last executing test programs: 15.071652782s ago: executing program 3 (id=960): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x1c) syz_open_dev$video4linux(0x0, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r2}, 0x38) 14.219983568s ago: executing program 3 (id=967): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.185174053s ago: executing program 1 (id=986): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x5}, 0x50) shutdown(r2, 0x0) recvfrom$unix(r2, 0x0, 0x59ea5bdad75e44ff, 0x20, 0x0, 0x0) 11.504414895s ago: executing program 1 (id=993): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10.398974173s ago: executing program 3 (id=995): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x2, 0xe8b5c71a5eb6f040, 0x5, 0xb7a7, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x6, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0xb, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x1, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0x9, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x40000001, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x7ffffffc, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0x0, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xbb8, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x1, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x11, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbf7, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x4, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0xddf9402, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@ptr={0xfffffffe, 0x0, 0x0, 0x2, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2}, {0x8}, {}, {}, {0x3, 0x1}, {0xfffffffe}]}, @fwd, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile]}}, 0x0, 0xfffffffffffffe98, 0x0, 0x10000000}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001020000000000000800000081114a00000000009500000000000100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r4) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)={0x9c, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r7, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x3]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2e1}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xa]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000600)={0xfdf9, 0x8, 0x1f}, 0x8) sendto$inet6(r9, &(0x7f0000000080)="00ca8089abc5", 0x6, 0xc001, &(0x7f0000000000)={0xa, 0x0, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3355}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x38, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000440)={&(0x7f0000000180)={0xa, 0x4e1f, 0x80000, @dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/32, @ANYRES32=0x0, @ANYBLOB="00e6a600"], 0x20}, 0x440e0) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) 10.353596629s ago: executing program 0 (id=996): syz_usb_connect$midi(0x0, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000020fd07010040000102030109023c0001011810040904000002010300060d2401"], 0x0) 10.121904477s ago: executing program 1 (id=999): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.896640073s ago: executing program 1 (id=1002): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, 0x0, 0x0) flock(r0, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2020) 8.643919782s ago: executing program 0 (id=1007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8.572215609s ago: executing program 3 (id=1009): r0 = socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xc) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x1f) r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1d, 0x0, 0x0, 0x20066}]}) write$UHID_INPUT(r8, &(0x7f00000021c0)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606", 0x1f}], 0x1}, 0x40000) write$hidraw(r5, &(0x7f00000002c0)="2b5aeb7b332cc3b22b2450f359a52a491b266e2a43810cc8e23746267ad5b7077ba535c87dd93d3e7893983fa9f60e18be4ea0c11060562fa512e7abd3561696be0250578090bfc93cd3301e2622d090841c7927709601a99bf960686f2c4f497eff8c8f9f5b72e163f099530ee33abf229bdc5f1dd84a58b5e4aa4ca4fa5812572d7afbd4724f3bec527f95a6ebe3e4381d8e10666a11a0af92d697c4316c8c2f03f3", 0xa3) 8.375573476s ago: executing program 0 (id=1010): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.375333487s ago: executing program 4 (id=1011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c000780060004400000000006000540000000"], 0x64}}, 0x0) 7.08815556s ago: executing program 4 (id=1013): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, 0x2e, 0x9, 0x70bda7, 0x0, {0x4}, [@typed={0x48, 0x18, 0x0, 0x0, @binary="4fbb52fa25a3b6668c2659071fb4df57bbb92493a9b51bff3c6200da53426b3b7edc4c09d66183806bcb707bfbb5a55b957cff434fa924becf80d7e3d16d5317b512fd6c"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) 6.802693689s ago: executing program 3 (id=1014): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, 0x2e, 0x9, 0x70bda7, 0x0, {0x4}, [@typed={0x48, 0x18, 0x0, 0x0, @binary="4fbb52fa25a3b6668c2659071fb4df57bbb92493a9b51bff3c6200da53426b3b7edc4c09d66183806bcb707bfbb5a55b957cff434fa924becf80d7e3d16d5317b512fd6c"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) openat$cgroup_type(r6, &(0x7f0000000340), 0x2, 0x0) 6.44620077s ago: executing program 2 (id=1016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000140)=r3) 6.4427806s ago: executing program 0 (id=1017): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x880, 0x0, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x74, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x6, "02270e00"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, '\x00\x00\x00\x00\x00\x00\x00'}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}, "9efee122"}}}}}, 0x0) 5.311737798s ago: executing program 4 (id=1018): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESDEC]) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x30000010}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000002840)={'syz', 0x2}, &(0x7f00000011c0)="f40f", 0x2, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r5, r4, r4}, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000001c0)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5.299619943s ago: executing program 0 (id=1019): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001640)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={0x0}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) 5.105779785s ago: executing program 3 (id=1020): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10010, 0xffffffffffffffff, 0xffffc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1a1) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f0000000280)=ANY=[@ANYBLOB=' \t'], 0x33) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffff0, 0x2400) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000680)=@urb_type_iso={0x0, {0xd, 0x1}, 0x1f, 0x0, &(0x7f0000000080)="d83614df691cc4f14ad41fd22363786e094d8b33db210ddc895f40c54b82646da30b5f", 0x23, 0x9, 0x6, 0x1c, 0x6, 0x8, &(0x7f00000000c0)="092aa28f283a77727aa191645059d86c5ca30be4d81bb8", [{0x4, 0x2, 0x4}, {0xb06a1b57, 0x28f9, 0x1}, {0x0, 0xdfa0, 0xd}, {0x9, 0x8, 0x80000000}, {0x3, 0x1ff, 0x47}, {0xffffff00, 0x7}, {0xfffffff9, 0xfffffff8}, {0x4, 0xfffffff8, 0x7}, {0x80000001, 0x1, 0x1}, {0x1, 0x5, 0x9}, {0xfffffff9, 0x4, 0x8}, {0x100, 0xa99c}, {0x63, 0x2, 0x8}, {0x400, 0x2}, {0xb, 0x6, 0x8d0}, {0x5, 0x1}, {0x8, 0x5, 0xfffffff7}, {0x8, 0x5, 0x9}, {0x80, 0xffff, 0x7}, {0xc00, 0x3, 0xe}, {0x2, 0x0, 0xffffff4b}, {0x10001, 0x3}, {0x9, 0x1000, 0xc6}, {0x1, 0x9, 0x1}, {0x0, 0x6, 0x3}, {0x1, 0x1, 0x7}, {0x2, 0x8}, {0xa, 0x5, 0x7}]}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(r4, 0x0, 0x0) 2.41887s ago: executing program 4 (id=1021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.312897806s ago: executing program 0 (id=1022): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) prlimit64(0x0, 0x8, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.312756528s ago: executing program 2 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf2d350000000800", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 2.182505669s ago: executing program 2 (id=1024): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a800160004001440060003", 0x3b}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.997455886s ago: executing program 2 (id=1025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.945468067s ago: executing program 4 (id=1026): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54", 0xe) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r7, &(0x7f0000000100)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000140)="aa1d4880424b4a00f7fc08fcd111fbdf23ea8b21d5bc273fdaf49ab3a91ffa06f0e9", 0x22}], 0x2) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be3f9ffb4d1cea46baf6c1d0000007ea20864160208000200030001001400000007b556a737c160f9555b4755bb000000000000000f51e60a84c9f49df19b3a616cad37e786a6", 0x50}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x2000c004) 1.836956769s ago: executing program 1 (id=1027): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54", 0xe) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900840000000001000000940001000000fc13c40000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be3f9ffb4d1cea46baf6c1d0000007ea20864160208000200030001001400000007b556a737c160f9555b4755bb000000000000000f51e60a84c9f49df19b3a616cad37e786a6", 0x50}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x2000c004) 1.761275881s ago: executing program 2 (id=1028): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, 0x2e, 0x9, 0x70bda7, 0x0, {0x4}, [@typed={0x48, 0x18, 0x0, 0x0, @binary="4fbb52fa25a3b6668c2659071fb4df57bbb92493a9b51bff3c6200da53426b3b7edc4c09d66183806bcb707bfbb5a55b957cff434fa924becf80d7e3d16d5317b512fd6c"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) 194.548101ms ago: executing program 2 (id=1029): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x4, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cc84d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0xce24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4c93}}, 0x0, 0x0, 0x30, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x230) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r6 = socket$rxrpc(0x21, 0x2, 0xa) listen(r6, 0x4) r7 = epoll_create(0xd) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000040)={0x1000000d}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x9, 0x7, 0xb, 0x2, 0x3, 0xcd}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.02023ms ago: executing program 1 (id=1030): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r4, &(0x7f0000000280)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r7 = socket(0x2c, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp=r7}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, 0x0, 0x0) syz_emit_ethernet(0x80, 0x0, 0x0) 0s ago: executing program 4 (id=1031): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, 0x2e, 0x9, 0x70bda7, 0x0, {0x4}, [@typed={0x48, 0x18, 0x0, 0x0, @binary="4fbb52fa25a3b6668c2659071fb4df57bbb92493a9b51bff3c6200da53426b3b7edc4c09d66183806bcb707bfbb5a55b957cff434fa924becf80d7e3d16d5317b512fd6c"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. [ 84.831098][ T5785] cgroup: Unknown subsys name 'net' [ 85.081539][ T5785] cgroup: Unknown subsys name 'cpuset' [ 85.127394][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.975450][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.040580][ T1834] cfg80211: failed to load regulatory.db [ 