscuous mode [ 81.459271][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.470506][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.510752][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.549855][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.557195][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.564807][ T5775] bridge_slave_0: entered allmulticast mode [ 81.571565][ T5775] bridge_slave_0: entered promiscuous mode [ 81.590054][ T5780] team0: Port device team_slave_0 added [ 81.599266][ T5780] team0: Port device team_slave_1 added [ 81.607363][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.620067][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.629377][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.637207][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.644527][ T5775] bridge_slave_1: entered allmulticast mode [ 81.651418][ T5775] bridge_slave_1: entered promiscuous mode [ 81.680348][ T5781] team0: Port device team_slave_0 added [ 81.716551][ T5781] team0: Port device team_slave_1 added [ 81.747575][ T5776] team0: Port device team_slave_0 added [ 81.767071][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.774167][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.800288][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.823326][ T5776] team0: Port device team_slave_1 added [ 81.831354][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.850899][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.858235][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.884280][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.903211][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.910183][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.938484][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.959839][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.983600][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.990574][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.016624][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.064775][ T5775] team0: Port device team_slave_0 added [ 82.072931][ T5775] team0: Port device team_slave_1 added [ 82.089515][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.097066][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.123274][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.136477][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.143784][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.170054][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.243827][ T5780] hsr_slave_0: entered promiscuous mode [ 82.250200][ T5780] hsr_slave_1: entered promiscuous mode [ 82.257969][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.265241][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.291378][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.318431][ T5781] hsr_slave_0: entered promiscuous mode [ 82.325480][ T5781] hsr_slave_1: entered promiscuous mode [ 82.331645][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.339533][ T5781] Cannot create hsr debugfs directory [ 82.348415][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.355535][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.381531][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.439423][ T5776] hsr_slave_0: entered promiscuous mode [ 82.446142][ T5776] hsr_slave_1: entered promiscuous mode [ 82.452228][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.453145][ T5789] Bluetooth: hci1: command tx timeout [ 82.453721][ T5779] Bluetooth: hci0: command tx timeout [ 82.461065][ T5785] Bluetooth: hci2: command tx timeout [ 82.477588][ T5776] Cannot create hsr debugfs directory [ 82.532417][ T5789] Bluetooth: hci3: command tx timeout [ 82.549203][ T5775] hsr_slave_0: entered promiscuous mode [ 82.556096][ T5775] hsr_slave_1: entered promiscuous mode [ 82.562199][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.570356][ T5775] Cannot create hsr debugfs directory [ 82.939698][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.953149][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.964518][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.977474][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.042545][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.060295][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.071437][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.084172][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.192688][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.206994][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.216582][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.229236][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.317206][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.328054][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.339372][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.349126][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.386271][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.425174][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.468