last executing test programs: 13.962333583s ago: executing program 2 (id=1658): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) setreuid(0xee00, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000200000000000000000008"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4) keyctl$session_to_parent(0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000"], 0x28}}, 0x0) 12.871018385s ago: executing program 2 (id=1660): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1c) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 12.690975687s ago: executing program 2 (id=1661): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x10009, 0x8, 0x2, 0x4000000080000e52, 0x1, 0x1, 0x1043, 0x200000000006, 0x4, 0x80, 0x1, 0x100000000, 0x800000000000001, 0x40000000008, 0x8000000000005, 0x4800040066], 0x0, 0x40110}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.506324669s ago: executing program 0 (id=1663): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 12.276988232s ago: executing program 2 (id=1664): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x2, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x200}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000210001000000000004000000ac1414bb000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b18dd20d2248f42a3abdc92c6bc3af75c4f128a0aca06a65bdb40051d53bb67b8b8f682087a11634701d6d15052f2c78adb6bc210e93fdcd965e4069408f34cb9407caa85a170f87b2a312b206980f61093a9c8ce9e418a4c814e64d1da46532a91b92d1cc9a98603ef072232588a54140ae64c7e25161528b8a524821e5ba08fa830c7140cbe7371cef30c852"], 0x50}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0x43b9a80, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000000)='^', 0x1}], 0x1) 11.949953645s ago: executing program 1 (id=1666): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) setreuid(0xee00, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4) keyctl$session_to_parent(0x12) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000"], 0x28}}, 0x0) 10.895159168s ago: executing program 1 (id=1667): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = getpid() timer_create(0x3, &(0x7f0000000000)={0x0, 0x2c, 0x4, @tid=r4}, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x36be6fca, 0x8081) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 10.825212228s ago: executing program 0 (id=1668): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325f9ef326cf8bad0db853cbb8235b0c803c417ede8f7b85eaad8aea5b2fe9813fee217a97a980d39d7a1efef815bf2bfe6823e664dc7", 0x89}, {&(0x7f00000006c0)="080c04", 0x3}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e269ebe5875", 0x3e}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac141432"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.614148852s ago: executing program 3 (id=1670): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.133277077s ago: executing program 0 (id=1671): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.470678775s ago: executing program 3 (id=1672): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0xfffffffe, 0x1, 0xff, "23f555d900", 0x0, 0xd60b}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, r1, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x50ac1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000480)="0f01cfb894008ec8f226360f20210f30b831008ed80f01c36564640fc7be6f4166b80500000066b9080000000f01d9a7660f3824c6", 0x35}], 0x1, 0x74, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x18, 0x6, 0x0, &(0x7f00000006c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x17a, 0x0, 0x1}]}) ioctl$TIOCSRS485(r1, 0x542f, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r7 = getpid() sched_setscheduler(r7, 0x6, &(0x7f0000000200)=0x9) 8.085680109s ago: executing program 3 (id=1673): ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x6ce, 0x7}) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000040)={0x9, 0x9}) init_module(&(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x4, 0xfc, 0xffffffffffffffff, 0x3, 0x6, 0x8, 0x190, 0x40, 0x278, 0x10, 0x4, 0x38, 0x0, 0xe9, 0x8, 0xc}, [], "8202bdbe1aeb0f28648055f1d5740d478a9a45c50d42dc648cc291b7777bc280feea94eef6b42abb11f0f3411dd664f8dbdadd91ad7ba5c71df26ac6b39e36ed31ef1a4ac5f41f8201c6f42a9cefc506dd1900ce9e1a7154bf7e645f639713b4b30330fffc4603b1a4908b681624f77fce9632a6059bd2511bce4c622121e2b4d4b21c9651f6e2829414fdc2a92f9c19b9f9292ec1ff1d9ee12976108f2dd1f5d03911d8e3796e0d0e7fc86e51d9e12cb42308d9840cc7cbef1dce6ae6feafe7b0707b4f3c390d2ba06715b67b10aaa7fc1d958686c81a7ddcd83461ce24d1b500c1ff087197b73e12"}, 0x129, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000308030000000000000000000700000605000300840000000c00048008000140000045bef886a484532b8f81e1ccc18086e7353a95e0d14ec067360ae1274049dee785200c8e36eb2a93e35edb36731978c41096b75ad0fb879108209e9e225467"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40) mmap(&(0x7f0000279000/0x3000)=nil, 0x3000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000540)={0xc0000000, 0x4, "8cb0d364ebce7e4dbd134c2bc2c94c13e8ce2174b9978a56eb869adda66e1bba", 0xffffffffffff645d, 0x9, 0x0, 0xfffffffffffffffb, 0x3, 0x3, 0x4, 0x2, [0xffffff6f, 0x9, 0x7, 0x8]}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) 5.979003803s ago: executing program 1 (id=1674): ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x6ce, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000040)={0x9, 0x9}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, 0x0) init_module(&(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x4, 0xfc, 0xffffffffffffffff, 0x3, 0x6, 0x8, 0x190, 0x40, 0x278, 0x10, 0x4, 0x38, 0x0, 0xe9, 0x8, 0xc}, [], "8202bdbe1aeb0f28648055f1d5740d478a9a45c50d42dc648cc291b7777bc280feea94eef6b42abb11f0f3411dd664f8dbdadd91ad7ba5c71df26ac6b39e36ed31ef1a4ac5f41f8201c6f42a9cefc506dd1900ce9e1a7154bf7e645f639713b4b30330fffc4603b1a4908b681624f77fce9632a6059bd2511bce4c622121e2b4d4b21c9651f6e2829414fdc2a92f9c19b9f9292ec1ff1d9ee12976108f2dd1f5d03911d8e3796e0d0e7fc86e51d9e12cb42308d9840cc7cbef1dce6ae6feafe7b0707b4f3c390d2ba06715b67b10aaa7fc1d958686c81a7ddcd83461ce24d1b500c1ff087197b73e12"}, 0x129, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000308030000000000000000000700000605000300840000000c00048008000140000045bef886a484532b8f81e1ccc18086e7353a95e0d14ec067360ae1274049dee785200c8e36eb2a93e35edb36731978c41096b75ad0fb879108209e9e225467"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40) mmap(&(0x7f0000279000/0x3000)=nil, 0x3000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000540)={0xc0000000, 0x4, "8cb0d364ebce7e4dbd134c2bc2c94c13e8ce2174b9978a56eb869adda66e1bba", 0xffffffffffff645d, 0x9, 0x0, 0xfffffffffffffffb, 0x3, 0x3, 0x4, 0x2, [0xffffff6f, 0x9, 0x7, 0x8]}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1}) 5.848443245s ago: executing program 2 (id=1675): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x36be6fca, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x8, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5.757798295s ago: executing program 3 (id=1676): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) setreuid(0xee00, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4) keyctl$session_to_parent(0x12) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000"], 0x28}}, 0x0) 5.674143247s ago: executing program 1 (id=1677): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 4.755760946s ago: executing program 0 (id=1678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, 0x0, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = dup(r5) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000080)={{0x0, 0x1000}, 0x100, './file0\x00'}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a64b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0xc, 0x0, @opaque="03000000"}}}}}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000025300)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x38, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) 4.673620937s ago: executing program 3 (id=1679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, 0x0, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000080)={{0x0, 0x1000}, 0x100, './file0\x00'}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a64b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0xc, 0x0, @opaque="03000000"}}}}}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000025300)=""/102392, 0x18ff8) socket(0x25, 0x1, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r11) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x38, r13, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x59, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) 1.211602737s ago: executing program 1 (id=1680): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 782.370452ms ago: executing program 0 (id=1681): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0xfffffffe, 0x1, 0xff, "23f555d900", 0x0, 0xd60b}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, r1, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x50ac1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000480)="0f01cfb894008ec8f226360f20210f30b831008ed80f01c36564640fc7be6f4166b80500000066b9080000000f01d9a7660f3824c6", 0x35}], 0x1, 0x74, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x18, 0x6, 0x0, &(0x7f00000006c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x17a, 0x0, 0x1}]}) ioctl$TIOCSRS485(r1, 0x542f, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r7 = getpid() sched_setscheduler(r7, 0x6, &(0x7f0000000200)=0x9) 694.776662ms ago: executing program 2 (id=1682): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, 0x0, 0x375040, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 644.936153ms ago: executing program 3 (id=1683): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x2, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x200}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000210001000000000004000000ac1414bb000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b18dd20d2248f42a3abdc92c6bc3af75c4f128a0aca06a65bdb40051d53bb67b8b8f682087a11634701d6d15052f2c78adb6bc210e93fdcd965e4069408f34cb9407caa85a170f87b2a312b206980f61093a9c8ce9e418a4c814e64d1da46532a91b92d1cc9a98603ef072232588a54140ae64c7e25161528b8a524821e5ba08fa830c7140cbe7371cef30c852"], 0x50}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0x43b9a80, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000000)='^', 0x1}], 0x1) 92.091359ms ago: executing program 0 (id=1684): ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x6ce, 0x7}) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000040)={0x9, 0x9}) init_module(&(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x4, 0xfc, 0xffffffffffffffff, 0x3, 0x6, 0x8, 0x190, 0x40, 0x278, 0x10, 0x4, 0x38, 0x0, 0xe9, 0x8, 0xc}, [], "8202bdbe1aeb0f28648055f1d5740d478a9a45c50d42dc648cc291b7777bc280feea94eef6b42abb11f0f3411dd664f8dbdadd91ad7ba5c71df26ac6b39e36ed31ef1a4ac5f41f8201c6f42a9cefc506dd1900ce9e1a7154bf7e645f639713b4b30330fffc4603b1a4908b681624f77fce9632a6059bd2511bce4c622121e2b4d4b21c9651f6e2829414fdc2a92f9c19b9f9292ec1ff1d9ee12976108f2dd1f5d03911d8e3796e0d0e7fc86e51d9e12cb42308d9840cc7cbef1dce6ae6feafe7b0707b4f3c390d2ba06715b67b10aaa7fc1d958686c81a7ddcd83461ce24d1b500c1ff087197b73e12"}, 0x129, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000308030000000000000000000700000605000300840000000c00048008000140000045bef886a484532b8f81e1ccc18086e7353a95e0d14ec067360ae1274049dee785200c8e36eb2a93e35edb36731978c41096b75ad0fb879108209e9e225467"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40) mmap(&(0x7f0000279000/0x3000)=nil, 0x3000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000540)={0xc0000000, 0x4, "8cb0d364ebce7e4dbd134c2bc2c94c13e8ce2174b9978a56eb869adda66e1bba", 0xffffffffffff645d, 0x9, 0x0, 0xfffffffffffffffb, 0x3, 0x3, 0x4, 0x2, [0xffffff6f, 0x9, 0x7, 0x8]}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) 0s ago: executing program 1 (id=1685): ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x6ce, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000040)={0x9, 0x9}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, 0x0) init_module(&(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x4, 0xfc, 0xffffffffffffffff, 0x3, 0x6, 0x8, 0x190, 0x40, 0x278, 0x10, 0x4, 0x38, 0x0, 0xe9, 0x8, 0xc}, [], "8202bdbe1aeb0f28648055f1d5740d478a9a45c50d42dc648cc291b7777bc280feea94eef6b42abb11f0f3411dd664f8dbdadd91ad7ba5c71df26ac6b39e36ed31ef1a4ac5f41f8201c6f42a9cefc506dd1900ce9e1a7154bf7e645f639713b4b30330fffc4603b1a4908b681624f77fce9632a6059bd2511bce4c622121e2b4d4b21c9651f6e2829414fdc2a92f9c19b9f9292ec1ff1d9ee12976108f2dd1f5d03911d8e3796e0d0e7fc86e51d9e12cb42308d9840cc7cbef1dce6ae6feafe7b0707b4f3c390d2ba06715b67b10aaa7fc1d958686c81a7ddcd83461ce24d1b500c1ff087197b73e12"}, 0x129, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000308030000000000000000000700000605000300840000000c00048008000140000045bef886a484532b8f81e1ccc18086e7353a95e0d14ec067360ae1274049dee785200c8e36eb2a93e35edb36731978c41096b75ad0fb879108209e9e225467"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40) mmap(&(0x7f0000279000/0x3000)=nil, 0x3000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000540)={0xc0000000, 0x4, "8cb0d364ebce7e4dbd134c2bc2c94c13e8ce2174b9978a56eb869adda66e1bba", 0xffffffffffff645d, 0x9, 0x0, 0xfffffffffffffffb, 0x3, 0x3, 0x4, 0x2, [0xffffff6f, 0x9, 0x7, 0x8]}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1}) kernel console output (not intermixed with test programs): 8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 213.367828][ T5782] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 213.582303][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 213.789064][ T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.014645][ T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.069046][ T8] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 214.104785][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 214.135160][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 