90.527337][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.530322][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.532150][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.558471][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.565847][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.570143][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.572614][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.573340][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.574783][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.575551][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.663054][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.668721][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.679034][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.681790][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.683196][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.684277][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.685335][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.685651][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.688763][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.689634][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.691966][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.754240][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.764269][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.768134][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.787902][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.585711][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 91.640934][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 91.699307][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 91.728692][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 91.941790][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 92.050163][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.051207][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.051336][ T5804] bridge_slave_0: entered allmulticast mode [ 92.053031][ T5804] bridge_slave_0: entered promiscuous mode [ 92.113070][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.113217][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.113390][ T5804] bridge_slave_1: entered allmulticast mode [ 92.114971][ T5804] bridge_slave_1: entered promiscuous mode [ 92.138160][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.138290][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.138444][ T5798] bridge_slave_0: entered allmulticast mode [ 92.140917][ T5798] bridge_slave_0: entered promiscuous mode [ 92.208355][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.208541][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.208713][ T5798] bridge_slave_1: entered allmulticast mode [ 92.210608][ T5798] bridge_slave_1: entered promiscuous mode [ 92.211748][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.211880][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.211984][ T5803] bridge_slave_0: entered allmulticast mode [ 92.213599][ T5803] bridge_slave_0: entered promiscuous mode [ 92.249415][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.249540][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.249695][ T5799] bridge_slave_0: entered allmulticast mode [ 92.253152][ T5799] bridge_slave_0: entered promiscuous mode [ 92.288673][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.288800][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.288955][ T5803] bridge_slave_1: entered allmulticast mode [ 92.291876][ T5803] bridge_slave_1: entered promiscuous mode [ 92.309775][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.310201][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.310319][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.310486][ T5799] bridge_slave_1: entered allmulticast mode [ 92.312992][ T5799] bridge_slave_1: entered promiscuous mode [ 92.395967][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.417546][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.479338][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.482292][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.482532][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.482664][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.482835][ T5800] bridge_slave_0: entered allmulticast mode [ 92.484765][ T5800] bridge_slave_0: entered promiscuous mode [ 92.513882][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.538198][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.679764][ T5804] team0: Port device team_slave_0 added [ 92.682913][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.714501][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.714630][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.714934][ T5800] bridge_slave_1: entered allmulticast mode [ 92.717387][ T5800] bridge_slave_1: entered promiscuous mode [ 92.726722][ T60] Bluetooth: hci4: command tx timeout [ 92.726907][ T60] Bluetooth: hci0: command tx timeout [ 92.726987][ T60] Bluetooth: hci1: command tx timeout [ 92.730351][ T5804] team0: Port device team_slave_1 added [ 92.753830][ T5798] team0: Port device team_slave_0 added [ 92.796632][ T5805] Bluetooth: hci3: command tx timeout [ 92.822661][ T5798] team0: Port device team_slave_1 added [ 92.830906][ T5803] team0: Port device team_slave_0 added [ 92.870572][ T5799] team0: Port device team_slave_0 added [ 92.877365][ T5805] Bluetooth: hci2: command tx timeout [ 92.890100][ T5803] team0: Port device team_slave_1 added [ 92.893487][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.895835][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.895853][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.895880][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.904604][ T5799] team0: Port device team_slave_1 added [ 92.948958][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.949865][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.949877][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.949900][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.994146][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.994164][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.994187][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.053360][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.053377][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.053399][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.055655][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.055667][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.055690][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.082761][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.082779][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.082802][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.085857][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.085872][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.085895][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.107735][ T5800] team0: Port device team_slave_0 added [ 93.110034][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.110047][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.110070][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.147538][ T5800] team0: Port device team_slave_1 added [ 93.243337][ T5804] hsr_slave_0: entered promiscuous mode [ 93.244855][ T5804] hsr_slave_1: entered promiscuous mode [ 93.310023][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.310036][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.310051][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.319380][ T5798] hsr_slave_0: entered promiscuous mode [ 93.320626][ T5798] hsr_slave_1: entered promiscuous mode [ 93.321554][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 93.321644][ T5798] Cannot create hsr debugfs directory [ 93.365277][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.365294][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.365318][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.379581][ T5803] hsr_slave_0: entered promiscuous mode [ 93.380975][ T5803] hsr_slave_1: entered promiscuous mode [ 93.381914][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 93.381937][ T5803] Cannot create hsr debugfs directory [ 93.451114][ T5799] hsr_slave_0: entered promiscuous mode [ 93.452433][ T5799] hsr_slave_1: entered promiscuous mode [ 93.454611][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 93.454636][ T5799] Cannot create hsr debugfs directory [ 94.023379][ T5800] hsr_slave_0: entered promiscuous mode [ 94.024537][ T5800] hsr_slave_1: entered promiscuous mode [ 94.025147][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 94.025176][ T5800] Cannot create hsr debugfs directory [ 94.562528][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.607233][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.645296][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.686173][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.783466][ T5798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.797142][ T5805] Bluetooth: hci1: command tx timeout [ 94.797176][ T5805] Bluetooth: hci0: command tx timeout [ 94.797197][ T5805] Bluetooth: hci4: command tx timeout [ 94.843103][ T5798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.864621][ T5798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.876781][ T60] Bluetooth: hci3: command tx timeout [ 94.920891][ T5798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.957667][ T60] Bluetooth: hci2: command tx timeout [ 95.064584][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.098850][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.146388][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.200350][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.340085][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.384677][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.419672][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.472166][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.617572][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.620452][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.665279][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.690402][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.724250][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.812425][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.858648][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.859457][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.873727][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.911088][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.911259][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.970514][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.975734][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.031204][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.031379][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.080056][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.080278][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.114238][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.159643][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.159805][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.173096][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.199360][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.199519][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.311843][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.321033][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.373380][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.375258][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.442839][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.453834][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.513224][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.558165][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.558473][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.603892][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.616187][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.726355][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.878772][ T5116] Bluetooth: hci1: command tx timeout [ 96.878869][ T5805] Bluetooth: hci0: command tx timeout [ 96.878948][ T60] Bluetooth: hci4: command tx timeout [ 96.956938][ T60] Bluetooth: hci3: command tx timeout [ 96.968662][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.048221][ T60] Bluetooth: hci2: command tx timeout [ 97.063407][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.157274][ T5804] veth0_vlan: entered promiscuous mode [ 97.243892][ T5804] veth1_vlan: entered promiscuous mode [ 97.455934][ T5799] veth0_vlan: entered promiscuous mode [ 97.473286][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.510930][ T5804] veth0_macvtap: entered promiscuous mode [ 97.538427][ T5799] veth1_vlan: entered promiscuous mode [ 97.550427][ T5804] veth1_macvtap: entered promiscuous mode [ 97.600201][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.635986][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.670344][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.713445][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.742133][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.760911][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.761349][ T5799] veth0_macvtap: entered promiscuous mode [ 97.769841][ T5803] veth0_vlan: entered promiscuous mode [ 97.789468][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.802497][ T5799] veth1_macvtap: entered promiscuous mode [ 97.857149][ T5798] veth0_vlan: entered promiscuous mode [ 97.895406][ T5803] veth1_vlan: entered promiscuous mode [ 98.022940][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.024436][ T5798] veth1_vlan: entered promiscuous mode [ 98.031952][ T5800] veth0_vlan: entered promiscuous mode [ 98.053524][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.107262][ T5800] veth1_vlan: entered promiscuous mode [ 98.111449][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.132683][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.132700][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.136632][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.180043][ T3556] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.191434][ T3556] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.292178][ T5803] veth0_macvtap: entered promiscuous mode [ 98.310021][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.310037][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.378719][ T5803] veth1_macvtap: entered promiscuous mode [ 98.401768][ T5798] veth0_macvtap: entered promiscuous mode [ 98.471065][ T5798] veth1_macvtap: entered promiscuous mode [ 98.559784][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.580125][ T5800] veth0_macvtap: entered promiscuous mode [ 98.611145][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.611169][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.619579][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.650097][ T5800] veth1_macvtap: entered promiscuous mode [ 98.670047][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.709959][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.748805][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.773859][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.774815][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.801406][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.814737][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.814760][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.881824][ T1105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.885156][ T1105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.905988][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.908177][ T1105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.928168][ T1105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.956661][ T60] Bluetooth: hci4: command tx timeout [ 98.956698][ T60] Bluetooth: hci0: command tx timeout [ 98.956720][ T60] Bluetooth: hci1: command tx timeout [ 99.009222][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.036935][ T5805] Bluetooth: hci3: command tx timeout [ 99.110106][ T4376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.133001][ T5805] Bluetooth: hci2: command tx timeout [ 99.145157][ T4376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.165615][ T4376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.209080][ T4376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.348043][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.348067][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.647693][ T5922] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.950515][ T5921] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 101.003002][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.003026][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.120891][ T5929] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7'. [ 101.345713][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.345728][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.527248][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.527273][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.736228][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.736251][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.915765][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.915791][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.428486][ T5959] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 106.527297][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 106.527322][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 106.527347][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 106.532195][ T5963] Zero length message leads to an empty skb [ 106.621844][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 106.621870][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 106.621895][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 106.623153][ T1121] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.666629][ T1121] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.670933][ T1121] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.673475][ T1121] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.046924][ T5864] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 108.280774][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.280799][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.280824][ T5864] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.280841][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.375212][ T5864] usb 2-1: config 0 descriptor?? [ 108.433555][ T5864] hub 2-1:0.0: USB hub found [ 108.672560][ T5864] hub 2-1:0.0: 1 port detected [ 109.309807][ T5864] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 109.372037][ T1834] usb 2-1: USB disconnect, device number 2 [ 109.373501][ T3556] usb 2-1: Failed to suspend device, error -71 [ 110.115980][ T5981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.21'. [ 111.611682][ T37] audit: type=1326 audit(1775262408.130:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5987 comm="syz.1.25" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f977ba6c819 code=0x0 [ 114.668891][ T6013] syz.1.30 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 117.868349][ T6027] netlink: 68 bytes leftover after parsing attributes in process `syz.4.34'. [ 117.983287][ T6032] netlink: 36 bytes leftover after parsing attributes in process `syz.3.35'. [ 118.176924][ T6038] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 118.185313][ T5864] IPVS: starting estimator thread 0... [ 118.316748][ T6039] IPVS: using max 7 ests per chain, 16800 per kthread [ 121.794183][ T6064] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 121.803045][ T6064] process 'syz.4.43' launched './file0' with NULL argv: empty string added [ 122.046455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.965138][ T6080] netlink: 68 bytes leftover after parsing attributes in process `syz.3.48'. [ 124.061612][ T6082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.49'. [ 124.064999][ T6087] syz_tun: entered allmulticast mode [ 124.092433][ T6085] syz_tun: left allmulticast mode [ 125.784826][ T6133] netlink: 268 bytes leftover after parsing attributes in process `syz.3.55'. [ 127.366637][ T5883] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.487249][ T6102] syz.2.53 (6102) used greatest stack depth: 18112 bytes left [ 127.556662][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 127.570406][ T5883] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 127.570436][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.833281][ T5883] pvrusb2: Hardware description: Terratec Grabster AV400 [ 127.833294][ T5883] pvrusb2: ********** [ 127.833299][ T5883] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 127.833305][ T5883] pvrusb2: Important functionality might not be entirely working. [ 127.833310][ T5883] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 127.833316][ T5883] pvrusb2: ********** [ 127.913391][ T2368] pvrusb2: Invalid write control endpoint [ 129.107604][ T5913] usb 2-1: USB disconnect, device number 3 [ 129.264793][ T2368] pvrusb2: Invalid write control endpoint [ 129.264811][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 129.264821][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 129.264830][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 129.264840][ T2368] pvrusb2: Device being rendered inoperable [ 129.265866][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 129.266271][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 129.349641][ T2368] pvrusb2: Attached sub-driver cx25840 [ 129.349658][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 129.349668][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 131.730371][ T5864] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 131.928565][ T5864] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.928597][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.928618][ T5864] usb 2-1: Product: syz [ 131.928633][ T5864] usb 2-1: Manufacturer: syz [ 131.928648][ T5864] usb 2-1: SerialNumber: syz [ 131.948910][ T5864] usb 2-1: config 0 descriptor?? [ 133.073331][ T5864] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 133.076063][ T5864] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 133.138633][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.138762][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.279072][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 134.507332][ T5973] usb 2-1: USB disconnect, device number 4 [ 135.034078][ T6250] netlink: 268 bytes leftover after parsing attributes in process `syz.1.70'. [ 135.826451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.354738][ T6304] netlink: 268 bytes leftover after parsing attributes in process `syz.3.78'. [ 138.386678][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.703048][ T5883] usb 2-1: no configurations [ 138.703071][ T5883] usb 2-1: can't read configurations, error -22 [ 138.748370][ T5973] IPVS: starting estimator thread 0... [ 139.988436][ T6311] IPVS: using max 13 ests per chain, 31200 per kthread [ 140.152107][ T5883] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.427722][ T5883] usb 2-1: no configurations [ 140.427744][ T5883] usb 2-1: can't read configurations, error -22 [ 140.436699][ T5883] usb usb2-port1: attempt power cycle [ 140.806668][ T5883] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.016787][ T5883] usb 2-1: device not accepting address 7, error -71 [ 141.476607][ T5883] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.527008][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 141.576910][ T5883] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.576934][ T5883] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.576962][ T5883] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 141.576978][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.608639][ T5883] usb 2-1: config 0 descriptor?? [ 142.156146][ T5883] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 142.598551][ T5883] usb 2-1: USB disconnect, device number 8 [ 142.806288][ T6326] fido_id[6326]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 145.633693][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 148.586369][ T6429] syz.0.110 (6429) used greatest stack depth: 17872 bytes left [ 149.376452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.410930][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'. [ 156.464751][ T6565] mmap: syz.4.147 (6565) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 160.197014][ T6599] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.348114][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 164.015883][ T6676] netlink: 268 bytes leftover after parsing attributes in process `syz.1.174'. [ 164.206458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 165.216447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.685774][ T6705] netlink: 68 bytes leftover after parsing attributes in process `syz.0.184'. [ 169.601440][ T6736] netlink: 68 bytes leftover after parsing attributes in process `syz.4.198'. [ 169.636529][ T5973] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 169.800614][ T5973] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 169.800649][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.800670][ T5973] usb 1-1: Product: syz [ 169.800685][ T5973] usb 1-1: Manufacturer: syz [ 169.800700][ T5973] usb 1-1: SerialNumber: syz [ 169.842003][ T5973] usb 1-1: config 0 descriptor?? [ 170.097265][ T5973] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 170.691268][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029507800: rx timeout, send abort [ 170.694359][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029507800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 170.861334][ T6767] netlink: 68 bytes leftover after parsing attributes in process `syz.4.210'. [ 171.955340][ T5973] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 172.356705][ T5973] usb 1-1: USB disconnect, device number 2 [ 175.338469][ T37] audit: type=1326 audit(1775262472.540:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6822 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab1fc819 code=0x7ffc0000 [ 175.385464][ T37] audit: type=1326 audit(1775262472.590:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6822 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f17ab1fc819 code=0x7ffc0000 [ 175.446277][ T37] audit: type=1326 audit(1775262472.630:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6822 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab1fc819 code=0x7ffc0000 [ 175.446318][ T37] audit: type=1326 audit(1775262472.630:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6822 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f17ab1fc819 code=0x7ffc0000 [ 175.446343][ T37] audit: type=1326 audit(1775262472.630:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6822 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab1fc819 code=0x7ffc0000 [ 175.446368][ T37] audit: type=1326 audit(1775262472.630:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6822 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f17ab1fc819 code=0x7ffc0000 [ 175.447210][ T37] audit: type=1326 audit(1775262472.630:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6822 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab1fc819 code=0x7ffc0000 [ 175.447252][ T37] audit: type=1326 audit(1775262472.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6822 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab1fc819 code=0x7ffc0000 [ 175.447290][ T37] audit: type=1326 audit(1775262472.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6822 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f17ab1fc819 code=0x7ffc0000 [ 175.447329][ T37] audit: type=1326 audit(1775262472.640:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6822 comm="syz.0.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab1fc819 code=0x7ffc0000 [ 178.332457][ T5913] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 179.266534][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 179.270617][ T5913] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 179.270649][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.408727][ T5913] pvrusb2: Hardware description: Terratec Grabster AV400 [ 179.408746][ T5913] pvrusb2: ********** [ 179.408752][ T5913] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 179.408764][ T5913] pvrusb2: Important functionality might not be entirely working. [ 179.424471][ T5913] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 179.424489][ T5913] pvrusb2: ********** [ 179.592825][ T2368] pvrusb2: Invalid write control endpoint [ 180.923212][ T2368] pvrusb2: Invalid write control endpoint [ 180.923231][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 180.923241][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 180.923249][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 180.923260][ T2368] pvrusb2: Device being rendered inoperable [ 180.936264][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 180.936326][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 180.940880][ T2368] pvrusb2: Attached sub-driver cx25840 [ 180.940896][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 180.940905][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 182.066445][ T6931] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 182.120833][ T5913] usb 5-1: USB disconnect, device number 2 [ 184.456561][ T5913] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 184.616618][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 184.619411][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 184.619442][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.672389][ T5913] pvrusb2: Hardware description: Terratec Grabster AV400 [ 184.672407][ T5913] pvrusb2: ********** [ 184.672414][ T5913] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 184.672426][ T5913] pvrusb2: Important functionality might not be entirely working. [ 184.672434][ T5913] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 184.672445][ T5913] pvrusb2: ********** [ 184.833128][ T6975] netlink: 268 bytes leftover after parsing attributes in process `syz.0.291'. [ 185.014589][ T2368] pvrusb2: Invalid write control endpoint [ 186.854621][ T6986] netlink: 36 bytes leftover after parsing attributes in process `syz.1.294'. [ 186.889233][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 187.048603][ T2368] pvrusb2: Invalid write control endpoint [ 187.048619][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 187.048629][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 187.048637][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 187.048646][ T2368] pvrusb2: Device being rendered inoperable [ 187.048683][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 187.048743][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 187.049955][ T2368] pvrusb2: Attached sub-driver cx25840 [ 187.049967][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 187.049977][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 187.883840][ T9] usb 4-1: USB disconnect, device number 2 [ 189.698403][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'. [ 189.816582][ T5913] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 189.977388][ T5913] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 189.977424][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.977445][ T5913] usb 5-1: Product: syz [ 189.977460][ T5913] usb 5-1: Manufacturer: syz [ 189.977475][ T5913] usb 5-1: SerialNumber: syz [ 190.019369][ T5913] usb 5-1: config 0 descriptor?? [ 190.238376][ T5913] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 191.418865][ T5913] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 191.448689][ T7047] syz.1.314 (7047) used greatest stack depth: 17632 bytes left [ 192.584548][ T5973] usb 5-1: USB disconnect, device number 3 [ 193.998031][ T7109] befs: (nbd3): No write support. Marking filesystem read-only [ 194.446701][ T7102] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 194.469613][ T7113] ubi31: attaching mtd0 [ 194.472372][ T7113] ubi31: scanning is finished [ 194.472387][ T7113] ubi31: empty MTD device detected [ 194.506135][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.335'. [ 194.515791][ T7102] netlink: 'syz.4.335': attribute type 2 has an invalid length. [ 194.563885][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.563967][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.746819][ T7121] netlink: 268 bytes leftover after parsing attributes in process `syz.3.343'. [ 195.016565][ T7113] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 195.016597][ T7113] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 195.016616][ T7113] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 195.016632][ T7113] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 195.016650][ T7113] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 195.016665][ T7113] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 195.016681][ T7113] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1058988551 [ 195.016699][ T7113] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 195.019065][ T7124] ubi31: background thread "ubi_bgt31d" started, PID 7124 [ 196.599205][ T7143] befs: (nbd0): No write support. Marking filesystem read-only [ 197.716584][ T5973] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 197.939522][ T5973] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 197.939556][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.939577][ T5973] usb 1-1: Product: syz [ 197.939592][ T5973] usb 1-1: Manufacturer: syz [ 197.939607][ T5973] usb 1-1: SerialNumber: syz [ 197.952103][ T5973] usb 1-1: config 0 descriptor?? [ 199.069418][ T5973] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 199.069537][ T5973] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 199.412251][ T7174] netlink: 268 bytes leftover after parsing attributes in process `syz.4.367'. [ 200.676996][ T9] usb 1-1: USB disconnect, device number 3 [ 201.173527][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 201.173595][ T7199] netlink: 'syz.0.370': attribute type 2 has an invalid length. [ 204.497984][ T5973] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 205.422545][ T5973] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 205.422579][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.422609][ T5973] usb 2-1: Product: syz [ 205.422624][ T5973] usb 2-1: Manufacturer: syz [ 205.422639][ T5973] usb 2-1: SerialNumber: syz [ 205.478719][ T5973] usb 2-1: config 0 descriptor?? [ 205.547502][ T5973] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 205.693249][ T5973] gspca_sunplus: reg_r err -71 [ 205.716433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 205.737382][ T5973] usb 2-1: USB disconnect, device number 9 [ 206.837125][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 209.376594][ T5864] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 209.407301][ T7281] netlink: 268 bytes leftover after parsing attributes in process `syz.1.404'. [ 210.728904][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.728943][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.728985][ T5864] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.729010][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.798964][ T5864] usb 1-1: config 0 descriptor?? [ 210.857015][ T5864] hub 1-1:0.0: USB hub found [ 211.033712][ T5864] hub 1-1:0.0: 1 port detected [ 211.242151][ T5864] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 211.242185][ T5864] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 211.301926][ T5864] usbhid 1-1:0.0: can't add hid device: -71 [ 211.302073][ T5864] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 212.506739][ T5864] usb 1-1: USB disconnect, device number 4 [ 216.637876][ T7335] netlink: 68 bytes leftover after parsing attributes in process `syz.4.420'. [ 217.225915][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 217.225958][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 217.225984][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 217.842969][ T5116] Bluetooth: hci1: command 0x0406 tx timeout [ 217.842983][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 219.918757][ T7374] netlink: 68 bytes leftover after parsing attributes in process `syz.0.435'. [ 222.036625][ T5864] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 222.176530][ T5864] usb 2-1: device descriptor read/64, error -71 [ 222.422076][ T5864] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 222.686067][ T5864] usb 2-1: device descriptor read/64, error -71 [ 222.797099][ T5864] usb usb2-port1: attempt power cycle [ 223.656650][ T5864] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 223.679465][ T5864] usb 2-1: device descriptor read/8, error -71 [ 224.071854][ T5864] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 224.099074][ T5864] usb 2-1: device descriptor read/8, error -71 [ 224.412331][ T5864] usb usb2-port1: unable to enumerate USB device [ 227.006409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 228.107775][ T5973] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 228.456671][ T5973] usb 2-1: device descriptor read/64, error -71 [ 228.716914][ T5973] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 228.751453][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 228.751472][ T37] audit: type=1326 audit(1775262525.960:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7471 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 228.764046][ T37] audit: type=1326 audit(1775262525.960:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7471 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 228.764108][ T37] audit: type=1326 audit(1775262525.960:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7471 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 228.764203][ T37] audit: type=1326 audit(1775262525.960:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7471 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 228.764246][ T37] audit: type=1326 audit(1775262525.960:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7471 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 228.764273][ T37] audit: type=1326 audit(1775262525.960:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7471 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 228.764299][ T37] audit: type=1326 audit(1775262525.970:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7471 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 228.764323][ T37] audit: type=1326 audit(1775262525.970:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7471 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 228.764348][ T37] audit: type=1326 audit(1775262525.970:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7471 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 228.768682][ T7480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.474'. [ 228.783486][ T37] audit: type=1326 audit(1775262525.990:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7471 comm="syz.4.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 228.871148][ T5973] usb 2-1: device descriptor read/64, error -71 [ 228.979620][ T5973] usb usb2-port1: attempt power cycle [ 229.601010][ T7492] syzkaller1: entered promiscuous mode [ 229.601038][ T7492] syzkaller1: entered allmulticast mode [ 229.756556][ T808] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 229.886683][ T808] usb 4-1: device descriptor read/64, error -71 [ 230.166625][ T808] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 230.296552][ T808] usb 4-1: device descriptor read/64, error -71 [ 230.413469][ T808] usb usb4-port1: attempt power cycle [ 230.536429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 230.556438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 230.566423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.649929][ T808] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 232.082049][ T808] usb 4-1: device descriptor read/8, error -71 [ 232.323454][ T808] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 232.386965][ T808] usb 4-1: device descriptor read/8, error -71 [ 232.446634][ T993] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 232.511952][ T808] usb usb4-port1: unable to enumerate USB device [ 232.599135][ T993] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 232.599166][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.664522][ T993] usb 1-1: config 0 descriptor?? [ 233.896550][ T993] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 233.897122][ T993] [drm:udl_init] *ERROR* Selecting channel failed [ 234.614011][ T993] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 234.614030][ T993] [drm] Initialized udl on minor 2 [ 234.682257][ T993] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 234.686127][ T993] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 234.720163][ T5973] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 234.749358][ T993] usb 1-1: USB disconnect, device number 5 [ 234.751136][ T5973] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 234.751927][ T5973] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 235.538447][ T7556] overlayfs: failed to resolve './file1/file0': -2 [ 235.648322][ T7556] netlink: 'syz.4.501': attribute type 39 has an invalid length. [ 237.068103][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 237.068126][ T37] audit: type=1326 audit(1775262534.230:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 237.069724][ T37] audit: type=1326 audit(1775262534.240:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 237.071215][ T37] audit: type=1326 audit(1775262534.240:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 237.072824][ T37] audit: type=1326 audit(1775262534.250:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 237.072870][ T37] audit: type=1326 audit(1775262534.250:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 237.072914][ T37] audit: type=1326 audit(1775262534.250:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 237.072957][ T37] audit: type=1326 audit(1775262534.250:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 237.073000][ T37] audit: type=1326 audit(1775262534.250:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 237.073046][ T37] audit: type=1326 audit(1775262534.250:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 237.073090][ T37] audit: type=1326 audit(1775262534.250:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7577 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 238.116608][ T5973] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 238.246498][ T5973] usb 2-1: device descriptor read/64, error -71 [ 238.488459][ T5973] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 238.616500][ T5973] usb 2-1: device descriptor read/64, error -71 [ 238.727665][ T5973] usb usb2-port1: attempt power cycle [ 238.909836][ T7610] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 239.225965][ T5973] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 239.258648][ T5973] usb 2-1: device descriptor read/8, error -71 [ 239.578437][ T5973] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 239.612704][ T5973] usb 2-1: device descriptor read/8, error -71 [ 239.719312][ T5973] usb usb2-port1: unable to enumerate USB device [ 241.146485][ T5973] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 241.298974][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.299011][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.299054][ T5973] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 241.299079][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.371320][ T5973] usb 5-1: config 0 descriptor?? [ 241.393694][ T5973] hub 5-1:0.0: USB hub found [ 242.643764][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 242.643931][ T5973] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 242.734264][ T5973] usbhid 5-1:0.0: can't add hid device: -71 [ 242.734413][ T5973] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 242.797827][ T5973] usb 5-1: USB disconnect, device number 4 [ 247.566550][ T5885] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 247.663063][ T7730] netlink: 68 bytes leftover after parsing attributes in process `syz.3.571'. [ 247.749018][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.749055][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.749095][ T5885] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 247.749119][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.757610][ T5885] usb 5-1: config 0 descriptor?? [ 247.789314][ T5885] hub 5-1:0.0: USB hub found [ 247.969823][ T5885] hub 5-1:0.0: 1 port detected [ 248.425587][ T5885] usb 5-1: USB disconnect, device number 5 [ 248.766987][ T993] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 248.863591][ T7760] overlayfs: failed to resolve './file1/file0': -2 [ 248.922581][ T7760] netlink: 'syz.3.583': attribute type 39 has an invalid length. [ 248.946525][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 248.960658][ T993] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.960693][ T993] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.960728][ T993] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 248.960749][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.968476][ T993] usb 1-1: config 0 descriptor?? [ 249.303431][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.585'. [ 249.491266][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.585'. [ 249.621007][ T993] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 249.967907][ T993] usb 1-1: USB disconnect, device number 6 [ 250.128925][ T7774] fido_id[7774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 254.280704][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 254.386716][ T993] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 254.548857][ T993] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.549462][ T993] usb 1-1: not running at top speed; connect to a high speed hub [ 254.550694][ T993] usb 1-1: config 6 has an invalid interface number: 162 but max is 0 [ 254.550721][ T993] usb 1-1: config 6 has no interface number 0 [ 254.550771][ T993] usb 1-1: config 6 interface 162 has no altsetting 0 [ 254.558197][ T993] usb 