last executing test programs: 2m15.652956758s ago: executing program 0 (id=564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x1000, 0x2000, 0x1, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x40}}}}}}, 0x0) 2m14.401355981s ago: executing program 0 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xaf) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000100)={0x1, 0x6}, 0x2) 2m12.588965616s ago: executing program 0 (id=568): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) pwritev(r3, &(0x7f0000000480)=[{&(0x7f0000000040)='l', 0x1}, {0x0, 0x8b}], 0x2, 0x8b, 0x800) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) 2m10.250815827s ago: executing program 0 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xfec08000, 0x40000, 0xb, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xc, 0x6}, {0xeeee0000, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x8080000, 0xc000, 0xf, 0xa7, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xffffffff, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x3, 0x4b}, {0x60000, 0x3000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x94, 0x2, 0xb9}, {0xa000, 0xf000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x45, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x0, 0xa, 0x1, 0xb6, 0x1, 0xff}, {0x692daea2027b6777, 0x6}, {0x0, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x14009e, 0x6, 0x0, 0xe000, [0x6, 0x50, 0x8, 0xc5]}) 2m4.854665925s ago: executing program 3 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xaf) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000100)={0x1, 0x6}, 0x2) 2m4.592094682s ago: executing program 3 (id=581): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x28, 0x41, 0x1, 0x5fffc, 0x5, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='{\x00'}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x4040000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 2m2.95152822s ago: executing program 0 (id=584): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00c\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, &(0x7f0000001500)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000"], 0x0, 0x4a, 0x0, 0x200a}, 0x28) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20120) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) 1m59.276043433s ago: executing program 3 (id=589): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00c\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, &(0x7f0000001500)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000"], 0x0, 0x4a, 0x0, 0x200a}, 0x28) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20120) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) 1m57.841212286s ago: executing program 0 (id=591): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f00000001c0)='bi', 0x2) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000500), 0x1000) 1m55.880463974s ago: executing program 3 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xaf) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000100)={0x1, 0x6}, 0x2) 1m48.47680191s ago: executing program 3 (id=601): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00c\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, &(0x7f0000001500)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000"], 0x0, 0x4a, 0x0, 0x200a}, 0x28) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20120) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) 1m46.152676107s ago: executing program 3 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="000002000000000000000200") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") 1m42.284336042s ago: executing program 32 (id=591): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f00000001c0)='bi', 0x2) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000500), 0x1000) 1m30.420444712s ago: executing program 33 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="000002000000000000000200") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") 1m1.712625769s ago: executing program 4 (id=655): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r3, 0x4}, 0x38) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) close(0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r6, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 53.477985726s ago: executing program 4 (id=667): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x42, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$packet(0x11, 0xa, 0x300) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 48.814653064s ago: executing program 4 (id=671): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f00000001c0)='bi', 0x2) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000500), 0x1000) 48.402347454s ago: executing program 4 (id=673): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000480)=[{&(0x7f0000000040)='l', 0x1}], 0x1, 0x8b, 0x800) 46.346540723s ago: executing program 4 (id=675): socket$inet_tcp(0x2, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) recvmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2020) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB], 0x10) sendmsg$inet(r5, 0x0, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 43.861261455s ago: executing program 4 (id=676): bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0xc80) 27.25662571s ago: executing program 34 (id=676): bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0xc80) 26.184313984s ago: executing program 6 (id=698): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000480)=[{&(0x7f0000000040)='l', 0x1}], 0x1, 0x8b, 0x800) 25.570083678s ago: executing program 6 (id=699): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4d, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x9}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x16, 0x1b, 0x67, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}}, "861e2bbe82f3b2"}}}}}, 0x2d) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r6, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000600)={0x7, &(0x7f0000000500)=[{0x15, '\x00', @buffer={"382e5803df92f7e3a82382b3f29b773f0d37e2cd70a8a725cd14ccf5807ab2b2", 0x20}, 0xfffffff4}, {0x28, '\x00', @buffer={"ca0e0de0e3bfde98906058e2a46554208d5237cf85e96d768a2fdaa93f9cfff4", 0x20}, 0x2f79}, {0x2a, '\x00', @data=0x4, 0x6}]}) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r7) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r8, 0xde}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded6713302261b487e569f8fac402918be4ee374a4257d4bf67e86ff4beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b2081640008000000000000cd90d32ebcf5ea2c79482fb0e0cfb8bf19da10adffeafb4747c5853fdaca77fe20bbb66b8e86486c2ea7e519a50fb23e5202f7f02c633d4f56361cd848e6cec9abcbf97c60de6c9d205a4e26b68f", 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 23.748929336s ago: executing program 6 (id=700): socket$inet_tcp(0x2, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) recvmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r5, 0x0, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 21.89763517s ago: executing program 6 (id=703): openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0800000001000000c000000000000000badb980001eae0d5e8764bac0ff331fcfb99a4c326ae87fbe1d04535d6b6afe9691ce347ae18806437b19364396e5c1c973f700f37f59a8c9ab5cc679d2bf90df83e7c3135ffd3d8b83fdd0c562583a9b1b6fa63325d3e25570e41a7435a984af71d5815b6938a75ebce42e8170841be0a3784f490255a9efaf321173f57a57e864891f306d3bb6093d01c4bba1c4783a7bd797736a8a9e0d8b84700a380682de4089959ae56a46fd18a63de801a3d1d25c5f0310cc14bc7d0a144c76a5d485419415e99253a3d289191c47945d9535d1dd8da2f9812c17d"], 0xc80) 19.69714563s ago: executing program 2 (id=707): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4) write(r2, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) 16.030333461s ago: executing program 6 (id=711): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f00000001c0)='bi', 0x2) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000500), 0x1000) 14.937107249s ago: executing program 2 (id=712): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f60, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 14.740875482s ago: executing program 1 (id=713): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f00000001c0)='bi', 0x2) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000500), 0x1000) 12.50662811s