214.160304][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.195111][ T8] usb 4-1: config 0 descriptor?? [ 215.819163][ T7149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.689104][ T28] audit: type=1326 audit(1778275360.099:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.1.354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e5d9cdd9 code=0x7ffc0000 [ 216.849508][ T28] audit: type=1326 audit(1778275360.099:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.1.354" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e5d9cdd9 code=0x7ffc0000 [ 216.948151][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 216.974011][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 216.999216][ T8] usb 4-1: USB disconnect, device number 16 [ 218.887903][ T5838] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 219.117262][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 219.148971][ T5838] usb 3-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 219.186991][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.202599][ T5782] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 219.234039][ T5838] usb 3-1: config 0 descriptor?? [ 219.482019][ T5782] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 219.704802][ T5782] Bluetooth: hci3: unexpected event for opcode 0x042c [ 219.712996][ T5838] usbhid 3-1:0.0: can't add hid device: -71 [ 219.729234][ T5838] usbhid: probe of 3-1:0.0 failed with error -71 [ 219.738200][ T5838] usb 3-1: USB disconnect, device number 5 [ 220.717384][ T7187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.748941][ T28] audit: type=1326 audit(1778275364.369:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.3.364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 220.782957][ T28] audit: type=1326 audit(1778275364.369:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.3.364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 222.866312][ T5839] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 223.049248][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 223.907131][ T5839] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.971175][ T5839] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.048914][ T5839] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 224.094722][ T5839] usb 4-1: config 0 interface 0 has no altsetting 0 [ 224.109625][ T5839] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 224.134645][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.161417][ T5839] usb 4-1: config 0 descriptor?? [ 224.242505][ T5782] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 224.458949][ T5838] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 224.665516][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.691759][ T5838] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 224.738965][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.770152][ T5838] usb 2-1: config 0 descriptor?? [ 224.783741][ T5838] pwc: Askey VC010 type 2 USB webcam detected. [ 224.814251][ T5839] usb 4-1: USB disconnect, device number 17 [ 225.185892][ T5838] pwc: recv_control_msg error -32 req 02 val 2b00 [ 225.204893][ T5838] pwc: recv_control_msg error -32 req 02 val 2700 [ 225.219979][ T5838] pwc: recv_control_msg error -32 req 02 val 2c00 [ 225.236100][ T5838] pwc: recv_control_msg error -32 req 04 val 1000 [ 225.247248][ T5838] pwc: recv_control_msg error -32 req 04 val 1300 [ 225.263859][ T5838] pwc: recv_control_msg error -32 req 04 val 1400 [ 225.286461][ T5838] pwc: recv_control_msg error -32 req 02 val 2000 [ 225.318531][ T5782] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 225.512366][ T7224] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 225.576978][ T7225] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 226.186100][ T5838] pwc: recv_control_msg error -32 req 02 val 2100 [ 226.202558][ T5838] pwc: recv_control_msg error -32 req 04 val 1500 [ 226.451302][ T5838] pwc: recv_control_msg error -71 req 02 val 2400 [ 226.478135][ T5838] pwc: recv_control_msg error -71 req 02 val 2600 [ 226.543151][ T5838] pwc: recv_control_msg error -71 req 02 val 2900 [ 226.577799][ T5838] pwc: recv_control_msg error -71 req 02 val 2800 [ 227.339336][ T5838] pwc: recv_control_msg error -71 req 04 val 1100 [ 227.349886][ T5838] pwc: recv_control_msg error -71 req 04 val 1200 [ 227.369802][ T5838] pwc: Registered as video103. [ 227.445973][ T5838] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 227.579257][ T5838] usb 2-1: USB disconnect, device number 8 [ 229.056796][ T5782] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 229.559443][ T5782] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 230.639027][ T786] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 230.870851][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.928888][ T786] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 230.941042][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.959615][ T786] usb 4-1: config 0 descriptor?? [ 230.982251][ T786] pwc: Askey VC010 type 2 USB webcam detected. [ 231.426964][ T786] pwc: recv_control_msg error -32 req 02 val 2b00 [ 231.443406][ T786] pwc: recv_control_msg error -32 req 02 val 2700 [ 232.164757][ T786] pwc: recv_control_msg error -32 req 02 val 2c00 [ 232.199006][ T786] pwc: recv_control_msg error -32 req 04 val 1000 [ 232.209012][ T786] pwc: recv_control_msg error -32 req 04 val 1300 [ 232.228974][ T786] pwc: recv_control_msg error -32 req 04 val 1400 [ 232.236280][ T786] pwc: recv_control_msg error -32 req 02 val 2000 [ 232.243846][ T786] pwc: recv_control_msg error -32 req 02 val 2100 [ 232.259308][ T786] pwc: recv_control_msg error -32 req 04 val 1500 [ 232.613357][ T786] pwc: recv_control_msg error -71 req 02 val 2400 [ 232.643287][ T786] pwc: recv_control_msg error -71 req 02 val 2600 [ 232.650217][ T786] pwc: recv_control_msg error -71 req 02 val 2900 [ 232.667491][ T786] pwc: recv_control_msg error -71 req 02 val 2800 [ 232.684177][ T786] pwc: recv_control_msg error -71 req 04 val 1100 [ 232.711180][ T786] pwc: recv_control_msg error -71 req 04 val 1200 [ 232.724642][ T786] pwc: Registered as video103. [ 232.807165][ T786] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 232.879766][ T786] usb 4-1: USB disconnect, device number 18 [ 232.997346][ T5782] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 234.758291][ T5782] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 236.579183][ T7346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.750626][ T786] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 236.761797][ T28] audit: type=1326 audit(1778275380.389:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.2.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 236.797309][ T28] audit: type=1326 audit(1778275380.389:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.2.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 236.988933][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 237.022820][ T786] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.043249][ T786] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.079529][ T786] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 237.131603][ T786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 237.138469][ T786] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 237.178046][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.226861][ T786] usb 1-1: config 0 descriptor?? [ 237.800892][ T786] hid (null): unknown global tag 0xd [ 238.690945][ T786] usb 1-1: USB disconnect, device number 8 [ 239.029608][ T5782] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 240.135447][ T5782] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 244.728877][ C1] hrtimer: interrupt took 46227 ns [ 245.927758][ T5782] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 249.309984][ T7457] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 250.468792][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 252.192228][ T7504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.220512][ T28] audit: type=1326 audit(1778275395.839:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e5d9cdd9 code=0x7ffc0000 [ 252.247647][ T28] audit: type=1326 audit(1778275395.839:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e5d9cdd9 code=0x7ffc0000 [ 253.997119][ T5782] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 257.695888][ T7549] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 257.712896][ T7550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.950038][ T28] audit: type=1326 audit(1778275401.269:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.3.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 257.979989][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.987060][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.109725][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 258.169254][ T28] audit: type=1326 audit(1778275401.269:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.3.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 258.323297][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.376835][ T23] usb 2-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 258.599312][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.632121][ T23] usb 2-1: config 0 descriptor?? [ 259.013099][ T23] usb 2-1: can't set config #0, error -71 [ 259.030737][ T23] usb 2-1: USB disconnect, device number 9 [ 259.280098][ T5782] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 261.919118][ T7582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.040641][ T28] audit: type=1326 audit(1778275405.669:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.3.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 262.065078][ T28] audit: type=1326 audit(1778275405.669:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.3.476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 263.311825][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 264.237850][ T5782] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 264.925921][ T7626] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 264.952609][ T7626] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 267.086482][ T5782] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 268.614651][ T7665] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 268.810501][ T5782] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 269.845707][ T7681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.063988][ T28] audit: type=1326 audit(1778275413.489:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 270.238818][ T28] audit: type=1326 audit(1778275413.489:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.2.505" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 271.072342][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 272.582994][ T7713] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 273.311530][ T7727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.396978][ T28] audit: type=1326 audit(1778275416.959:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.1.517" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e5d9cdd9 code=0x7ffc0000 [ 273.521297][ T5782] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 273.868066][ T28] audit: type=1326 audit(1778275416.959:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.1.517" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e5d9cdd9 code=0x7ffc0000 [ 275.408493][ T5782] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 279.293857][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 280.143550][ T7818] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 280.212106][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 282.529209][ T5819] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 282.749374][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 282.760908][ T5819] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.786812][ T5819] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.817062][ T5819] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 282.840507][ T5819] usb 2-1: config 0 interface 0 has no altsetting 0 [ 282.852668][ T5782] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 282.865304][ T5819] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 282.894461][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.906020][ T5819] usb 2-1: config 0 descriptor?? [ 283.267376][ T7853] syz.0.552: attempt to access beyond end of device [ 283.267376][ T7853] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 283.326686][ T7853] gfs2: error 10 reading superblock [ 283.352136][ T5819] hid (null): unknown global tag 0xe [ 283.368954][ T5819] hid (null): unknown global tag 0xab [ 283.378230][ T5819] hid (null): unknown global tag 0xd [ 283.619688][ T7864] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 283.667407][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'. [ 283.824525][ T5819] usb 2-1: USB disconnect, device number 10 [ 284.669292][ T5782] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 285.456803][ T5782] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 286.574441][ T7904] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 286.593409][ T7904] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 286.728661][ T7910] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 289.366371][ T7945] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 291.220508][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 291.500694][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.522659][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 291.719775][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.888001][ T8] usb 3-1: config 0 descriptor?? [ 291.913568][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 292.399579][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 292.413990][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 292.422783][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 