276][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.475552][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.501228][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.508423][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.560357][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.599222][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.628887][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.636095][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.665905][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.673109][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.701986][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.747195][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.789524][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.804007][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.854154][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.861331][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.883565][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.890801][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.902973][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.910151][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.919949][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.927188][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.249276][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.397623][ T5781] veth0_vlan: entered promiscuous mode [ 84.440554][ T5781] veth1_vlan: entered promiscuous mode [ 84.525755][ T5781] veth0_macvtap: entered promiscuous mode [ 84.533775][ T5789] Bluetooth: hci0: command tx timeout [ 84.539223][ T5789] Bluetooth: hci1: command tx timeout [ 84.545481][ T5785] Bluetooth: hci2: command tx timeout [ 84.581503][ T5781] veth1_macvtap: entered promiscuous mode [ 84.610645][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.618289][ T5789] Bluetooth: hci3: command tx timeout [ 84.642202][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.658962][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.671727][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.699326][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.727096][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.739445][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.748757][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.757783][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.864035][ T5776] veth0_vlan: entered promiscuous mode [ 84.880735][ T5780] veth0_vlan: entered promiscuous mode [ 84.899781][ T5775] veth0_vlan: entered promiscuous mode [ 84.920123][ T5776] veth1_vlan: entered promiscuous mode [ 84.968764][ T5780] veth1_vlan: entered promiscuous mode [ 84.991517][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.007327][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.061940][ T5775] veth1_vlan: entered promiscuous mode [ 85.085918][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.095486][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.111734][ T5776] veth0_macvtap: entered promiscuous mode [ 85.133839][ T5776] veth1_macvtap: entered promiscuous mode [ 85.160103][ T5780] veth0_macvtap: entered promiscuous mode [ 85.220697][ T5780] veth1_macvtap: entered promiscuous mode [ 85.259618][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.286161][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.314247][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.325178][ T5775] veth0_macvtap: entered promiscuous mode [ 85.365405][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.376191][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.387822][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.398837][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.410477][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.421106][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.431826][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.444033][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.455971][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.466830][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.477200][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.488507][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.499936][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.516858][ T5775] veth1_macvtap: entered promiscuous mode [ 85.530770][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.540108][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549907][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.558785][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.573907][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.582921][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.592000][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.601243][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.622732][ T8] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 