1-1: New USB device found, idVendor=0846, idProduct=9041, bcdDevice=d7.c4 [ 254.558226][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.558245][ T993] usb 1-1: Product: syz [ 254.558258][ T993] usb 1-1: Manufacturer: syz [ 254.558271][ T993] usb 1-1: SerialNumber: syz [ 255.823742][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 255.823762][ T37] audit: type=1326 audit(1775262553.030:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7852 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 255.823815][ T37] audit: type=1326 audit(1775262553.030:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7852 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 255.823859][ T37] audit: type=1326 audit(1775262553.030:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7852 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 255.824177][ T37] audit: type=1326 audit(1775262553.030:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7852 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 255.838200][ T37] audit: type=1326 audit(1775262553.030:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7852 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 255.899756][ T37] audit: type=1326 audit(1775262553.100:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7852 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 255.910119][ T37] audit: type=1326 audit(1775262553.120:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7852 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 256.007790][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.007872][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.033333][ T37] audit: type=1326 audit(1775262553.220:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7852 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 256.033372][ T37] audit: type=1326 audit(1775262553.220:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7852 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 256.033399][ T37] audit: type=1326 audit(1775262553.220:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7852 comm="syz.3.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0246dfc819 code=0x7ffc0000 [ 256.109578][ T993] usb 1-1: USB disconnect, device number 7 [ 257.616858][ T7881] netlink: 68 bytes leftover after parsing attributes in process `syz.0.623'. [ 259.595345][ T7905] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 260.655720][ T7926] lo: Caught tx_queue_len zero misconfig [ 260.655973][ T7926] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 265.922969][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f906c00: rx timeout, send abort [ 265.923241][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f906c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 265.924548][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f905c00: rx timeout, send abort [ 265.924755][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f905c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 269.996644][ T5883] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 271.886434][ T5883] usb 4-1: device descriptor read/all, error -71 [ 276.066514][ T808] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 276.236187][ T808] usb 1-1: no configurations [ 276.236201][ T808] usb 1-1: can't read configurations, error -22 [ 276.377101][ T808] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 276.537615][ T808] usb 1-1: no configurations [ 276.537637][ T808] usb 1-1: can't read configurations, error -22 [ 276.538860][ T808] usb usb1-port1: attempt power cycle [ 276.607648][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 276.607675][ T8082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.699'. [ 276.608253][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 276.608279][ T8082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.699'. [ 276.886661][ T808] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 276.908748][ T808] usb 1-1: no configurations [ 276.908763][ T808] usb 1-1: can't read configurations, error -22 [ 277.430120][ T808] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 277.460433][ T808] usb 1-1: no configurations [ 277.460465][ T808] usb 1-1: can't read configurations, error -22 [ 277.462306][ T808] usb usb1-port1: unable to enumerate USB device [ 278.115047][ T8107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.209537][ T8068] ALSA: mixer_oss: invalid OSS volume '' [ 278.269075][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 279.581539][ T8129] loop5: detected capacity change from 0 to 7 [ 279.896509][ T5883] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 280.050145][ T5883] usb 4-1: config 0 has no interfaces? [ 280.055856][ T5883] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 280.055886][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.055898][ T5883] usb 4-1: Product: syz [ 280.055906][ T5883] usb 4-1: Manufacturer: syz [ 280.055915][ T5883] usb 4-1: SerialNumber: syz [ 280.480294][ T5883] usb 4-1: config 0 descriptor?? [ 282.747764][ T5797] Dev loop5: unable to read RDB block 7 [ 282.747798][ T5797] loop5: unable to read partition table [ 282.747958][ T5797] loop5: partition table beyond EOD, truncated [ 283.391896][ T8129] Dev loop5: unable to read RDB block 7 [ 283.391953][ T8129] loop5: unable to read partition table [ 283.392206][ T8129] loop5: partition table beyond EOD, truncated [ 284.326561][ T8129] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 284.525846][ T5885] usb 4-1: USB disconnect, device number 9 [ 289.074186][ T8203] loop5: detected capacity change from 0 to 7 [ 289.386481][ T1834] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 289.543272][ T1834] usb 4-1: config 0 has no interfaces? [ 289.546022][ T1834] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 289.546055][ T1834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.546076][ T1834] usb 4-1: Product: syz [ 289.546091][ T1834] usb 4-1: Manufacturer: syz [ 289.546106][ T1834] usb 4-1: SerialNumber: syz [ 289.558568][ T1834] usb 4-1: config 0 descriptor?? [ 289.714798][ T8203] Dev loop5: unable to read RDB block 7 [ 289.714837][ T8203] loop5: unable to read partition table [ 289.714983][ T8203] loop5: partition table beyond EOD, truncated [ 289.715014][ T8203] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 289.776684][ T1834] usb 4-1: USB disconnect, device number 10 [ 293.326605][ T36] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 293.481227][ T36] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 293.481260][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.518948][ T36] usb 2-1: config 0 descriptor?? [ 293.726029][ T36] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 293.726788][ T36] [drm:udl_init] *ERROR* Selecting channel failed [ 293.755429][ T36] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 293.755456][ T36] [drm] Initialized udl on minor 2 [ 293.793455][ T36] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 293.798550][ T36] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 293.828427][ T1834] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 293.878357][ T1834] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 293.878509][ T1834] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 293.878614][ T36] usb 2-1: USB disconnect, device number 21 [ 294.366612][ T1834] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 294.447067][ T36] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 294.536509][ T1834] usb 4-1: Using ep0 maxpacket: 8 [ 294.538990][ T1834] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 294.539021][ T1834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.593037][ T1834] pvrusb2: Hardware description: Terratec Grabster AV400 [ 294.593057][ T1834] pvrusb2: ********** [ 294.593063][ T1834] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 294.593076][ T1834] pvrusb2: Important functionality might not be entirely working. [ 294.593085][ T1834] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 294.593096][ T1834] pvrusb2: ********** [ 294.637622][ T36] usb 1-1: no configurations [ 294.637694][ T36] usb 1-1: can't read configurations, error -22 [ 294.766552][ T36] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 294.792427][ T2368] pvrusb2: Invalid write control endpoint [ 294.914294][ T2368] pvrusb2: Invalid write control endpoint [ 294.914310][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 294.914319][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 294.914337][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 294.914354][ T2368] pvrusb2: Device being rendered inoperable [ 294.914435][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 294.914483][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 294.933164][ T36] usb 1-1: no configurations [ 294.933184][ T36] usb 1-1: can't read configurations, error -22 [ 294.933812][ T36] usb usb1-port1: attempt power cycle [ 294.987620][ T2368] pvrusb2: Attached sub-driver cx25840 [ 294.987637][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 294.987647][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 295.276515][ T36] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 295.300702][ T36] usb 1-1: no configurations [ 295.300724][ T36] usb 1-1: can't read configurations, error -22 [ 295.506524][ T36] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 295.540472][ T36] usb 1-1: no configurations [ 295.540495][ T36] usb 1-1: can't read configurations, error -22 [ 295.540909][ T36] usb usb1-port1: unable to enumerate USB device [ 297.145609][ T36] usb 4-1: USB disconnect, device number 11 [ 299.628430][ T5864] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 300.346510][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 300.348652][ T5864] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 300.348671][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.364162][ T5864] pvrusb2: Hardware description: Terratec Grabster AV400 [ 300.364178][ T5864] pvrusb2: ********** [ 300.364184][ T5864] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 300.364194][ T5864] pvrusb2: Important functionality might not be entirely working. [ 300.364202][ T5864] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 300.364211][ T5864] pvrusb2: ********** [ 300.743868][ T2368] pvrusb2: Invalid write control endpoint [ 303.202331][ T2368] pvrusb2: Invalid write control endpoint [ 303.202344][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 303.202349][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 303.202354][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 303.202359][ T2368] pvrusb2: Device being rendered inoperable [ 303.202376][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 303.202408][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 303.290685][ T2368] pvrusb2: Attached sub-driver cx25840 [ 303.290699][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 303.290704][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 303.381256][ T1834] usb 2-1: USB disconnect, device number 22 [ 306.041519][ T8395] netlink: 44 bytes leftover after parsing attributes in process `syz.1.808'. [ 307.914293][ T8430] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 308.787809][ T36] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 308.886468][ T5864] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 308.953400][ T8434] netlink: 44 bytes leftover after parsing attributes in process `syz.4.823'. [ 309.036478][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 309.039306][ T5864] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 