292.430429][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 292.448939][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 292.464493][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 292.472334][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 292.489635][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 292.497856][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 292.509431][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 292.719436][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 292.741318][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 292.759272][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 292.774873][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 292.789565][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 292.811308][ T8] pwc: Registered as video103. [ 292.823156][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 292.858138][ T8] usb 3-1: USB disconnect, device number 6 [ 294.684703][ T8025] syzkaller0: entered promiscuous mode [ 294.691270][ T8025] syzkaller0: entered allmulticast mode [ 296.705819][ T8063] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 299.938221][ T8098] syz.0.609 (8098) used greatest stack depth: 20680 bytes left [ 301.036806][ T8121] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 301.046159][ T8121] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 301.154017][ T8127] syzkaller0: entered promiscuous mode [ 301.160277][ T8127] syzkaller0: entered allmulticast mode [ 301.811175][ T8136] syz.2.620: attempt to access beyond end of device [ 301.811175][ T8136] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 301.824731][ T8136] gfs2: error 10 reading superblock [ 305.605805][ T8177] syzkaller0: entered promiscuous mode [ 305.617489][ T8177] syzkaller0: entered allmulticast mode [ 307.670012][ T8211] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 307.917990][ T8213] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 308.878851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 309.093508][ T8235] syzkaller0: entered promiscuous mode [ 309.105574][ T8235] syzkaller0: entered allmulticast mode [ 310.366409][ T8249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.586265][ T28] audit: type=1326 audit(1778275454.029:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 310.610147][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.813611][ T28] audit: type=1326 audit(1778275454.029:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.3.645" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 313.158921][ T786] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 313.179877][ T8260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.195554][ T8261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.514125][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.640953][ T786] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 313.774165][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.977889][ T786] usb 4-1: config 0 descriptor?? [ 314.259136][ T786] usb 4-1: can't set config #0, error -71 [ 314.266457][ T786] usb 4-1: USB disconnect, device number 19 [ 314.387512][ T8279] syzkaller0: entered promiscuous mode [ 314.449413][ T8279] syzkaller0: entered allmulticast mode [ 314.930399][ T28] audit: type=1326 audit(1778275458.549:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.0.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 315.097228][ T28] audit: type=1326 audit(1778275458.549:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8281 comm="syz.0.656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 315.453816][ T8291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.461195][ T8291] IPv6: NLM_F_CREATE should be set when creating new route [ 315.468519][ T8291] IPv6: NLM_F_CREATE should be set when creating new route [ 315.475822][ T8291] IPv6: NLM_F_CREATE should be set when creating new route [ 315.796783][ T8303] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 316.020832][ T8310] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 316.073315][ T8312] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 317.272308][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.279145][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.689097][ T8274] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 318.104896][ T8274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.128902][ T8274] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 318.153686][ T8274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.340936][ T8332] syzkaller0: entered promiscuous mode [ 318.363395][ T8332] syzkaller0: entered allmulticast mode [ 318.388042][ T8274] usb 4-1: config 0 descriptor?? [ 318.400910][ T8274] pwc: Askey VC010 type 2 USB webcam detected. [ 318.704445][ T28] audit: type=1326 audit(1778275462.289:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.2.666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 319.097053][ T28] audit: type=1326 audit(1778275462.289:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.2.666" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 319.103489][ T8274] pwc: recv_control_msg error -32 req 02 val 2b00 [ 319.150303][ T8274] pwc: recv_control_msg error -32 req 02 val 2700 [ 319.163606][ T8274] pwc: recv_control_msg error -32 req 02 val 2c00 [ 319.181141][ T8274] pwc: recv_control_msg error -32 req 04 val 1000 [ 319.188258][ T8274] pwc: recv_control_msg error -32 req 04 val 1300 [ 319.206078][ T8274] pwc: recv_control_msg error -32 req 04 val 1400 [ 319.215933][ T8339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.329030][ T8274] pwc: recv_control_msg error -32 req 02 val 2000 [ 319.338933][ T8274] pwc: recv_control_msg error -32 req 02 val 2100 [ 319.360575][ T8274] pwc: recv_control_msg error -32 req 04 val 1500 [ 319.379101][ T8274] pwc: recv_control_msg error -32 req 02 val 2500 [ 319.713397][ T8274] pwc: recv_control_msg error -71 req 02 val 2600 [ 319.729061][ T8274] pwc: recv_control_msg error -71 req 02 val 2900 [ 319.736558][ T8274] pwc: recv_control_msg error -71 req 02 val 2800 [ 319.743708][ T8274] pwc: recv_control_msg error -71 req 04 val 1100 [ 319.751596][ T8274] pwc: recv_control_msg error -71 req 04 val 1200 [ 319.759539][ T8274] pwc: Registered as video103. [ 319.768792][ T8274] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 320.720204][ T8362] syz.2.669: attempt to access beyond end of device [ 320.720204][ T8362] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 320.720246][ T8362] gfs2: error 10 reading superblock [ 321.130932][ T8274] usb 4-1: USB disconnect, device number 20 [ 321.849547][ T8274] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 322.070017][ T8274] usb 4-1: Using ep0 maxpacket: 16 [ 322.093238][ T8274] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.108968][ T8274] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.119513][ T8274] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 322.136911][ T8274] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.144660][ T8274] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 322.156213][ T8274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.176079][ T8274] usb 4-1: config 0 descriptor?? [ 322.344658][ T8376] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 322.443138][ T8376] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 323.339231][ T8384] syzkaller0: entered promiscuous mode [ 323.357195][ T8384] syzkaller0: entered allmulticast mode [ 323.470402][ T8274] hid (null): unknown global tag 0xe [ 323.477296][ T8274] hid (null): unknown global tag 0xab [ 323.486894][ T8274] hid (null): unknown global tag 0xd [ 323.499581][ T8274] usb 4-1: USB disconnect, device number 21 [ 323.760376][ T28] audit: type=1326 audit(1778275467.339:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.2.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 324.182530][ T28] audit: type=1326 audit(1778275467.339:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8378 comm="syz.2.677" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 324.224052][ T8391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.799796][ T8423] syz.2.684: attempt to access beyond end of device [ 326.799796][ T8423] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 326.799817][ T8423] gfs2: error 10 reading superblock [ 327.776429][ T8437] syz.1.688: attempt to access beyond end of device [ 327.776429][ T8437] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 327.789659][ T8437] gfs2: error 10 reading superblock [ 329.934235][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 330.119071][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 330.478715][ T27] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.503766][ T8458] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 330.519775][ T8459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.536088][ T27] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.546099][ T27] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 330.559206][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 330.565918][ T27] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 330.655156][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.683743][ T27] usb 1-1: config 0 descriptor?? [ 332.204547][ T27] hid (null): unknown global tag 0xe [ 332.205768][ T27] hid (null): unknown global tag 0xab [ 332.208548][ T27] hid (null): unknown global tag 0xd [ 332.214614][ T8468] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 332.219157][ T27] usb 1-1: USB disconnect, device number 9 [ 332.479461][ T8473] syz.3.695: attempt to access beyond end of device [ 332.479461][ T8473] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 332.492567][ T8473] gfs2: error 10 reading superblock [ 334.289674][ T8479] syz.1.698: attempt to access beyond end of device [ 334.289674][ T8479] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 334.304938][ T8479] gfs2: error 10 reading superblock [ 335.749044][ T8492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.108615][ T28] audit: type=1326 audit(1778275479.709:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.0.700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 336.163450][ T28] audit: type=1326 audit(1778275479.709:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8482 comm="syz.0.700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 338.745959][ T8529] syz.0.707: attempt to access beyond end of device [ 338.745959][ T8529] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 338.759431][ T8529] gfs2: error 10 reading superblock [ 339.005195][ T8521] Bluetooth: MGMT ver 1.22 [ 339.224527][ T5782] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 339.718998][ T8539] syzkaller0: entered promiscuous mode [ 339.725080][ T8539] syzkaller0: entered allmulticast mode [ 340.089328][ T8545] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 340.119894][ T8545] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 341.274970][ T8560] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 341.590664][ T5782] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 342.985771][ T8585] syzkaller0: entered promiscuous mode [ 343.004607][ T8585] syzkaller0: entered allmulticast mode [ 343.090790][ T5815] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 343.299345][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 343.328739][ T5815] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.359514][ T5815] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.394874][ T8590] syz.2.720: attempt to access beyond end of device [ 343.394874][ T8590] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 343.394901][ T8590] gfs2: error 10 reading superblock [ 343.407226][ T5815] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 343.407257][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 343.407293][ T5815] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 343.407316][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.423412][ T5815] usb 1-1: config 0 descriptor?? [ 343.798838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 344.179724][ T5815] hid (null): unknown global tag 0xe [ 344.188019][ T5815] hid (null): unknown global tag 0xab [ 344.209817][ T5815] hid (null): bogus close delimiter [ 344.251087][ T5815] hid (null): unknown global tag 0xd [ 344.352991][ T5782] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 344.415052][ T5815] usb 1-1: USB disconnect, device number 10 [ 345.755476][ T8623] syzkaller0: entered promiscuous mode [ 345.767212][ T8623] syzkaller0: entered allmulticast mode [ 345.942985][ T8624] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 345.952719][ T8624] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 347.027355][ T5782] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 347.118932][ T5815] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 347.308911][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 347.334640][ T5815] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.388443][ T5815] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.435215][ T5815] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 347.504146][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 347.521347][ T5815] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 347.545537][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.569621][ T5815] usb 1-1: config 0 descriptor?? [ 348.180523][ T8658] syzkaller0: entered promiscuous mode [ 348.186339][ T8658] syzkaller0: entered allmulticast mode [ 348.198403][ T5815] hid (null): unknown global tag 0xe [ 348.207927][ T5815] hid (null): unknown global tag 0xab [ 348.213896][ T5815] hid (null): bogus close delimiter [ 348.223475][ T5815] hid (null): unknown global tag 0xd [ 348.546155][ T8274] usb 1-1: USB disconnect, device number 11 [ 350.409497][ T8680] syz.2.749: attempt to access beyond end of device [ 350.409497][ T8680] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 350.422660][ T8680] gfs2: error 10 reading superblock [ 350.448398][ T8682] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 350.587488][ T8681] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 351.202226][ T8689] syzkaller0: entered promiscuous mode [ 351.207978][ T8689] syzkaller0: entered allmulticast mode [ 351.230323][ T8686] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 351.409858][ T8686] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 353.154741][ T8720] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 353.186626][ T8720] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 353.517001][ T8722] syz.0.762: attempt to access beyond end of device [ 353.517001][ T8722] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 353.530551][ T8722] gfs2: error 10 reading superblock [ 354.352266][ T8731] syzkaller0: entered promiscuous mode [ 354.357901][ T8731] syzkaller0: entered allmulticast mode [ 355.113283][ T8736] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 355.137060][ T8736] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 356.529244][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 357.339635][ T8768] vivid-002: disconnect [ 357.344699][ T8767] vivid-002: reconnect [ 357.751521][ T8779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.790231][ T28] audit: type=1326 audit(1778275501.409:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.2.779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 358.380997][ T28] audit: type=1326 audit(1778275501.409:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.2.779" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 358.516929][ T8785] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 358.543618][ T8786] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 360.468540][ T8803] syz.1.788: attempt to access beyond end of device [ 360.468540][ T8803] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 360.481728][ T8803] gfs2: error 10 reading superblock [ 361.261212][ T5782] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 362.659710][ T8822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.757834][ T28] audit: type=1326 audit(1778275506.349:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.0.793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 362.910898][ T28] audit: type=1326 audit(1778275506.349:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.0.793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 362.982267][ T5782] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 363.183242][ T8834] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 364.156260][ T8857] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 364.199715][ T8862] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 364.970304][ T8869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.059091][ T28] audit: type=1326 audit(1778275508.629:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.3.805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 365.576569][ T28] audit: type=1326 audit(1778275508.629:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.3.805" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 366.082439][ T8875] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 366.098666][ T8875] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 366.999387][ T8881] syz.1.807: attempt to access beyond end of device [ 366.999387][ T8881] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 367.012503][ T8881] gfs2: error 10 reading superblock [ 367.958333][ T5782] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 368.103910][ T8895] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 368.129625][ T8896] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 369.536540][ T8919] syz.3.818: attempt to access beyond end of device [ 369.536540][ T8919] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 369.549762][ T8919] gfs2: error 10 reading superblock [ 370.305285][ T5782] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 370.366628][ T8928] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 370.412586][ T8928] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 371.412565][ T5782] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 374.249820][ T5782] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 374.607984][ T5782] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 374.930166][ T8990] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 374.963628][ T8990] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 375.765343][ T9012] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 375.791433][ T9012] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 377.619167][ T9045] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 377.636954][ T9045] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 378.664106][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.670797][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.346009][ T9063] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 379.356328][ T9063] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 380.609400][ T9074] syz.0.859: attempt to access beyond end of device [ 380.609400][ T9074] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 380.622545][ T9074] gfs2: error 10 reading superblock [ 383.029665][ T9084] vivid-001: disconnect [ 383.034368][ T9083] vivid-001: reconnect [ 383.280152][ T5819] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 383.289240][ T9104] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 383.326319][ T9104] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 383.617314][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 383.635141][ T5819] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 383.644252][ T5819] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 383.656942][ T5819] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 383.667843][ T5819] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 383.679777][ T5819] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 383.690444][ T5819] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.703978][ T5819] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 383.713734][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.937216][ T5819] usb 3-1: usb_control_msg returned -32 [ 383.957489][ T5819] usbtmc 3-1:16.0: can't read capabilities [ 385.619320][ T9122] syz.3.870: attempt to access beyond end of device [ 385.619320][ T9122] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 385.632451][ T9122] gfs2: error 10 reading superblock [ 386.077202][ T5819] usb 3-1: USB disconnect, device number 7 [ 388.379273][ T9142] syz.1.877: attempt to access beyond end of device [ 388.379273][ T9142] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 388.392514][ T9142] gfs2: error 10 reading superblock [ 388.829362][ T9147] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 388.860729][ T9147] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 389.078037][ T5782] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 389.569161][ T5817] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 389.652211][ T5782] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 389.769009][ T5817] usb 3-1: Using ep0 maxpacket: 8 [ 389.789759][ T5817] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 389.797941][ T5817] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 389.820425][ T5817] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 389.853079][ T5817] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 389.878878][ T5817] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 389.900130][ T5817] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.938568][ T5817] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 389.951066][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.166039][ T5817] usb 3-1: usb_control_msg returned -32 [ 390.187222][ T5817] usbtmc 3-1:16.0: can't read capabilities [ 390.357816][ T9168] syz.1.886: attempt to access beyond end of device [ 390.357816][ T9168] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 390.372058][ T9168] gfs2: error 10 reading superblock [ 391.470561][ T9174] syz.3.887: attempt to access beyond end of device [ 391.470561][ T9174] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 391.483725][ T9174] gfs2: error 10 reading superblock [ 391.515791][ T9175] Invalid ELF header type: 3 != 1 [ 392.365687][ T27] usb 3-1: USB disconnect, device number 8 [ 393.620582][ T9208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.248875][ T28] audit: type=1326 audit(1778275537.279:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9202 comm="syz.3.898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 394.454071][ T28] audit: type=1326 audit(1778275537.279:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9202 comm="syz.3.898" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 394.478175][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.159752][ T9214] syz.1.899: attempt to access beyond end of device [ 395.159752][ T9214] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 395.174665][ T9214] gfs2: error 10 reading superblock [ 395.202170][ T9216] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 395.233430][ T9216] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 395.744264][ T9218] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 395.794229][ T9218] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 397.890668][ T9248] Invalid ELF header type: 3 != 1 [ 399.517426][ T9267] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 399.663997][ T9270] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 400.448897][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 400.648836][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 400.656346][ T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.688418][ T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.708980][ T8] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 400.748747][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 400.758845][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 400.791755][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.821576][ T8] usb 4-1: config 0 descriptor?? [ 401.240157][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 401.258080][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 401.273296][ T8] usb 4-1: USB disconnect, device number 22 [ 401.472671][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 401.678914][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 401.694785][ T9] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 401.719225][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 401.753069][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 401.808954][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 401.820679][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 401.838849][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.852491][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 401.868821][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.084931][ T9] usb 3-1: usb_control_msg returned -32 [ 402.094201][ T9] usbtmc 3-1:16.0: can't read capabilities [ 402.330226][ T9293] vivid-002: disconnect [ 402.842870][ T9290] vivid-002: reconnect [ 404.401053][ T9] usb 3-1: USB disconnect, device number 9 [ 405.319301][ T9311] syz.0.930: attempt to access beyond end of device [ 405.319301][ T9311] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 405.319323][ T9311] gfs2: error 10 reading superblock [ 406.309256][ T5761] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 406.838897][ T5761] usb 2-1: Using ep0 maxpacket: 16 [ 406.875069][ T5761] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.901118][ T5761] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.958059][ T5761] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 407.026414][ T5761] usb 2-1: config 0 interface 0 has no altsetting 0 [ 407.033255][ T5761] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 407.042405][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.053840][ T5761] usb 2-1: config 0 descriptor?? [ 407.192156][ T9328] vivid-000: disconnect [ 407.559623][ T5761] usbhid 2-1:0.0: can't add hid device: -71 [ 407.565670][ T5761] usbhid: probe of 2-1:0.0 failed with error -71 [ 407.579035][ T9324] vivid-000: reconnect [ 407.590307][ T5761] usb 2-1: USB disconnect, device number 11 [ 408.940283][ T9343] syz.3.938: attempt to access beyond end of device [ 408.940283][ T9343] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 408.953515][ T9343] gfs2: error 10 reading superblock [ 409.838901][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 410.033743][ T5782] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 410.048949][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 410.057371][ T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 410.068346][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 410.079626][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 410.089720][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 410.101011][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 410.111422][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.138441][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.153735][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.379179][ T9] usb 2-1: usb_control_msg returned -32 [ 410.394658][ T9] usbtmc 2-1:16.0: can't read capabilities [ 411.711118][ T9375] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9375] [ 411.909801][ T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 412.196201][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.237716][ T27] usb 1-1: config 0 has no interfaces? [ 412.250336][ T27] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 412.279735][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.306345][ T27] usb 1-1: config 0 descriptor?? [ 412.390402][ T27] usb 2-1: USB disconnect, device number 12 [ 412.795362][ T9382] Invalid ELF header type: 3 != 1 [ 412.938985][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 413.199288][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 413.277213][ T27] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.348216][ T27] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.415895][ T27] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 413.501514][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 413.553278][ T27] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 413.620335][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.710122][ T27] usb 2-1: config 0 descriptor?? [ 413.996511][ T9387] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 414.013801][ T9387] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 414.246374][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 414.253182][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 414.263554][ T27] usb 2-1: USB disconnect, device number 13 [ 414.394190][ T9393] syz.2.952: attempt to access beyond end of device [ 414.394190][ T9393] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 414.407637][ T9393] gfs2: error 10 reading superblock [ 414.679985][ T27] usb 1-1: USB disconnect, device number 12 [ 415.019337][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 415.364244][ T9406] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 415.391547][ T5782] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 415.535003][ T9406] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 415.589979][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 415.778876][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 415.798741][ T8] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 415.819987][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 415.851446][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 415.881066][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 415.922751][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 415.961026][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.998918][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 416.018172][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.250392][ T8] usb 2-1: usb_control_msg returned -32 [ 416.259670][ T8] usbtmc 2-1:16.0: can't read capabilities [ 416.752584][ T9420] vivid-002: disconnect [ 417.056572][ T9416] vivid-002: reconnect [ 417.278871][ T5782] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 417.817052][ T9436] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 417.849201][ T9436] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 418.038646][ T5782] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 418.259999][ T5819] usb 2-1: USB disconnect, device number 14 [ 419.735128][ T9456] vivid-000: disconnect [ 420.242566][ T9452] vivid-000: reconnect [ 420.800737][ T5782] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 421.068900][ T5819] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 421.139979][ T9481] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 421.158668][ T9481] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 421.278878][ T5819] usb 1-1: Using ep0 maxpacket: 8 [ 421.292941][ T5819] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 421.311174][ T5819] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 421.340617][ T5819] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 421.363446][ T5819] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 421.389391][ T5819] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 421.412895][ T5819] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.443401][ T5819] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 421.479573][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.729409][ T5819] usb 1-1: usb_control_msg returned -32 [ 421.746037][ T5819] usbtmc 1-1:16.0: can't read capabilities [ 423.106443][ T2130] usb 1-1: USB disconnect, device number 13 [ 423.226699][ T5782] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 423.417347][ T9503] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 423.440520][ T9503] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 424.259660][ T5782] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 425.415401][ T9532] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 425.918877][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 426.108856][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 426.115811][ T9] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 426.124499][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 426.136741][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 426.147101][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 426.161250][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 426.186960][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.200224][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.210621][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.426999][ T9] usb 4-1: usb_control_msg returned -32 [ 426.439154][ T9] usbtmc 4-1:16.0: can't read capabilities [ 426.680421][ T5782] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 427.006727][ T27] usb 4-1: USB disconnect, device number 23 [ 427.733436][ T9560] syz.2.1000: attempt to access beyond end of device [ 427.733436][ T9560] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 427.746682][ T9560] gfs2: error 10 reading superblock [ 427.846848][ T5782] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 428.138650][ T9571] vivid-001: disconnect [ 428.732352][ T9568] vivid-001: reconnect [ 429.102937][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 429.348890][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 429.417753][ T9] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 429.472452][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 429.553679][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 429.631709][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 429.728958][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 429.748234][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.791744][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.840854][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.091749][ T9] usb 4-1: usb_control_msg returned -32 [ 430.110038][ T9] usbtmc 4-1:16.0: can't read capabilities [ 430.772710][ T5819] usb 4-1: USB disconnect, device number 24 [ 431.537919][ T9606] syz.1.1013: attempt to access beyond end of device [ 431.537919][ T9606] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 431.551644][ T9606] gfs2: error 10 reading superblock [ 431.849678][ T5782] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 432.447902][ T5782] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 432.868953][ T5761] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 433.052211][ T5761] usb 3-1: Using ep0 maxpacket: 16 [ 433.061015][ T5761] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.074486][ T5761] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.085515][ T5761] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 433.099400][ T5761] usb 3-1: config 0 interface 0 has no altsetting 0 [ 433.106067][ T5761] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 433.115266][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.126043][ T5761] usb 3-1: config 0 descriptor?? [ 433.336369][ T9632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 433.559805][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 433.567742][ T5761] usbhid 3-1:0.0: can't add hid device: -71 [ 433.577043][ T5761] usbhid: probe of 3-1:0.0 failed with error -71 [ 433.586636][ T5761] usb 3-1: USB disconnect, device number 10 [ 434.949033][ T5782] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 435.068995][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 435.268843][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 435.318194][ T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 435.338945][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 435.390597][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 435.423069][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 435.471937][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 435.495941][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.543779][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 435.584446][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.877248][ T9] usb 2-1: usb_control_msg returned -32 [ 435.893418][ T9] usbtmc 2-1:16.0: can't read capabilities [ 435.900706][ T9660] syz.3.1027: attempt to access beyond end of device [ 435.900706][ T9660] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 435.916029][ T9660] gfs2: error 10 reading superblock [ 435.971498][ T5782] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 436.485197][ T9] usb 2-1: USB disconnect, device number 15 [ 437.623357][ T5782] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 438.312967][ T9701] syz.1.1037: attempt to access beyond end of device [ 438.312967][ T9701] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 438.327209][ T9701] gfs2: error 10 reading superblock [ 438.608927][ T5782] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 439.078883][ T2130] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 439.543912][ T9724] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 439.752533][ T2130] usb 3-1: Using ep0 maxpacket: 8 [ 439.933858][ T2130] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 440.224097][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.230621][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.252899][ T2130] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 440.269959][ T2130] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 440.281498][ T2130] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 440.293183][ T2130] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 440.314413][ T2130] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.359430][ T2130] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 440.391652][ T2130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.846045][ T2130] usb 3-1: usb_control_msg returned -32 [ 440.864459][ T2130] usbtmc 3-1:16.0: can't read capabilities [ 442.165584][ T9] usb 3-1: USB disconnect, device number 11 [ 442.661562][ T9743] syz.1.1047: attempt to access beyond end of device [ 442.661562][ T9743] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 442.676575][ T9743] gfs2: error 10 reading superblock [ 443.120843][ T9763] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 443.202003][ T9763] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 444.281335][ T9773] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 444.354500][ T9773] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 445.509834][ T9781] syz.1.1059: attempt to access beyond end of device [ 445.509834][ T9781] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 445.523070][ T9781] gfs2: error 10 reading superblock [ 445.604561][ T27] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 450.525327][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 450.728682][ T9794] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 450.745700][ T9796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.929137][ T27] usb 4-1: device descriptor read/all, error -71 [ 452.178219][ T9819] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 453.372637][ T9824] syz.1.1069: attempt to access beyond end of device [ 453.372637][ T9824] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 453.386060][ T9824] gfs2: error 10 reading superblock [ 455.666356][ T9843] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 455.693807][ T9848] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 457.841053][ T9856] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 457.866379][ T9858] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 458.131415][ T9863] vivid-001: disconnect [ 458.574364][ T9861] vivid-001: reconnect [ 458.787493][ T9867] syz.3.1079: attempt to access beyond end of device [ 458.787493][ T9867] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 458.801465][ T9867] gfs2: error 10 reading superblock [ 459.647655][ T9871] vivid-000: disconnect [ 459.652478][ T9869] vivid-000: reconnect [ 461.845354][ T5782] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 462.208822][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 462.851907][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.856729][ T9923] vivid-002: disconnect [ 463.898072][ T9922] vivid-002: reconnect [ 463.989729][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 464.025798][ T2994] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 464.037128][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 464.049099][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.115513][ T8] usb 2-1: config 0 descriptor?? [ 465.768123][ T5815] usb 2-1: USB disconnect, device number 16 [ 466.170383][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 466.309459][ T9967] random: crng reseeded on system resumption [ 467.500449][ T9973] vivid-002: disconnect [ 468.009177][ T9971] vivid-002: reconnect [ 468.919204][ T5782] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 469.516584][T10013] random: crng reseeded on system resumption [ 471.049239][T10019] vivid-002: disconnect [ 471.262790][T10018] vivid-002: reconnect [ 471.888510][ T5782] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 472.324317][T10035] syz.3.1126: attempt to access beyond end of device [ 472.324317][T10035] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 472.338244][T10035] gfs2: error 10 reading superblock [ 472.688944][ T2130] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 472.780012][T10061] Invalid ELF header type: 3 != 1 [ 474.404566][T10063] vivid-002: disconnect [ 474.538671][T10059] vivid-002: reconnect [ 474.563067][ T2130] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.599672][ T2130] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 474.647460][ T2130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.726738][ T2130] usb 3-1: config 0 descriptor?? [ 474.770993][ T2130] pwc: Askey VC010 type 2 USB webcam detected. [ 475.020754][ T5782] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 475.222511][ T2130] pwc: recv_control_msg error -32 req 02 val 2b00 [ 475.234762][ T2130] pwc: recv_control_msg error -32 req 02 val 2700 [ 475.246190][ T2130] pwc: recv_control_msg error -32 req 02 val 2c00 [ 475.257516][ T2130] pwc: recv_control_msg error -32 req 04 val 1000 [ 475.272925][ T2130] pwc: recv_control_msg error -32 req 04 val 1300 [ 475.285987][ T2130] pwc: recv_control_msg error -32 req 04 val 1400 [ 475.313277][ T2130] pwc: recv_control_msg error -32 req 02 val 2000 [ 475.325812][ T2130] pwc: recv_control_msg error -32 req 02 val 2100 [ 475.343681][ T2130] pwc: recv_control_msg error -32 req 04 val 1500 [ 475.362989][ T2130] pwc: recv_control_msg error -32 req 02 val 2500 [ 475.397684][ T2130] pwc: recv_control_msg error -32 req 02 val 2400 [ 475.430736][ T2130] pwc: recv_control_msg error -71 req 02 val 2600 [ 475.448466][ T2130] pwc: recv_control_msg error -71 req 02 val 2900 [ 475.466666][ T2130] pwc: recv_control_msg error -71 req 02 val 2800 [ 475.488554][ T2130] pwc: recv_control_msg error -71 req 04 val 1100 [ 475.505386][ T2130] pwc: recv_control_msg error -71 req 04 val 1200 [ 475.523023][ T2130] pwc: Registered as video103. [ 476.149258][ T2130] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 476.165700][ T2130] usb 3-1: USB disconnect, device number 12 [ 476.811013][T10087] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by " [ 476.880405][T10088] Invalid ELF header type: 3 != 1 [ 476.971539][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.992989][T10092] Invalid ELF header type: 3 != 1 [ 479.335565][T10096] Invalid ELF header type: 3 != 1 [ 483.368835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 483.669907][ T5782] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 483.978066][T10132] Invalid ELF header type: 3 != 1 [ 483.993459][T10131] Invalid ELF header type: 3 != 1 [ 486.040843][T10133] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 486.121342][T10139] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 486.699630][T10148] vivid-003: disconnect [ 486.720399][T10147] vivid-003: reconnect [ 487.940864][T10160] Invalid ELF header type: 3 != 1 [ 489.884666][T10173] Invalid ELF header type: 3 != 1 [ 491.862255][T10176] syz.0.1165: attempt to access beyond end of device [ 491.862255][T10176] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 491.934462][T10176] gfs2: error 10 reading superblock [ 492.194277][T10193] vivid-000: disconnect [ 492.534134][T10187] vivid-000: reconnect [ 493.239749][T10202] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5771] was attempted by " [ 500.676557][T10264] vivid-002: disconnect [ 500.767694][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.069117][T10266] syz.2.1185: attempt to access beyond end of device [ 501.069117][T10266] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 501.083944][T10266] gfs2: error 10 reading superblock [ 501.282030][T10259] vivid-002: reconnect [ 501.532348][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.546350][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.614763][T10303] random: crng reseeded on system resumption [ 508.162749][T10343] Invalid ELF header type: 3 != 1 [ 508.968861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 509.300989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 509.318965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 513.415623][T10379] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by " [ 513.878390][T10384] Invalid ELF header type: 3 != 1 [ 519.052512][T10410] vivid-000: disconnect [ 519.057395][T10409] vivid-000: reconnect [ 519.521963][T10421] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by " [ 519.817599][T10422] syz.0.1227: attempt to access beyond end of device [ 519.817599][T10422] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 519.908703][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.929407][T10422] gfs2: error 10 reading superblock [ 520.263469][T10413] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 520.341517][T10418] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 520.417568][ T5782] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 522.006734][T10440] Invalid ELF header type: 3 != 1 [ 523.058859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 525.025480][T10452] vivid-000: disconnect [ 525.030481][T10451] vivid-000: reconnect [ 525.909030][T10459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.494102][ T28] audit: type=1326 audit(1778275670.119:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.1.1237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e5d9cdd9 code=0x7ffc0000 [ 526.518422][ T28] audit: type=1326 audit(1778275670.119:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10449 comm="syz.1.1237" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e5d9cdd9 code=0x7ffc0000 [ 526.767980][T10465] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by " [ 527.925101][T10481] Invalid ELF header type: 3 != 1 [ 530.071944][T10488] fuse: Bad value for 'fd' [ 530.361952][T10497] vivid-002: disconnect [ 530.392809][T10495] vivid-002: reconnect [ 530.409030][T10366] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 530.601080][T10366] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 530.620000][T10366] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 530.645872][T10366] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 530.668803][T10366] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 530.701458][T10366] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 530.735833][T10366] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 530.757025][T10366] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 530.777209][T10366] usb 1-1: Product: syz [ 530.807478][T10366] usb 1-1: Manufacturer: syz [ 530.825301][T10366] cdc_wdm 1-1:1.0: skipping garbage [ 530.837391][T10366] cdc_wdm 1-1:1.0: skipping garbage [ 530.931867][T10504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.977380][ T28] audit: type=1326 audit(1778275674.589:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.3.1249" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 531.502183][ T28] audit: type=1326 audit(1778275674.599:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.3.1249" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 531.626348][T10366] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 531.632997][T10366] cdc_wdm 1-1:1.0: Unknown control protocol [ 531.830117][T10508] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by " [ 533.148642][T10366] usb 1-1: USB disconnect, device number 14 [ 533.239700][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.453698][T10524] Invalid ELF header type: 3 != 1 [ 535.741243][T10534] fuse: Bad value for 'fd' [ 535.748781][T10531] vivid-002: disconnect [ 535.815105][T10530] vivid-002: reconnect [ 536.194149][T10541] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by " [ 538.292033][T10545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 538.523896][T10554] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 538.566662][T10554] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 538.758875][ T28] audit: type=1326 audit(1778275682.069:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.0.1258" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 538.897343][ T28] audit: type=1326 audit(1778275682.069:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.0.1258" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 539.426282][T10366] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 539.444124][T10567] Invalid ELF header type: 3 != 1 [ 542.438783][T10366] usb 3-1: device not accepting address 13, error -71 [ 543.610100][T10587] vivid-003: disconnect [ 543.950947][T10584] vivid-003: reconnect [ 544.299842][T10591] random: crng reseeded on system resumption [ 545.751497][T10612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 545.991508][ T28] audit: type=1326 audit(1778275689.389:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10592 comm="syz.2.1272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 546.301845][ T28] audit: type=1326 audit(1778275689.389:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10592 comm="syz.2.1272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 546.368876][ T23] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 546.561143][ T23] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 546.570655][ T23] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 546.581144][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 546.590512][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 546.602106][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 546.617817][ T23] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 546.627330][ T23] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 546.649309][ T23] usb 4-1: Product: syz [ 546.688000][ T23] usb 4-1: Manufacturer: syz [ 546.720081][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 546.725340][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 546.791875][ T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 546.797800][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 547.860437][T10625] vivid-003: disconnect [ 547.994198][T10622] vivid-003: reconnect [ 549.183703][ T27] usb 4-1: USB disconnect, device number 27 [ 549.465711][T10634] random: crng reseeded on system resumption [ 550.681521][T10647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 550.744136][ T28] audit: type=1326 audit(1778275694.369:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10645 comm="syz.0.1286" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 550.868304][ T28] audit: type=1326 audit(1778275694.369:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10645 comm="syz.0.1286" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 552.381195][ T2130] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 552.655146][ T2130] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.763539][ T2130] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 552.915102][ T2130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.927964][ T2130] usb 2-1: config 0 descriptor?? [ 552.937066][ T2130] pwc: Askey VC010 type 2 USB webcam detected. [ 553.048880][ T5761] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 553.260642][ T5761] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 553.278792][ T5761] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 553.295821][ T5761] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 553.312512][ T5761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 553.323868][ T5761] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 553.339960][ T5761] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 553.349159][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 553.357730][ T5761] usb 3-1: Product: syz [ 553.357950][ T2130] pwc: recv_control_msg error -32 req 02 val 2b00 [ 553.375826][ T2130] pwc: recv_control_msg error -32 req 02 val 2700 [ 553.402587][ T2130] pwc: recv_control_msg error -32 req 02 val 2c00 [ 553.422315][ T5761] usb 3-1: Manufacturer: syz [ 553.429313][T10678] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by " [ 553.456677][ T2130] pwc: recv_control_msg error -32 req 04 val 1000 [ 553.457508][ T2130] pwc: recv_control_msg error -32 req 04 val 1300 [ 553.458262][ T2130] pwc: recv_control_msg error -32 req 04 val 1400 [ 553.459259][ T2130] pwc: recv_control_msg error -32 req 02 val 2000 [ 553.460124][ T2130] pwc: recv_control_msg error -32 req 02 val 2100 [ 553.460858][ T2130] pwc: recv_control_msg error -32 req 04 val 1500 [ 553.461602][ T2130] pwc: recv_control_msg error -32 req 02 val 2500 [ 553.483700][ T5761] cdc_wdm 3-1:1.0: skipping garbage [ 553.483758][ T5761] cdc_wdm 3-1:1.0: skipping garbage [ 553.576749][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.676347][T10679] syz.3.1294: attempt to access beyond end of device [ 553.676347][T10679] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 553.690654][T10679] gfs2: error 10 reading superblock [ 553.711383][ T5761] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 553.726242][ T2130] pwc: recv_control_msg error -71 req 02 val 2600 [ 553.757675][ T2130] pwc: recv_control_msg error -71 req 02 val 2900 [ 553.773007][ T2130] pwc: recv_control_msg error -71 req 02 val 2800 [ 553.776849][ T5761] cdc_wdm 3-1:1.0: Unknown control protocol [ 553.786895][ T2130] pwc: recv_control_msg error -71 req 04 val 1100 [ 553.808054][ T2130] pwc: recv_control_msg error -71 req 04 val 1200 [ 553.972655][ T2130] pwc: Registered as video103. [ 553.991654][ T2130] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 554.018093][ T2130] usb 2-1: USB disconnect, device number 17 [ 555.277611][T10366] usb 3-1: USB disconnect, device number 15 [ 556.953904][T10699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 556.968427][ T28] audit: type=1326 audit(1778275700.589:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1299" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 557.116433][ T28] audit: type=1326 audit(1778275700.589:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10695 comm="syz.2.1299" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 560.319165][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 561.561876][T10745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 562.177565][ T28] audit: type=1326 audit(1778275705.219:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.3.1309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 562.325766][ T28] audit: type=1326 audit(1778275705.219:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.3.1309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 563.650450][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.672751][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.748951][T10794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.063799][ T28] audit: type=1326 audit(1778275713.679:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10787 comm="syz.0.1319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 570.117788][T10793] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 570.129364][ T28] audit: type=1326 audit(1778275713.679:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10787 comm="syz.0.1319" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 570.404205][T10793] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 574.925908][T10828] Invalid ELF header type: 3 != 1 [ 579.628962][T10841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 579.851592][ T28] audit: type=1326 audit(1778275723.469:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.1.1329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e5d9cdd9 code=0x7ffc0000 [ 580.168783][ T28] audit: type=1326 audit(1778275723.469:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.1.1329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e5d9cdd9 code=0x7ffc0000 [ 581.791663][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 582.293130][T10866] Invalid ELF header type: 3 != 1 [ 584.951618][T10867] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 584.974317][T10875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.412783][T10883] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 585.431022][T10883] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 588.502954][T10914] Invalid ELF header type: 3 != 1 [ 589.581057][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 590.294409][T10930] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by " [ 591.927264][T10951] Invalid ELF header type: 3 != 1 [ 594.325329][ T5782] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 596.673701][T10987] Invalid ELF header type: 3 != 1 [ 597.883444][T10999] vivid-003: disconnect [ 598.250399][T10992] vivid-003: reconnect [ 600.717401][T11028] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 600.750368][T11028] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 602.327172][ T11] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 603.651098][T11056] Invalid ELF header type: 3 != 1 [ 605.745573][T11069] x_tables: ip_tables: osf match: only valid for protocol 6 [ 611.494154][T11120] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 611.528861][T11120] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 617.309049][ T5815] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 617.523046][ T5815] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 617.550245][ T5815] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 617.580093][ T5815] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 617.600777][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 617.624682][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 617.660437][ T5815] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 617.670664][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 617.685097][ T5815] usb 3-1: Product: syz [ 617.692543][ T5815] usb 3-1: Manufacturer: syz [ 617.726082][ T5815] cdc_wdm 3-1:1.0: skipping garbage [ 617.735865][ T5815] cdc_wdm 3-1:1.0: skipping garbage [ 617.765026][ T5815] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 617.781492][ T5815] cdc_wdm 3-1:1.0: Unknown control protocol [ 621.183162][ T8] usb 3-1: USB disconnect, device number 16 [ 624.423639][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.513993][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.142632][T11205] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 626.169786][T11205] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 627.844948][T11212] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 627.892152][T11212] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 629.386530][T11232] Invalid ELF header type: 3 != 1 [ 631.439235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 632.761518][T11250] vivid-000: disconnect [ 633.217143][T11248] vivid-000: reconnect [ 635.546571][T11269] Invalid ELF header type: 3 != 1 [ 639.118702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 639.701861][ T49] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 641.361456][T11293] vivid-002: disconnect [ 641.981631][T11291] vivid-002: reconnect [ 643.840323][T11313] Invalid ELF header type: 3 != 1 [ 647.624662][T11354] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by " [ 648.879763][T11359] vivid-002: disconnect [ 649.262460][T11357] vivid-002: reconnect [ 650.472392][T11368] Invalid ELF header type: 3 != 1 [ 658.730044][T11413] Invalid ELF header type: 3 != 1 [ 665.395078][T11448] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by " [ 665.605393][T11450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.696408][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.828754][ T28] audit: type=1326 audit(1778275809.369:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.3.1473" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 666.357643][ T28] audit: type=1326 audit(1778275809.369:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.3.1473" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 667.504729][T11457] Invalid ELF header type: 3 != 1 [ 669.749151][T11468] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 669.778879][T11468] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 675.660325][T11488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 675.721848][ T28] audit: type=1326 audit(1778275819.349:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.0.1482" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 675.804129][ T28] audit: type=1326 audit(1778275819.349:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11483 comm="syz.0.1482" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 677.131190][T11503] Invalid ELF header type: 3 != 1 [ 680.015566][T11516] Invalid ELF header type: 3 != 1 [ 683.281534][T11533] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 683.318184][T11534] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 683.484084][ T8274] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 683.850873][ T8274] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 683.879359][ T8274] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 683.954863][T11539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.072640][ T8274] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 684.084335][ T8274] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 684.106373][ T28] audit: type=1326 audit(1778275827.699:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11536 comm="syz.0.1493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 684.245049][ T8274] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 684.478210][ T28] audit: type=1326 audit(1778275827.699:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11536 comm="syz.0.1493" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 685.130386][ T8274] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 685.138590][ T8274] usb 2-1: Product: syz [ 685.191126][ T8274] usb 2-1: Manufacturer: syz [ 685.262328][ T8274] usb 2-1: can't set config #1, error -71 [ 685.330173][ T8274] usb 2-1: USB disconnect, device number 18 [ 685.396547][T11547] Invalid ELF header type: 3 != 1 [ 685.865492][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.888100][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.234378][T11565] Invalid ELF header type: 3 != 1 [ 689.905072][T11576] syz.0.1499: attempt to access beyond end of device [ 689.905072][T11576] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 689.947838][T11576] gfs2: error 10 reading superblock [ 691.355385][T11592] Invalid ELF header type: 3 != 1 [ 695.226931][ T5782] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 695.537004][T11616] Invalid ELF header type: 3 != 1 [ 697.862082][T11638] Invalid ELF header type: 3 != 1 [ 699.417843][ T5782] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 701.143454][T11660] Invalid ELF header type: 3 != 1 [ 702.639974][T11679] Invalid ELF header type: 3 != 1 [ 703.893527][T11683] Invalid ELF header type: 3 != 1 [ 707.853243][ T1067] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 708.310082][T10366] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 708.520665][T10366] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 708.538848][T10366] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 708.569171][T10366] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 708.578221][T10366] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 708.654410][T10366] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 708.680804][T10366] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 708.701860][T10366] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 708.742220][T10366] usb 4-1: Product: syz [ 708.753713][T10366] usb 4-1: Manufacturer: syz [ 708.801484][T10366] cdc_wdm 4-1:1.0: skipping garbage [ 708.821537][T10366] cdc_wdm 4-1:1.0: skipping garbage [ 708.849222][T10366] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 708.880816][T10366] cdc_wdm 4-1:1.0: Unknown control protocol [ 711.019673][T11705] Invalid ELF header type: 3 != 1 [ 714.035831][ T5838] usb 4-1: USB disconnect, device number 28 [ 714.129791][T11724] Invalid ELF header type: 3 != 1 [ 714.814366][T11726] Invalid ELF header type: 3 != 1 [ 718.245807][ T1361] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 721.203006][T11760] vivid-003: disconnect [ 721.362197][T11756] vivid-003: reconnect [ 721.500724][T11767] Invalid ELF header type: 3 != 1 [ 723.423221][T11769] Invalid ELF header type: 3 != 1 [ 725.411896][ T5782] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 728.892579][T11796] vivid-002: disconnect [ 729.354983][T11793] vivid-002: reconnect [ 729.571882][T11801] Invalid ELF header type: 3 != 1 [ 731.645529][T11808] Invalid ELF header type: 3 != 1 [ 735.955997][T11838] vivid-000: disconnect [ 736.291659][T11836] vivid-000: reconnect [ 736.774445][T11841] vivid-000: disconnect [ 737.127052][T11846] Invalid ELF header type: 3 != 1 [ 739.034366][T11839] vivid-000: reconnect [ 741.759824][T11867] vivid-003: disconnect [ 742.123691][T11865] vivid-003: reconnect [ 742.719831][T11881] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 743.085432][T11882] syz.0.1581: attempt to access beyond end of device [ 743.085432][T11882] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 743.099270][T11882] gfs2: error 10 reading superblock [ 743.980494][ T28] audit: type=1326 audit(1778275886.369:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.3.1583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 744.014948][ T28] audit: type=1326 audit(1778275886.379:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.3.1583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 744.401433][T11888] Invalid ELF header type: 3 != 1 [ 747.509996][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.516656][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.723307][T11901] vivid-000: disconnect [ 748.781834][T11904] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 748.820503][T11897] vivid-000: reconnect [ 749.437541][T11919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 749.787168][T11920] syz.3.1592: attempt to access beyond end of device [ 749.787168][T11920] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 749.800655][T11920] gfs2: error 10 reading superblock [ 750.418855][ T28] audit: type=1326 audit(1778275893.109:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.2.1593" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 750.849488][ T28] audit: type=1326 audit(1778275893.109:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11914 comm="syz.2.1593" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 751.719826][ T2946] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 751.876248][T11929] vivid-002: disconnect [ 752.847412][T11926] vivid-002: reconnect [ 753.675106][T11948] vivid-000: disconnect [ 754.359289][T11946] vivid-000: reconnect [ 756.235408][T11959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 756.659055][ T28] audit: type=1326 audit(1778275899.889:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.3.1603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 756.953373][ T28] audit: type=1326 audit(1778275899.889:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.3.1603" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0659cdd9 code=0x7ffc0000 [ 757.478918][ T5838] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 757.690759][ T5838] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 757.798113][ T5838] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 758.519033][ T5838] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 758.528084][ T5838] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 758.546129][ T5838] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 758.568796][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 758.576847][ T5838] usb 1-1: Product: syz [ 758.602124][ T5838] usb 1-1: Manufacturer: syz [ 758.637836][ T5838] cdc_wdm 1-1:1.0: skipping garbage [ 758.646036][ T5838] cdc_wdm 1-1:1.0: skipping garbage [ 758.670445][ T5838] cdc_wdm 1-1:1.0: skipping garbage [ 758.680918][ T5838] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 762.308910][T12008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 762.458977][ T28] audit: type=1326 audit(1778275906.079:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.2.1613" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 762.698220][ T5838] usb 1-1: USB disconnect, device number 15 [ 