85.663352][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.676374][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.687652][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.699128][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.709841][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.721192][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.733906][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.759422][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.778961][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.789730][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.802369][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.816265][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.827791][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.839214][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.839964][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.849009][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 85.859398][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.872576][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.874134][ T8] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 85.881297][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.896329][ T8] usb 4-1: config 0 has no interface number 0 [ 85.900186][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.907406][ T8] usb 4-1: config 0 interface 175 has no altsetting 0 [ 85.940609][ T8] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice=a3.02 [ 85.968885][ T8] usb 4-1: New USB device strings: Mfr=120, Product=243, SerialNumber=26 [ 85.979632][ T8] usb 4-1: Product: syz [ 85.984263][ T8] usb 4-1: Manufacturer: syz [ 85.988908][ T8] usb 4-1: SerialNumber: syz [ 86.000759][ T8] usb 4-1: config 0 descriptor?? [ 86.027456][ T4263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.036143][ T4263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.083846][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.091911][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.168839][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.183920][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.253977][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.261937][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.400155][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.438338][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.488963][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.527388][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.655584][ T5789] Bluetooth: hci0: command tx timeout [ 86.661753][ T5789] Bluetooth: hci1: command tx timeout [ 86.668883][ T5789] Bluetooth: hci2: command tx timeout [ 86.692747][ T5785] Bluetooth: hci3: command tx timeout [ 86.922322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 86.942305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 86.992294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.118281][ T5785] Bluetooth: hci2: command tx timeout [ 90.118452][ T5789] Bluetooth: hci1: command tx timeout [ 90.123781][ T5785] Bluetooth: hci0: command tx timeout [ 90.129209][ T5779] Bluetooth: hci3: command tx timeout [ 90.208141][ T8] usb-storage 4-1:0.175: USB Mass Storage device detected [ 90.732447][ T5863] ======================================================= [ 90.732447][ T5863] WARNING: The mand mount option has been deprecated and [ 90.732447][ T5863] and is ignored by this kernel. Remove the mand [ 90.732447][ T5863] option from the mount to silence this warning. [ 90.732447][ T5863] ======================================================= [ 90.849968][ T8] usb 4-1: USB disconnect, device number 2 [ 92.259568][ T27] cfg80211: failed to load regulatory.db [ 92.969602][ T5877] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.327991][ T5882] virt_wifi0 speed is unknown, defaulting to 1000 [ 93.342688][ T5882] virt_wifi0 speed is unknown, defaulting to 1000 [ 93.351757][ T5882] virt_wifi0 speed is unknown, defaulting to 1000 [ 93.393180][ T5882] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.432622][ T5882] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 93.472610][ T5880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 93.546760][ T5882] virt_wifi0 speed is unknown, defaulting to 1000 [ 93.566534][ T5882] virt_wifi0 speed is unknown, defaulting to 1000 [ 93.593141][ T5882] virt_wifi0 speed is unknown, defaulting to 1000 [ 93.609073][ T5882] virt_wifi0 speed is unknown, defaulting to 1000 [ 93.973376][ T788] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.985988][ T5894] veth0: entered promiscuous mode [ 94.024477][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 94.081016][ T5893] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 94.091473][ T5893] kvm: requested 68723 ns i8254 timer period limited to 200000 ns [ 94.172430][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 94.198241][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.210961][ T788] usb 1-1: config 0 has no interfaces? [ 94.217135][ T788] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 94.226698][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.239554][ T788] usb 1-1: config 