309.039338][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.140128][ T5864] pvrusb2: Hardware description: Terratec Grabster AV400 [ 309.140148][ T5864] pvrusb2: ********** [ 309.140155][ T5864] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 309.140166][ T5864] pvrusb2: Important functionality might not be entirely working. [ 309.140176][ T5864] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 309.140187][ T5864] pvrusb2: ********** [ 309.199189][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.199218][ T36] usb 1-1: config 0 has no interfaces? [ 309.205644][ T36] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 309.205678][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.205700][ T36] usb 1-1: Product: syz [ 309.205715][ T36] usb 1-1: Manufacturer: syz [ 309.205729][ T36] usb 1-1: SerialNumber: syz [ 309.255544][ T36] usb 1-1: config 0 descriptor?? [ 309.336022][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 309.336050][ T37] audit: type=1326 audit(1775262606.540:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 309.336099][ T37] audit: type=1326 audit(1775262606.540:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 309.336238][ T37] audit: type=1326 audit(1775262606.540:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 309.336287][ T37] audit: type=1326 audit(1775262606.540:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 309.336572][ T37] audit: type=1326 audit(1775262606.540:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 309.413242][ T2368] pvrusb2: Invalid write control endpoint [ 309.470474][ T37] audit: type=1326 audit(1775262606.680:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 309.470531][ T37] audit: type=1326 audit(1775262606.680:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 309.470575][ T37] audit: type=1326 audit(1775262606.680:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 309.470616][ T37] audit: type=1326 audit(1775262606.680:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 309.470658][ T37] audit: type=1326 audit(1775262606.680:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.4.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 309.754682][ T2368] pvrusb2: Invalid write control endpoint [ 309.754699][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 309.754709][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 309.754718][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 309.754728][ T2368] pvrusb2: Device being rendered inoperable [ 309.755153][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 309.755210][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 310.784873][ T2368] pvrusb2: Attached sub-driver cx25840 [ 310.784891][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 310.784902][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 311.146620][ T36] usb 1-1: USB disconnect, device number 16 [ 312.803701][ T5973] usb 2-1: USB disconnect, device number 23 [ 314.130410][ T8483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.372265][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 314.389069][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 316.029624][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 316.029644][ T37] audit: type=1326 audit(1775262613.220:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8496 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 316.029694][ T37] audit: type=1326 audit(1775262613.220:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8496 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 316.029739][ T37] audit: type=1326 audit(1775262613.220:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8496 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 316.029783][ T37] audit: type=1326 audit(1775262613.220:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8496 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 316.029827][ T37] audit: type=1326 audit(1775262613.220:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8496 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 316.029869][ T37] audit: type=1326 audit(1775262613.220:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8496 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 316.029913][ T37] audit: type=1326 audit(1775262613.220:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8496 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 316.029959][ T37] audit: type=1326 audit(1775262613.220:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8496 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 316.030014][ T37] audit: type=1326 audit(1775262613.220:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8496 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 316.030060][ T37] audit: type=1326 audit(1775262613.220:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8496 comm="syz.1.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 317.191811][ T8531] netlink: 'syz.0.850': attribute type 39 has an invalid length. [ 317.453469][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.453517][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.723356][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 324.664376][ T8611] netlink: 268 bytes leftover after parsing attributes in process `syz.4.881'. [ 329.914086][ T37] kauditd_printk_skb: 44 callbacks suppressed [ 329.914107][ T37] audit: type=1326 audit(1775262627.110:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 329.914155][ T37] audit: type=1326 audit(1775262627.110:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 329.914201][ T37] audit: type=1326 audit(1775262627.110:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 329.914256][ T37] audit: type=1326 audit(1775262627.110:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 329.914302][ T37] audit: type=1326 audit(1775262627.110:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 329.914350][ T37] audit: type=1326 audit(1775262627.110:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 329.914396][ T37] audit: type=1326 audit(1775262627.110:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 329.914443][ T37] audit: type=1326 audit(1775262627.110:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 329.914489][ T37] audit: type=1326 audit(1775262627.110:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 329.914534][ T37] audit: type=1326 audit(1775262627.110:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.4.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552da5c819 code=0x7ffc0000 [ 330.883048][ T8644] netlink: 'syz.3.889': attribute type 39 has an invalid length. [ 331.745848][ T8659] ======================================================= [ 331.745848][ T8659] WARNING: The mand mount option has been deprecated and [ 331.745848][ T8659] and is ignored by this kernel. Remove the mand [ 331.745848][ T8659] option from the mount to silence this warning. [ 331.745848][ T8659] ======================================================= [ 331.824116][ T8659] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 337.325204][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 337.325292][ T37] audit: type=1326 audit(1775262634.510:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 337.325383][ T37] audit: type=1326 audit(1775262634.510:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 337.325431][ T37] audit: type=1326 audit(1775262634.510:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 337.325478][ T37] audit: type=1326 audit(1775262634.510:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 337.325527][ T37] audit: type=1326 audit(1775262634.510:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 337.325574][ T37] audit: type=1326 audit(1775262634.510:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 337.325622][ T37] audit: type=1326 audit(1775262634.510:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 337.325671][ T37] audit: type=1326 audit(1775262634.510:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 337.325718][ T37] audit: type=1326 audit(1775262634.510:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 337.325765][ T37] audit: type=1326 audit(1775262634.510:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977ba6c819 code=0x7ffc0000 [ 337.803176][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'. [ 338.058223][ T8724] overlayfs: missing 'lowerdir' [ 338.157323][ T8724] netlink: 'syz.0.920': attribute type 39 has an invalid length. [ 341.862269][ T5885] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 342.019229][ T5885] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 342.019262][ T5885] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 342.019282][ T5885] usb 4-1: config 220 has no interface number 2 [ 342.019359][ T5885] usb 4-1: config 220 interface 1 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 342.019385][ T5885] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 342.019413][ T5885] usb 4-1: config 220 interface 0 has no altsetting 0 [ 342.019433][ T5885] usb 4-1: config 220 interface 76 has no altsetting 0 [ 342.019452][ T5885] usb 4-1: config 220 interface 1 has no altsetting 0 [ 342.022844][ T5885] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 342.022873][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.022894][ T5885] usb 4-1: Product: syz [ 342.022909][ T5885] usb 4-1: Manufacturer: syz [ 342.022924][ T5885] usb 4-1: SerialNumber: syz [ 343.469040][ T8794] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 343.751932][ T5885] usb 4-1: selecting invalid altsetting 0 [ 343.754269][ T5885] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 343.754305][ T5885] uvcvideo 4-1:220.0: No valid video chain found. [ 343.833416][ T5885] usb 4-1: selecting invalid altsetting 0 [ 343.833461][ T5885] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 343.878176][ T5885] usb 4-1: USB disconnect, device number 12 [ 346.012688][ T8829] netlink: 52 bytes leftover after parsing attributes in process `syz.0.962'. [ 346.734338][ T5864] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 346.885161][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.885222][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 346.885268][ T5864] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 346.885293][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.947439][ T5864] usb 4-1: config 0 descriptor?? [ 346.965435][ T5864] hub 4-1:0.0: bad descriptor, ignoring hub [ 346.965478][ T5864] hub 4-1:0.0: probe with driver hub failed with error -5 [ 346.990132][ T5864] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 348.259964][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 350.180231][ T808] usb 4-1: USB disconnect, device number 13 [ 350.506450][ T5973] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 350.666614][ T5973] usb 1-1: Using ep0 maxpacket: 32 [ 350.671613][ T5973] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.671672][ T5973] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 350.676151][ T5973] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 350.676184][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.676205][ T5973] usb 1-1: Product: syz [ 350.676220][ T5973] usb 1-1: Manufacturer: syz [ 350.676235][ T5973] usb 1-1: SerialNumber: syz [ 351.088362][ T5973] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.824467][ T5973] usb 1-1: USB disconnect, device number 17 [ 352.004767][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.423361][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 355.939368][ T8973] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 358.346505][ T5885] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 358.509285][ T5885] usb 4-1: no configurations [ 358.509300][ T5885] usb 4-1: can't read configurations, error -22 [ 358.636549][ T5885] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 360.533162][ T5885] usb 4-1: device descriptor read/all, error -71 [ 360.535324][ T5885] usb usb4-port1: attempt power cycle [ 360.548224][ T8969] ALSA: mixer_oss: invalid OSS volume '' [ 360.557522][ T5885] ================================================================== [ 360.557538][ T5885] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x3d/0x50 [ 360.557572][ T5885] Read of size 1 at addr ffff88802be2e8c0 by task kworker/0:4/5885 [ 360.557590][ T5885] [ 360.557603][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 360.557628][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.557643][ T5885] Workqueue: usb_hub_wq hub_event [ 360.557673][ T5885] Call Trace: [ 360.557682][ T5885] [ 360.557690][ T5885] dump_stack_lvl+0xe8/0x150 [ 360.557723][ T5885] print_report+0xba/0x230 [ 360.557750][ T5885] ? _raw_spin_lock_irq+0x3d/0x50 [ 360.557770][ T5885] kasan_report+0x117/0x150 [ 360.557791][ T5885] ? _raw_spin_lock_irq+0x3d/0x50 [ 360.557816][ T5885] __kasan_check_byte+0x2a/0x40 [ 360.557838][ T5885] lock_acquire+0x79/0x2e0 [ 360.557859][ T5885] ? rcu_is_watching+0x15/0xb0 [ 360.557884][ T5885] _raw_spin_lock_irq+0x3d/0x50 [ 360.557903][ T5885] ? rtlock_slowlock_locked+0x3640/0x3c80 [ 360.557935][ T5885] rtlock_slowlock_locked+0x3640/0x3c80 [ 360.557974][ T5885] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 360.558005][ T5885] ? rtlock_slowlock_locked+0x2a8/0x3c80 [ 360.558094][ T5885] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 360.558133][ T5885] ? rcu_is_watching+0x15/0xb0 [ 360.558160][ T5885] rt_spin_lock+0x165/0x400 [ 360.558191][ T5885] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 360.558216][ T5885] ? __pfx_rt_spin_lock+0x10/0x10 [ 360.558248][ T5885] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 360.558281][ T5885] raw_queue_event+0x39/0x2e0 [ 360.558313][ T5885] gadget_disconnect+0x51/0xe0 [ 360.558340][ T5885] set_link_state+0xc0a/0x1220 [ 360.558373][ T5885] dummy_hub_control+0xafc/0x1a00 [ 360.558404][ T5885] ? usb_hcd_submit_urb+0x786/0x1b50 [ 360.558438][ T5885] usb_hcd_submit_urb+0xdbe/0x1b50 [ 360.558473][ T5885] usb_start_wait_urb+0x13f/0x5b0 [ 360.558500][ T5885] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 360.558533][ T5885] usb_control_msg+0x234/0x3e0 [ 360.558558][ T5885] hub_event+0x2dc0/0x4f60 [ 360.558607][ T5885] ? __pfx_hub_event+0x10/0x10 [ 360.558638][ T5885] ? process_scheduled_works+0xa8d/0x18c0 [ 360.558669][ T5885] ? process_scheduled_works+0xa8d/0x18c0 [ 360.558699][ T5885] process_scheduled_works+0xb6e/0x18c0 [ 360.558743][ T5885] ? __pfx_process_scheduled_works+0x10/0x10 [ 360.558774][ T5885] ? assign_work+0x3d5/0x5e0 [ 360.558802][ T5885] worker_thread+0xa53/0xfc0 [ 360.558846][ T5885] kthread+0x388/0x470 [ 360.558868][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 360.558897][ T5885] ? __pfx_kthread+0x10/0x10 [ 360.558919][ T5885] ret_from_fork+0x51e/0xb90 [ 360.558951][ T5885] ? __pfx_ret_from_fork+0x10/0x10 [ 360.558980][ T5885] ? __switch_to+0xc7d/0x1450 [ 360.559007][ T5885] ? __pfx_kthread+0x10/0x10 [ 360.559038][ T5885] ret_from_fork_asm+0x1a/0x30 [ 360.559067][ T5885] [ 360.559074][ T5885] [ 360.559079][ T5885] Allocated by task 8974: [ 360.559090][ T5885] kasan_save_track+0x3e/0x80 [ 360.559120][ T5885] __kasan_kmalloc+0x93/0xb0 [ 360.559150][ T5885] __kmalloc_cache_noprof+0x3a6/0x690 [ 360.559169][ T5885] raw_open+0x8d/0x530 [ 360.559190][ T5885] misc_open+0x2de/0x350 [ 360.559214][ T5885] chrdev_open+0x4d0/0x5f0 [ 360.559233][ T5885] do_dentry_open+0x83d/0x13e0 [ 360.559256][ T5885] vfs_open+0x3b/0x350 [ 360.559278][ T5885] path_openat+0x2e43/0x38a0 [ 360.559308][ T5885] do_file_open+0x23e/0x4a0 [ 360.559338][ T5885] do_sys_openat2+0x113/0x200 [ 360.559361][ T5885] __x64_sys_openat+0x138/0x170 [ 360.559385][ T5885] do_syscall_64+0x14d/0xf80 [ 360.559406][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.559425][ T5885] [ 360.559430][ T5885] Freed by task 8969: [ 360.559439][ T5885] kasan_save_track+0x3e/0x80 [ 360.559467][ T5885] kasan_save_free_info+0x46/0x50 [ 360.559491][ T5885] __kasan_slab_free+0x5c/0x80 [ 360.559520][ T5885] kfree+0x1c1/0x6c0 [ 360.559544][ T5885] raw_release+0x191/0x260 [ 360.559563][ T5885] __fput+0x461/0xa90 [ 360.559585][ T5885] task_work_run+0x1d9/0x270 [ 360.559607][ T5885] do_exit+0x70f/0x23c0 [ 360.559626][ T5885] do_group_exit+0x21b/0x2d0 [ 360.559646][ T5885] get_signal+0x125c/0x1310 [ 360.559671][ T5885] arch_do_signal_or_restart+0xbc/0x830 [ 360.559696][ T5885] exit_to_user_mode_loop+0x86/0x480 [ 360.559725][ T5885] do_syscall_64+0x32d/0xf80 [ 360.559745][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.559763][ T5885] [ 360.559768][ T5885] The buggy address belongs to the object at ffff88802be2e000 [ 360.559768][ T5885] which belongs to the cache kmalloc-4k of size 4096 [ 360.559785][ T5885] The buggy address is located 2240 bytes inside of [ 360.559785][ T5885] freed 4096-byte region [ffff88802be2e000, ffff88802be2f000) [ 360.559806][ T5885] [ 360.559811][ T5885] The buggy address belongs to the physical page: [ 360.559822][ T5885] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2be28 [ 360.559842][ T5885] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 360.559859][ T5885] flags: 0x80000000000040(head|node=0|zone=1) [ 360.559876][ T5885] page_type: f5(slab) [ 360.559896][ T5885] raw: 0080000000000040 ffff88813fe1a140 dead000000000100 dead000000000122 [ 360.559915][ T5885] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 360.559932][ T5885] head: 0080000000000040 ffff88813fe1a140 dead000000000100 dead000000000122 [ 360.559951][ T5885] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 360.559969][ T5885] head: 0080000000000003 ffffea0000af8a01 00000000ffffffff 00000000ffffffff [ 360.559986][ T5885] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 360.559997][ T5885] page dumped because: kasan: bad access detected [ 360.560007][ T5885] page_owner tracks the page as allocated [ 360.560014][ T5885] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5168, tgid 5168 (udevd), ts 29482006997, free_ts 29468721014 [ 360.560060][ T5885] post_alloc_hook+0x231/0x280 [ 360.560090][ T5885] get_page_from_freelist+0x28bb/0x2950 [ 360.560111][ T5885] __alloc_frozen_pages_noprof+0x18d/0x380 [ 360.560133][ T5885] allocate_slab+0x77/0x660 [ 360.560156][ T5885] refill_objects+0x334/0x3c0 [ 360.560176][ T5885] __pcs_replace_empty_main+0x35c/0x710 [ 360.560201][ T5885] __kmalloc_noprof+0x530/0x7b0 [ 360.560217][ T5885] tomoyo_realpath_from_path+0xe3/0x5d0 [ 360.560242][ T5885] tomoyo_check_open_permission+0x229/0x470 [ 360.560261][ T5885] security_file_open+0xa9/0x240 [ 360.560283][ T5885] do_dentry_open+0x4c0/0x13e0 [ 360.560302][ T5885] vfs_open+0x3b/0x350 [ 360.560323][ T5885] path_openat+0x2e43/0x38a0 [ 360.560350][ T5885] do_file_open+0x23e/0x4a0 [ 360.560378][ T5885] do_sys_openat2+0x113/0x200 [ 360.560401][ T5885] __x64_sys_openat+0x138/0x170 [ 360.560424][ T5885] page last free pid 5177 tgid 5177 stack trace: [ 360.560435][ T5885] __free_frozen_pages+0xfe3/0x1170 [ 360.560452][ T5885] __slab_free+0x24f/0x2a0 [ 360.560469][ T5885] qlist_free_all+0x97/0x100 [ 360.560496][ T5885] kasan_quarantine_reduce+0x148/0x160 [ 360.560524][ T5885] __kasan_slab_alloc+0x22/0x80 [ 360.560553][ T5885] kmem_cache_alloc_noprof+0x33b/0x680 [ 360.560578][ T5885] do_getname+0x2e/0x250 [ 360.560598][ T5885] do_sys_openat2+0xca/0x200 [ 360.560620][ T5885] __x64_sys_openat+0x138/0x170 [ 360.560644][ T5885] do_syscall_64+0x14d/0xf80 [ 360.560685][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.560703][ T5885] [ 360.560708][ T5885] Memory state around the buggy address: [ 360.560719][ T5885] ffff88802be2e780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 360.560734][ T5885] ffff88802be2e800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 360.560749][ T5885] >ffff88802be2e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 360.560759][ T5885] ^ [ 360.560769][ T5885] ffff88802be2e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 360.560782][ T5885] ffff88802be2e980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 360.560792][ T5885] ================================================================== [ 360.560805][ T5885] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 360.560820][ T5885] CPU: 0 UID: 0 PID: 5885 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 360.560845][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.560858][ T5885] Workqueue: usb_hub_wq hub_event [ 360.560886][ T5885] Call Trace: [ 360.560894][ T5885] [ 360.560902][ T5885] vpanic+0x56c/0xa60 [ 360.560933][ T5885] ? __pfx_vpanic+0x10/0x10 [ 360.560969][ T5885] panic+0xc5/0xd0 [ 360.561000][ T5885] ? __pfx_panic+0x10/0x10 [ 360.561039][ T5885] ? _raw_spin_lock_irq+0x3d/0x50 [ 360.561062][ T5885] ? _raw_spin_lock_irq+0x3d/0x50 [ 360.561083][ T5885] ? _raw_spin_lock_irq+0x3d/0x50 [ 360.561104][ T5885] check_panic_on_warn+0x89/0xb0 [ 360.561129][ T5885] ? _raw_spin_lock_irq+0x3d/0x50 [ 360.561152][ T5885] end_report+0x73/0x180 [ 360.561172][ T5885] ? _raw_spin_lock_irq+0x3d/0x50 [ 360.561192][ T5885] kasan_report+0x128/0x150 [ 360.561214][ T5885] ? _raw_spin_lock_irq+0x3d/0x50 [ 360.561236][ T5885] __kasan_check_byte+0x2a/0x40 [ 360.561253][ T5885] lock_acquire+0x79/0x2e0 [ 360.561273][ T5885] ? rcu_is_watching+0x15/0xb0 [ 360.561296][ T5885] _raw_spin_lock_irq+0x3d/0x50 [ 360.561315][ T5885] ? rtlock_slowlock_locked+0x3640/0x3c80 [ 360.561343][ T5885] rtlock_slowlock_locked+0x3640/0x3c80 [ 360.561384][ T5885] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 360.561410][ T5885] ? rtlock_slowlock_locked+0x2a8/0x3c80 [ 360.561440][ T5885] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 360.561475][ T5885] ? rcu_is_watching+0x15/0xb0 [ 360.561498][ T5885] rt_spin_lock+0x165/0x400 [ 360.561526][ T5885] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 360.561548][ T5885] ? __pfx_rt_spin_lock+0x10/0x10 [ 360.561575][ T5885] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 360.561605][ T5885] raw_queue_event+0x39/0x2e0 [ 360.561633][ T5885] gadget_disconnect+0x51/0xe0 [ 360.561655][ T5885] set_link_state+0xc0a/0x1220 [ 360.561684][ T5885] dummy_hub_control+0xafc/0x1a00 [ 360.561714][ T5885] ? usb_hcd_submit_urb+0x786/0x1b50 [ 360.561746][ T5885] usb_hcd_submit_urb+0xdbe/0x1b50 [ 360.561776][ T5885] usb_start_wait_urb+0x13f/0x5b0 [ 360.561798][ T5885] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 360.561827][ T5885] usb_control_msg+0x234/0x3e0 [ 360.561849][ T5885] hub_event+0x2dc0/0x4f60 [ 360.561894][ T5885] ? __pfx_hub_event+0x10/0x10 [ 360.561922][ T5885] ? process_scheduled_works+0xa8d/0x18c0 [ 360.561950][ T5885] ? process_scheduled_works+0xa8d/0x18c0 [ 360.561977][ T5885] process_scheduled_works+0xb6e/0x18c0 [ 360.562029][ T5885] ? __pfx_process_scheduled_works+0x10/0x10 [ 360.562060][ T5885] ? assign_work+0x3d5/0x5e0 [ 360.562092][ T5885] worker_thread+0xa53/0xfc0 [ 360.562130][ T5885] kthread+0x388/0x470 [ 360.562151][ T5885] ? __pfx_worker_thread+0x10/0x10 [ 360.562178][ T5885] ? __pfx_kthread+0x10/0x10 [ 360.562202][ T5885] ret_from_fork+0x51e/0xb90 [ 360.562235][ T5885] ? __pfx_ret_from_fork+0x10/0x10 [ 360.562267][ T5885] ? __switch_to+0xc7d/0x1450 [ 360.562296][ T5885] ? __pfx_kthread+0x10/0x10 [ 360.562320][ T5885] ret_from_fork_asm+0x1a/0x30 [ 360.562349][ T5885] [ 360.562765][ T5885] Kernel Offset: disabled