762.722968][ T28] audit: type=1326 audit(1778275906.079:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12003 comm="syz.2.1613" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 763.003288][T12015] vivid-001: disconnect [ 763.701115][T12012] vivid-001: reconnect [ 763.873910][T12024] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 766.849197][T12047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 767.148717][ T28] audit: type=1326 audit(1778275910.749:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.0.1622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 767.232483][ T28] audit: type=1326 audit(1778275910.749:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.0.1622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f979cdd9 code=0x7ffc0000 [ 769.664721][T12080] vivid-000: disconnect [ 770.033998][T12077] vivid-000: reconnect [ 770.625292][T12089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 770.661045][ T28] audit: type=1326 audit(1778275914.279:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.2.1633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 771.040963][ T28] audit: type=1326 audit(1778275914.279:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.2.1633" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd409d9cdd9 code=0x7ffc0000 [ 771.937452][T12101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 772.674964][T12112] vivid-000: disconnect [ 773.123346][T12109] vivid-000: reconnect [ 775.899622][T12150] vivid-000: disconnect [ 775.904393][T12148] vivid-000: reconnect [ 775.992673][T12154] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1652'. [ 776.016428][T12154] syz.2.1652: attempt to access beyond end of device [ 776.016428][T12154] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 776.044582][T12154] vxfs: unable to read disk superblock at 1 [ 776.056348][T12154] syz.2.1652: attempt to access beyond end of device [ 776.056348][T12154] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 776.090022][T12154] vxfs: unable to read disk superblock at 8 [ 776.095963][T12154] vxfs: can't find superblock. [ 776.173112][ T5782] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 777.319604][T12169] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 778.617307][T12185] vivid-000: disconnect [ 778.622091][T12183] vivid-000: reconnect [ 779.300819][T12198] Invalid ELF header type: 3 != 1 [ 780.719492][ T5782] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 780.963273][ T27] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 781.965441][T12223] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 781.975791][T12223] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 781.997736][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 782.028038][ T27] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 782.055199][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 782.078461][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 782.113195][ T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 782.123905][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 782.133832][ T27] usb 2-1: Product: syz [ 782.138544][ T27] usb 2-1: Manufacturer: syz [ 782.197494][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 782.210467][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 782.216792][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 782.223224][ T27] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 783.434272][T12236] Invalid ELF header type: 3 != 1 [ 785.404871][ T8] usb 2-1: USB disconnect, device number 19 [ 785.612483][T12241] Invalid ELF header type: 3 != 1 [ 786.158822][ T5819] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 786.900831][ T5819] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 786.909994][ T5819] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 786.920589][ T5819] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 786.930185][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 786.941911][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 786.957122][ T5819] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 786.967739][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 786.980785][ T5819] usb 3-1: Product: syz [ 786.993565][ T5819] usb 3-1: Manufacturer: syz [ 787.007797][ T5819] cdc_wdm 3-1:1.0: skipping garbage [ 787.017356][ T5819] cdc_wdm 3-1:1.0: skipping garbage [ 787.059291][ T5819] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 787.072734][ T5819] cdc_wdm 3-1:1.0: Unknown control protocol [ 790.301857][T12265] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 790.314851][T12265] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 790.397190][ T5819] usb 3-1: USB disconnect, device number 17 [ 791.484372][T12285] Invalid ELF header type: 3 != 1 [ 791.797737][ C0] ------------[ cut here ]------------ [ 791.803597][ C0] WARNING: CPU: 0 PID: 0 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600 [ 791.813447][ C0] Modules linked in: [ 791.817396][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 791.824467][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 791.834580][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 791.840979][ C0] Code: 24 4c 89 e7 e8 fe 74 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 b2 82 f7 0f 0b e9 f6 f7 ff ff e8 ed b2 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 b2 82 f7 48 c7 c7 20 89 64 8e 4c 89 e6 [ 791.860663][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 791.866777][ C0] RAX: ffffffff8a046f13 RBX: ffffffff8a045d16 RCX: ffffffff8ce93440 [ 791.874817][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 791.882854][ C0] RBP: 0000000000000000 R08: ffffffff8ce93440 R09: 0000000000000003 [ 791.891019][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805a8663c0 [ 791.899052][ C0] R13: dffffc0000000000 R14: ffff88805a8668b0 R15: ffff88805b3f6024 [ 791.907054][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 791.916041][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 791.922712][ C0] CR2: 000000110c277725 CR3: 000000003093b000 CR4: 00000000003506f0 [ 791.930757][ C0] Call Trace: [ 791.934076][ C0] [ 791.936962][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 791.942613][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 791.948142][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 791.954988][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 791.960621][ C0] __iterate_interfaces+0x243/0x500 [ 791.965889][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 791.972221][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 791.979488][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 791.985768][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 791.992863][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 791.998099][ C0] __hrtimer_run_queues+0x520/0xc40 [ 792.003372][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 792.009440][ C0] ? hw_scan_work+0xf60/0xf60 [ 792.014189][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 792.019358][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 792.025494][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 792.030702][ C0] handle_softirqs+0x280/0x820 [ 792.035593][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 792.040438][ C0] ? do_softirq+0x1a0/0x1a0 [ 792.044989][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 792.050265][ C0] __irq_exit_rcu+0xd3/0x190 [ 792.054902][ C0] ? irq_exit_rcu+0x20/0x20 [ 792.059476][ C0] irq_exit_rcu+0x9/0x20 [ 792.063768][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 792.069479][ C0] [ 792.072449][ C0] [ 792.075413][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 792.081464][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 792.087141][ C0] Code: 19 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 d3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 792.106825][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 792.112987][ C0] RAX: 3aa263f38aef8300 RBX: ffffffff8162aa0d RCX: 3aa263f38aef8300 [ 792.121026][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 792.129075][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 792.137104][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 792.145172][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 792.153213][ C0] ? do_idle+0x33d/0x590 [ 792.157519][ C0] default_idle+0x13/0x20 [ 792.161920][ C0] default_idle_call+0x6c/0xa0 [ 792.166738][ C0] do_idle+0x33d/0x590 [ 792.170882][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 792.176144][ C0] ? do_idle+0x5/0x590 [ 792.180291][ C0] cpu_startup_entry+0x43/0x60 [ 792.185101][ C0] rest_init+0x2e2/0x300 [ 792.189431][ C0] ? time_init+0x40/0x40 [ 792.193722][ C0] arch_call_rest_init+0xe/0x10 [ 792.198649][ C0] start_kernel+0x459/0x4e0 [ 792.203211][ C0] x86_64_start_reservations+0x2a/0x30 [ 792.208753][ C0] x86_64_start_kernel+0x60/0x60 [ 792.213741][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 792.219895][ C0] [ 792.222955][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 792.230275][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 792.237334][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.247418][ C0] Call Trace: [ 792.250741][ C0] [ 792.253610][ C0] dump_stack_lvl+0x18c/0x250 [ 792.258333][ C0] ? show_regs_print_info+0x20/0x20 [ 792.263570][ C0] ? load_image+0x420/0x420 [ 792.268113][ C0] panic+0x2dc/0x730 [ 792.272042][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 792.276587][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 792.282874][ C0] __warn+0x2e0/0x470 [ 792.286900][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 792.292658][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 792.298410][ C0] report_bug+0x2be/0x4f0 [ 792.302765][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 792.308541][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 792.314313][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 792.320067][ C0] handle_bug+0xcf/0x120 [ 792.324338][ C0] exc_invalid_op+0x1a/0x50 [ 792.328867][ C0] asm_exc_invalid_op+0x1a/0x20 [ 792.333754][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 792.340121][ C0] Code: 24 4c 89 e7 e8 fe 74 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 b2 82 f7 0f 0b e9 f6 f7 ff ff e8 ed b2 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 b2 82 f7 48 c7 c7 20 89 64 8e 4c 89 e6 [ 792.359756][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 792.365852][ C0] RAX: ffffffff8a046f13 RBX: ffffffff8a045d16 RCX: ffffffff8ce93440 [ 792.373849][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.381842][ C0] RBP: 0000000000000000 R08: ffffffff8ce93440 R09: 0000000000000003 [ 792.389835][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805a8663c0 [ 792.397849][ C0] R13: dffffc0000000000 R14: ffff88805a8668b0 R15: ffff88805b3f6024 [ 792.405853][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 792.411435][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 792.417199][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 792.422953][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 792.428537][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 792.434036][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 792.440854][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 792.446442][ C0] __iterate_interfaces+0x243/0x500 [ 792.451678][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 792.457954][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 792.465192][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 792.471470][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 792.478532][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 792.483774][ C0] __hrtimer_run_queues+0x520/0xc40 [ 792.489011][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 792.495032][ C0] ? hw_scan_work+0xf60/0xf60 [ 792.499756][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 792.504910][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 792.511019][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 792.516170][ C0] handle_softirqs+0x280/0x820 [ 792.520965][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 792.525769][ C0] ? do_softirq+0x1a0/0x1a0 [ 792.530306][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 792.535543][ C0] __irq_exit_rcu+0xd3/0x190 [ 792.540164][ C0] ? irq_exit_rcu+0x20/0x20 [ 792.544717][ C0] irq_exit_rcu+0x9/0x20 [ 792.548988][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 792.554654][ C0] [ 792.557613][ C0] [ 792.560575][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 792.566591][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 792.572258][ C0] Code: 19 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 d3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 792.591900][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 792.598001][ C0] RAX: 3aa263f38aef8300 RBX: ffffffff8162aa0d RCX: 3aa263f38aef8300 [ 792.606003][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 792.614007][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 792.622007][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 792.630008][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 792.638017][ C0] ? do_idle+0x33d/0x590 [ 792.642304][ C0] default_idle+0x13/0x20 [ 792.646688][ C0] default_idle_call+0x6c/0xa0 [ 792.651493][ C0] do_idle+0x33d/0x590 [ 792.655603][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 792.660844][ C0] ? do_idle+0x5/0x590 [ 792.664949][ C0] cpu_startup_entry+0x43/0x60 [ 792.669761][ C0] rest_init+0x2e2/0x300 [ 792.674043][ C0] ? time_init+0x40/0x40 [ 792.678323][ C0] arch_call_rest_init+0xe/0x10 [ 792.683212][ C0] start_kernel+0x459/0x4e0 [ 792.687754][ C0] x86_64_start_reservations+0x2a/0x30 [ 792.693238][ C0] x86_64_start_kernel+0x60/0x60 [ 792.698197][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 792.704305][ C0] [ 792.707919][ C0] Kernel Offset: disabled [ 792.712307][ C0] Rebooting in 86400 seconds..