0 descriptor?? [ 95.631052][ T5789] Bluetooth: hci2: command tx timeout [ 96.791695][ T9] usb 1-1: USB disconnect, device number 2 [ 97.738428][ T5936] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by ""[5936] [ 97.883835][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.092468][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 98.492425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.913889][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.926978][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.940602][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 99.941508][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.954988][ T9] usb 1-1: config 0 descriptor?? [ 100.005447][ T9] usb 1-1: can't set config #0, error -71 [ 100.014244][ T9] usb 1-1: USB disconnect, device number 3 [ 100.213402][ T5779] Bluetooth: hci3: command tx timeout [ 100.604314][ T5960] netlink: 436 bytes leftover after parsing attributes in process `syz.0.34'. [ 101.336694][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.684889][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 101.714872][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.726116][ T9] usb 1-1: Product: syz [ 101.730344][ T9] usb 1-1: Manufacturer: syz [ 101.758712][ T9] usb 1-1: SerialNumber: syz [ 102.763433][ T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.954780][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.964238][ T5818] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.977578][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.995625][ T788] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.012768][ T788] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 103.044282][ T788] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 103.075750][ T788] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 103.102743][ T788] usb 2-1: config 1 interface 1 has no altsetting 0 [ 103.114253][ T788] usb 2-1: string descriptor 0 read error: -22 [ 103.123833][ T788] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 103.133884][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.242286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.272289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 103.292285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.312127][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 104.445486][ T5960] syz.0.34 (5960) used greatest stack depth: 19272 bytes left [ 104.450556][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.510545][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 104.526103][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.582355][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.590674][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 104.635580][ T5818] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 104.660682][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.670760][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 104.694272][ T5818] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 104.705313][ T5818] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 104.715875][ T5818] usb 3-1: Manufacturer: syz [ 104.727267][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 104.733490][ T5818] usb 3-1: config 0 descriptor?? [ 104.760449][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 104.790981][ T9] lan78xx: probe of 1-1:1.0 failed with error -71 [ 104.849962][ T9] usb 1-1: USB disconnect, device number 4 [ 105.123480][ T5818] rc_core: IR keymap rc-hauppauge not found [ 105.139828][ T5818] Registered IR keymap rc-empty [ 105.152834][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.192482][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.228055][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.253055][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 105.268683][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 105.296326][ T788] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 105.313509][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.362667][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.412544][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.426070][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.439080][ T788] usb 2-1: USB disconnect, device number 2 [ 105.462653][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.468595][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.508010][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.534048][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.553330][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.583948][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.608183][ T5991] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.616175][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.649914][ T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 105.662428][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.712460][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.752404][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.172422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.354593][ T5818] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 107.405114][ T5818] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 107.474911][ T5818] usb 3-1: USB disconnect, device number 2 [ 108.087884][ T5817] usb 1-1: USB disconnect, device number 5 [ 113.852493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 115.410007][ T5779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 115.420146][ T5779] CPU: 0 PID: 5779 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 115.427740][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.438017][ T5779] Workqueue: hci3 hci_rx_work [ 115.442759][ T5779] Call Trace: [ 115.446082][ T5779] [ 115.449044][ T5779] dump_stack_lvl+0x18c/0x250 [ 115.453772][ T5779] ? show_regs_print_info+0x20/0x20 [ 115.459001][ T5779] ? load_image+0x420/0x420 [ 115.463554][ T5779] sysfs_create_dir_ns+0x26e/0x2a0 [ 115.468715][ T5779] ? sysfs_warn_dup+0xa0/0xa0 [ 115.473429][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 115.478683][ T5779] kobject_add_internal+0x61c/0xcc0 [ 115.481666][ T6052] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 115.483916][ T5779] kobject_add+0x164/0x240 [ 115.490622][ T6052] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 115.495038][ T5779] ? __rwlock_init+0x150/0x150 [ 115.507233][ T5779] ? kobject_init+0x1e0/0x1e0 [ 115.511964][ T5779] ? _raw_spin_unlock+0x28/0x40 [ 115.516877][ T5779] ? get_device_parent+0x366/0x390 [ 115.522055][ T5779] device_add+0x408/0xc50 [ 115.526453][ T5779] hci_conn_add_sysfs+0xd5/0x1e0 [ 115.531441][ T5779] le_conn_complete_evt+0xf5d/0x1540 [ 115.536777][ T5779] ? hci_event_packet+0x4cb/0x1270 [ 115.541953][ T5779] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 115.548244][ T5779] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 115.553928][ T5779] ? skb_pull_data+0xfb/0x200 [ 115.558659][ T5779] hci_le_enh_conn_complete_evt+0x189/0x460 [ 115.564612][ T5779] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 115.571074][ T5779] ? hci_remote_host_features_evt+0x150/0x150 [ 115.577194][ T5779] hci_event_packet+0x7ba/0x1270 [ 115.582200][ T5779] ? bis_list+0x290/0x290 [ 115.586584][ T5779] ? lockdep_hardirqs_on+0x98/0x150 [ 115.591827][ T5779] ? hci_send_to_monitor+0xd7/0x4f0 [ 115.597079][ T5779] hci_rx_work+0x43a/0xd60 [ 115.601557][ T5779] ? process_scheduled_works+0x96f/0x15d0 [ 115.605142][ T6052] vhci_hcd vhci_hcd.0: Device attached [ 115.607308][ T5779] process_scheduled_works+0xa5d/0x15d0 [ 115.607373][ T5779] ? worker_attach_to_pool+0x380/0x380 [ 115.624039][ T5779] ? assign_work+0x3d2/0x5d0 [ 115.628682][ T5779] worker_thread+0xa55/0xfc0 [ 115.633353][ T5779] kthread+0x2fa/0x390 [ 115.637479][ T5779] ? pr_cont_work+0x560/0x560 [ 115.642227][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 115.646871][ T5779] ret_from_fork+0x48/0x80 [ 115.651351][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 115.655996][ T5779] ret_from_fork_asm+0x11/0x20 [ 115.660839][ T5779] [ 115.663979][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.675112][ T5779] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 115.689329][ T5779] Bluetooth: hci3: failed to register connection device [ 115.760021][ T6061] Bluetooth: MGMT ver 1.22 [ 115.765646][ T6054] vhci_hcd: connection closed [ 115.771751][ T11] vhci_hcd: stop threads [ 115.781126][ T6061] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 115.783163][ T11] vhci_hcd: release socket [ 115.793604][ T11] vhci_hcd: disconnect device [ 115.802682][ T5818] vhci_hcd: vhci_device speed not set [ 115.951392][ T6063] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.702884][ T5841] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.782240][ C1] sched: RT throttling activated [ 119.028883][ T5841] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 119.041447][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.050786][ T5841] usb 2-1: Product: syz [ 119.057515][ T5841] usb 2-1: Manufacturer: syz [ 119.069232][ T5841] usb 2-1: SerialNumber: syz [ 119.382261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 120.522554][ T5841] usb 2-1: can't set config #1, error -71 [ 120.577338][ T5841] usb 2-1: USB disconnect, device number 3 [ 120.783091][ T6102] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 121.223213][ T5818] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.423507][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 121.435298][ T5818] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.461731][ T5818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.482519][ T5818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.723394][ T5818] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.738185][ T5818] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.748231][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.018623][ T5818] usb 1-1: GET_CAPABILITIES returned 0 [ 122.050120][ T5818] usbtmc 1-1:16.0: can't read capabilities [ 122.647068][ T788] usb 1-1: USB disconnect, device number 6 [ 122.843095][ T5818] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.462495][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 124.473551][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.542826][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.660845][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.672706][ T5818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 124.721690][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.838760][ T5818] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.852170][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.926013][ T5818] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 125.047692][ T5818] usb 4-1: Manufacturer: syz [ 125.154201][ T27] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 125.238243][ T5818] usb 4-1: config 0 descriptor?? [ 125.360113][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.392479][ T27] usb 2-1: Product: syz [ 125.407204][ T27] usb 2-1: Manufacturer: syz [ 125.411920][ T27] usb 2-1: SerialNumber: syz [ 125.457959][ T5818] usb 4-1: can't set config #0, error -71 [ 125.480053][ T5818] usb 4-1: USB disconnect, device number 3 [ 125.579303][ T6144] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 126.034443][ T6148] virt_wifi0 speed is unknown, defaulting to 1000 [ 127.493321][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 127.555408][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 129.120337][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 129.162379][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 129.193349][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 129.282138][ T27] lan78xx: probe of 2-1:1.0 failed with error -71 [ 129.349952][ T27] usb 2-1: USB disconnect, device number 4 [ 129.932347][ T5817] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.142456][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 130.183815][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.202534][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.224646][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 130.245301][ T5817] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 130.274301][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.309322][ T5817] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 130.320712][ T5817] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 130.353747][ T5817] usb 4-1: Manufacturer: syz [ 130.384523][ T5817] usb 4-1: config 0 descriptor?? [ 130.762389][ T5817] rc_core: IR keymap rc-hauppauge not found [ 130.769977][ T5817] Registered IR keymap rc-empty [ 130.777070][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 130.836773][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 130.892419][ T5817] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 130.947633][ T5817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 131.088593][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.163621][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.188197][ T6209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.84'. [ 131.373837][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.615202][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.736881][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.802539][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.984692][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.134918][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.206405][ T5841] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.342093][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.545674][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.656938][ T5841] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 132.744436][ T5817] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 132.762473][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.770785][ T5841] usb 3-1: Product: syz [ 132.781094][ T5817] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 132.790777][ T5841] usb 3-1: Manufacturer: syz [ 132.799231][ T5841] usb 3-1: SerialNumber: syz [ 132.807910][ T5817] usb 4-1: USB disconnect, device number 4 [ 133.052453][ T787] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.175414][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.182671][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.225525][ T5817] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.248757][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 133.259132][ T787] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 133.269292][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 133.279521][ T787] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 133.289413][ T787] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 133.298792][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.311276][ T787] usb 1-1: config 0 descriptor?? [ 133.425063][ T5817] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 133.433684][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.445095][ T5817] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 133.454291][ T5817] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 133.462426][ T5817] usb 4-1: Manufacturer: syz [ 133.470750][ T5817] usb 4-1: config 0 descriptor?? [ 133.563210][ T5817] rc_core: IR keymap rc-hauppauge not found [ 133.577458][ T5817] Registered IR keymap rc-empty [ 133.586150][ T5817] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 133.619193][ T5817] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 133.649626][ T5817] ------------[ cut here ]------------ [ 133.655520][ T5817] usb 4-1: BOGUS control dir, pipe 80000580 doesn't match bRequestType 60 [ 133.673488][ T5817] WARNING: CPU: 0 PID: 5817 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10ac/0x17d0 [ 133.683542][ T5817] Modules linked in: [ 133.687530][ T5817] CPU: 0 PID: 5817 Comm: kworker/0:3 Not tainted syzkaller #0 [ 133.695190][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.705450][ T5817] Workqueue: usb_hub_wq hub_event [ 133.710576][ T5817] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 133.716574][ T5817] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 133.728314][ T5765] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.737978][ T5817] RSP: 0018:ffffc9000479ee00 EFLAGS: 00010246 [ 133.750236][ T5817] RAX: 0023c6be77d02100 RBX: ffff888030d52b00 RCX: 0000000000100000 [ 133.758342][ T5817] RDX: ffffc90018a9d000 RSI: 00000000000823df RDI: 00000000000823e0 [ 133.766588][ T5817] RBP: 1ffff11005c99688 R08: ffffc9000479ea07 R09: 1ffff920008f3d40 [ 133.774779][ T5817] R10: dffffc0000000000 R11: fffff520008f3d41 R12: dffffc0000000000 [ 133.782878][ T5817] R13: ffff88802e4cb440 R14: 0000000080000580 R15: ffff88814c6be0c8 [ 133.790924][ T5817] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 133.800015][ T5817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.806764][ T5817] CR2: 000020000057eff8 CR3: 0000000026910000 CR4: 00000000003506f0 [ 133.815489][ T5817] Call Trace: [ 133.818849][ T5817] [ 133.823373][ T5817] igorplugusb_probe+0x812/0xc60 [ 133.828367][ T5817] usb_probe_interface+0x5c9/0xb20 [ 133.833878][ T5817] ? usb_register_driver+0x3d0/0x3d0 [ 133.839201][ T5817] really_probe+0x25b/0xb20 [ 133.843811][ T5817] ? pm_runtime_barrier+0x14b/0x1c0 [ 133.849073][ T5817] __driver_probe_device+0x1ef/0x390 [ 133.854493][ T5817] driver_probe_device+0x4f/0x420 [ 133.859614][ T5817] __device_attach_driver+0x2ca/0x510 [ 133.865202][ T5817] bus_for_each_drv+0x252/0x2e0 [ 133.870168][ T5817] ? coredump_store+0x90/0x90 [ 133.874992][ T5817] ? bus_find_device+0x300/0x300 [ 133.879989][ T5817] __device_attach+0x2c2/0x420 [ 133.884957][ T5817] ? device_attach+0x20/0x20 [ 133.889628][ T5817] ? __kmem_cache_free+0xba/0x1e0 [ 133.894791][ T5817] ? do_raw_spin_unlock+0x121/0x230 [ 133.900100][ T5817] bus_probe_device+0x180/0x260 [ 133.905080][ T5817] device_add+0x88e/0xc50 [ 133.909926][ T5817] usb_set_configuration+0x1a79/0x20c0 [ 133.915588][ T5817] usb_generic_driver_probe+0x8d/0x150 [ 133.921176][ T5817] usb_probe_device+0x13d/0x270 [ 133.927276][ T5817] ? usb_register_device_driver+0x230/0x230 [ 133.933571][ T5817] really_probe+0x25b/0xb20 [ 133.938155][ T5817] ? pm_runtime_barrier+0x14b/0x1c0 [ 133.942368][ T5765] usb 2-1: Using ep0 maxpacket: 16 [ 133.943465][ T5817] __driver_probe_device+0x1ef/0x390 [ 133.953437][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.953998][ T5817] driver_probe_device+0x4f/0x420 [ 133.968923][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.969107][ T5817] __device_attach_driver+0x2ca/0x510 [ 133.981163][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.985595][ T5817] bus_for_each_drv+0x252/0x2e0 [ 133.985630][ T5817] ? coredump_store+0x90/0x90 [ 133.985655][ T5817] ? bus_find_device+0x300/0x300 [ 133.985732][ T5817] __device_attach+0x2c2/0x420 [ 134.003847][ T5765] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 134.005108][ T5817] ? device_attach+0x20/0x20 [ 134.010257][ T5765] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.014893][ T5817] ? __kmem_cache_free+0xba/0x1e0 [ 134.014937][ T5817] ? do_raw_spin_unlock+0x121/0x230 [ 134.014973][ T5817] bus_probe_device+0x180/0x260 [ 134.015042][ T5817] device_add+0x88e/0xc50 [ 134.035131][ T5765] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.044067][ T5817] usb_new_device+0xa3c/0x1660 [ 134.054674][ T5765] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.059227][ T5817] ? usb_disconnect+0x8a0/0x8a0 [ 134.068154][ T5765] usb 2-1: Manufacturer: syz [ 134.072780][ T5817] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.072820][ T5817] ? lockdep_hardirqs_on+0x98/0x150 [ 134.072856][ T5817] hub_event+0x29bf/0x49f0 [ 134.088634][ T5765] usb 2-1: config 0 descriptor?? [ 134.090696][ T5817] ? hub_post_resume+0x120/0x120 [ 134.120634][ T5817] ? read_lock_is_recursive+0x20/0x20 [ 134.126219][ T5817] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.132914][ T5817] ? process_scheduled_works+0x96f/0x15d0 [ 134.138690][ T5817] ? process_scheduled_works+0x96f/0x15d0 [ 134.144752][ T5817] process_scheduled_works+0xa5d/0x15d0 [ 134.150414][ T5817] ? worker_attach_to_pool+0x380/0x380 [ 134.156008][ T5817] ? assign_work+0x3d2/0x5d0 [ 134.160705][ T5817] worker_thread+0xa55/0xfc0 [ 134.165510][ T5817] kthread+0x2fa/0x390 [ 134.169690][ T5817] ? pr_cont_work+0x560/0x560 [ 134.174520][ T5817] ? kthread_blkcg+0xd0/0xd0 [ 134.179203][ T5817] ret_from_fork+0x48/0x80 [ 134.183782][ T5817] ? kthread_blkcg+0xd0/0xd0 [ 134.188454][ T5817] ret_from_fork_asm+0x11/0x20 [ 134.193386][ T5817] [ 134.196476][ T5817] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.203965][ T5817] CPU: 0 PID: 5817 Comm: kworker/0:3 Not tainted syzkaller #0 [ 134.211444][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.221623][ T5817] Workqueue: usb_hub_wq hub_event [ 134.226678][ T5817] Call Trace: [ 134.229982][ T5817] [ 134.232947][ T5817] dump_stack_lvl+0x18c/0x250 [ 134.237698][ T5817] ? show_regs_print_info+0x20/0x20 [ 134.242937][ T5817] ? load_image+0x420/0x420 [ 134.247486][ T5817] panic+0x2dc/0x730 [ 134.251437][ T5817] ? bpf_jit_dump+0xd0/0xd0 [ 134.256001][ T5817] ? ret_from_fork_asm+0x11/0x20 [ 134.260985][ T5817] __warn+0x2e0/0x470 [ 134.264987][ T5817] ? usb_submit_urb+0x10ac/0x17d0 [ 134.270036][ T5817] ? usb_submit_urb+0x10ac/0x17d0 [ 134.275079][ T5817] report_bug+0x2be/0x4f0 [ 134.279432][ T5817] ? usb_submit_urb+0x10ac/0x17d0 [ 134.284474][ T5817] ? usb_submit_urb+0x10ac/0x17d0 [ 134.289513][ T5817] ? usb_submit_urb+0x10ae/0x17d0 [ 134.294551][ T5817] handle_bug+0xcf/0x120 [ 134.298813][ T5817] exc_invalid_op+0x1a/0x50 [ 134.303340][ T5817] asm_exc_invalid_op+0x1a/0x20 [ 134.308207][ T5817] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 134.313870][ T5817] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 134.333507][ T5817] RSP: 0018:ffffc9000479ee00 EFLAGS: 00010246 [ 134.339597][ T5817] RAX: 0023c6be77d02100 RBX: ffff888030d52b00 RCX: 0000000000100000 [ 134.347678][ T5817] RDX: ffffc90018a9d000 RSI: 00000000000823df RDI: 00000000000823e0 [ 134.355668][ T5817] RBP: 1ffff11005c99688 R08: ffffc9000479ea07 R09: 1ffff920008f3d40 [ 134.363647][ T5817] R10: dffffc0000000000 R11: fffff520008f3d41 R12: dffffc0000000000 [ 134.371630][ T5817] R13: ffff88802e4cb440 R14: 0000000080000580 R15: ffff88814c6be0c8 [ 134.379646][ T5817] igorplugusb_probe+0x812/0xc60 [ 134.384609][ T5817] usb_probe_interface+0x5c9/0xb20 [ 134.389858][ T5817] ? usb_register_driver+0x3d0/0x3d0 [ 134.395179][ T5817] really_probe+0x25b/0xb20 [ 134.399722][ T5817] ? pm_runtime_barrier+0x14b/0x1c0 [ 134.404942][ T5817] __driver_probe_device+0x1ef/0x390 [ 134.410309][ T5817] driver_probe_device+0x4f/0x420 [ 134.415362][ T5817] __device_attach_driver+0x2ca/0x510 [ 134.420758][ T5817] bus_for_each_drv+0x252/0x2e0 [ 134.425622][ T5817] ? coredump_store+0x90/0x90 [ 134.430309][ T5817] ? bus_find_device+0x300/0x300 [ 134.435268][ T5817] __device_attach+0x2c2/0x420 [ 134.440045][ T5817] ? device_attach+0x20/0x20 [ 134.444645][ T5817] ? __kmem_cache_free+0xba/0x1e0 [ 134.449690][ T5817] ? do_raw_spin_unlock+0x121/0x230 [ 134.454905][ T5817] bus_probe_device+0x180/0x260 [ 134.459767][ T5817] device_add+0x88e/0xc50 [ 134.464115][ T5817] usb_set_configuration+0x1a79/0x20c0 [ 134.469619][ T5817] usb_generic_driver_probe+0x8d/0x150 [ 134.475105][ T5817] usb_probe_device+0x13d/0x270 [ 134.479974][ T5817] ? usb_register_device_driver+0x230/0x230 [ 134.485887][ T5817] really_probe+0x25b/0xb20 [ 134.490412][ T5817] ? pm_runtime_barrier+0x14b/0x1c0 [ 134.495623][ T5817] __driver_probe_device+0x1ef/0x390 [ 134.500922][ T5817] driver_probe_device+0x4f/0x420 [ 134.505959][ T5817] __device_attach_driver+0x2ca/0x510 [ 134.511344][ T5817] bus_for_each_drv+0x252/0x2e0 [ 134.516208][ T5817] ? coredump_store+0x90/0x90 [ 134.520903][ T5817] ? bus_find_device+0x300/0x300 [ 134.525855][ T5817] __device_attach+0x2c2/0x420 [ 134.530646][ T5817] ? device_attach+0x20/0x20 [ 134.535254][ T5817] ? __kmem_cache_free+0xba/0x1e0 [ 134.540310][ T5817] ? do_raw_spin_unlock+0x121/0x230 [ 134.545532][ T5817] bus_probe_device+0x180/0x260 [ 134.550397][ T5817] device_add+0x88e/0xc50 [ 134.554747][ T5817] usb_new_device+0xa3c/0x1660 [ 134.559534][ T5817] ? usb_disconnect+0x8a0/0x8a0 [ 134.564409][ T5817] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.569633][ T5817] ? lockdep_hardirqs_on+0x98/0x150 [ 134.574850][ T5817] hub_event+0x29bf/0x49f0 [ 134.579322][ T5817] ? hub_post_resume+0x120/0x120 [ 134.584274][ T5817] ? read_lock_is_recursive+0x20/0x20 [ 134.589664][ T5817] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.594875][ T5817] ? process_scheduled_works+0x96f/0x15d0 [ 134.600614][ T5817] ? process_scheduled_works+0x96f/0x15d0 [ 134.606347][ T5817] process_scheduled_works+0xa5d/0x15d0 [ 134.611951][ T5817] ? worker_attach_to_pool+0x380/0x380 [ 134.617426][ T5817] ? assign_work+0x3d2/0x5d0 [ 134.622034][ T5817] worker_thread+0xa55/0xfc0 [ 134.626661][ T5817] kthread+0x2fa/0x390 [ 134.630743][ T5817] ? pr_cont_work+0x560/0x560 [ 134.635448][ T5817] ? kthread_blkcg+0xd0/0xd0 [ 134.640062][ T5817] ret_from_fork+0x48/0x80 [ 134.644497][ T5817] ? kthread_blkcg+0xd0/0xd0 [ 134.649104][ T5817] ret_from_fork_asm+0x11/0x20 [ 134.653907][ T5817] [ 134.657300][ T5817] Kernel Offset: disabled [ 134.661677][ T5817] Rebooting in 86400 seconds..