ago: executing program 2 (id=714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r3, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r7, r4, 0x4, r6}, 0x10) r8 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d6664227266646e6f3de0c5ab43a5ed798766e8cf9b4cfa804c9ccc7363d46d85a6e866e7ceb3036b3db916d73230bcf5d5fd7e06a9187828d0564e8c0d5365a48db374e8dfdfad46d074a199a0f0f7e9000e37154a7a7b8f9fcf1ee572d8eb87bc4c79f2fc22c7c7f8dcaa99adab8b5d63fc0f21b48adf9ec71ae33ddbc154f28e3aa586dbc55d06dc8425558cbbd96145fd4d16f961c86b4168707fd62f34c1b8ffdd991ee947deec828406a807267819", @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r10], 0x15) write(r8, &(0x7f0000000140)='never', 0x5) r12 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) ioctl$COMEDI_DEVCONFIG(r12, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3c4, 0x6, 0x2, 0xba3, 0x46, 0x7, 0x9, 0x100, 0xffb, 0x7ffe, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x0, 0x66, 0x40034d, 0x5, 0xf4, 0xffffffff, 0x10001, 0xe2df, 0xffb, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) 10.864533898s ago: executing program 1 (id=715): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x3ff, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.21313024s ago: executing program 5 (id=717): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00c\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, &(0x7f0000001500)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000"], 0x0, 0x4a, 0x0, 0x200a}, 0x28) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20120) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) 10.071124052s ago: executing program 1 (id=718): socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x42, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 9.068015421s ago: executing program 5 (id=719): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000500)='\xc4\x85D\xf8U\x01\'>`\xfc\x8a5\xf8\xe8\xd5\x1b\x14TB\xd2\xe4\xa5zd', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 8.782213763s ago: executing program 2 (id=720): openat$kvm(0x0, &(0x7f0000002080), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0800000001000000c000000000000000badb980001eae0d5e8764bac0ff331fcfb99a4c326ae87fbe1d04535d6b6afe9691ce347ae18806437b19364396e5c1c973f700f37f59a8c9ab5cc679d2bf90df83e7c3135ffd3d8b83fdd0c562583a9b1b6fa63325d3e25570e41a7435a984af71d5815b6938a75ebce42e8170841be0a3784f490255a9efaf321173f57a57e864891f306d3bb6093d01c4bba1c4783a7bd797736a8a9e0d8b84700a380682de4089959ae56a46fd18a63de801a3d1d25c5f0310cc14bc7d0a144c76a5d485419415e99253a3d289191c47945d9535d1dd8da2f9812c17d"], 0xc80) 7.69835543s ago: executing program 2 (id=721): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) write(r4, 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000000000)) read$FUSE(r4, 0x0, 0x0) 7.137426172s ago: executing program 6 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000480)=[{0x0}], 0x1, 0x8b, 0x800) 6.804199135s ago: executing program 5 (id=723): openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) 6.608636657s ago: executing program 5 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TC={0x5, 0x6, 0x7}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x2000, 0x10000}) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x2, @local, 0x5}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x8}, @in={0x2, 0x4e20, @multicast1}], 0xb4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=0x0) prlimit64(r5, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r7 = socket(0x10, 0x2, 0x0) r8 = timerfd_create(0x8, 0x0) timerfd_settime(r8, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40000000, 0x3ffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x400059, 0x7, 0x2000}) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000800)={0x0, 0x0, 0x7}) r9 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000380), 0x402, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f00000000c0)=r9, 0x1) 3.570677561s ago: executing program 5 (id=725): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="1d0000001000000000000000", @ANYRES32, @ANYBLOB="27983be2e161f57257ad", @ANYRES64], 0x20) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) 3.524513171s ago: executing program 1 (id=726): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 1.479096057s ago: executing program 1 (id=727): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xfff, 0x7f, 0x1, 0x5}, 0xffffff80, 0x1, 0x15af3, 0x6, 0x8, 0x14, 0x2, 0xe, 0x6, 0x331799a0, {0xf, 0xe9, 0x40, 0x3, 0x2, 0x5}}}}]}, 0x78}}, 0x4c050) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x3ff, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.095658491s ago: executing program 5 (id=728): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00c\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, &(0x7f0000001500)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000"], 0x0, 0x4a, 0x0, 0x200a}, 0x28) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20120) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) 1.068523647s ago: executing program 2 (id=729): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4d, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x9}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x16, 0x1b, 0x67, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}}, "861e2bbe82f3b2"}}}}}, 0x2d) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r6, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000600)={0x7, &(0x7f0000000500)=[{0x15, '\x00', @buffer={"382e5803df92f7e3a82382b3f29b773f0d37e2cd70a8a725cd14ccf5807ab2b2", 0x20}, 0xfffffff4}, {0x28, '\x00', @buffer={"ca0e0de0e3bfde98906058e2a46554208d5237cf85e96d768a2fdaa93f9cfff4", 0x20}, 0x2f79}, {0x2a, '\x00', @data=0x4, 0x6}]}) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r7) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r8, 0xde}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded6713302261b487e569f8fac402918be4ee374a4257d4bf67e86ff4beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b2081640008000000000000cd90d32ebcf5ea2c79482fb0e0cfb8bf19da10adffeafb4747c5853fdaca77fe20bbb66b8e86486c2ea7e519a50fb23e5202f7f02c633d4f56361cd848e6cec9abcbf97c60de6c9d205a4e26b68f", 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 0s ago: executing program 1 (id=730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xaf) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): ctive [ 80.543560][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.550779][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.580581][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.668671][ T4277] device hsr_slave_0 entered promiscuous mode [ 80.675998][ T4277] device hsr_slave_1 entered promiscuous mode [ 80.682582][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.690397][ T4277] Cannot create hsr debugfs directory [ 80.758802][ T4275] device hsr_slave_0 entered promiscuous mode [ 80.765943][ T4275] device hsr_slave_1 entered promiscuous mode [ 80.775514][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.783128][ T4275] Cannot create hsr debugfs directory [ 81.018937][ T4276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.032744][ T4276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.046191][ T4276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.069956][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.141266][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.151546][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.161759][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.180029][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.224068][ T4289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.234577][ T4289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.252078][ T4289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.264013][ T4289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.382003][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.400336][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.416479][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.450001][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.462009][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.473457][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.495074][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.511859][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.553844][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.570893][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.594928][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.604205][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.617846][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.627161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.640473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.649760][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.657189][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.666578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.675737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.684352][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.691515][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.700147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.727424][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.757167][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.766870][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.775666][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.784932][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.799522][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.809709][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.818699][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.828069][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.837199][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.846332][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.854935][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.868715][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.888580][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.909430][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.919431][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.929327][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.936517][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.946750][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.956252][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.964609][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.997630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.008878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.021089][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.028277][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.037928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.046031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.067477][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.077676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.092536][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.113313][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.131286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.140039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.179700][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.190426][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.203984][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.223036][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.233850][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.249674][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.260635][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.273866][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.285650][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.292793][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.301719][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.310660][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.330284][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.344189][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.356840][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.372880][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.386247][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.406886][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.414678][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.455973][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.476241][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.493151][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.506231][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.545234][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 82.551324][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 82.557608][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 82.557628][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 82.563662][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 82.615227][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.624030][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.641932][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.649149][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.666004][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.674871][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.686356][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.693492][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.702346][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.711812][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.721533][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.734590][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.743109][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.791621][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.815221][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.833202][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.848923][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.859814][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.872797][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.884434][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.897076][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.907232][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.917957][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.929848][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.941389][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.953633][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.022023][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.050193][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.062862][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.070739][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.085304][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.094338][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.108752][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.126031][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.168220][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.176601][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.184091][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.194328][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.207167][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.219127][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.228282][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.237381][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.244519][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.254301][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.293258][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.308293][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.319376][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.328542][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.335727][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.381128][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.396521][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.412716][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.422586][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.439044][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.452309][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.463691][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.480477][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.492147][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.532554][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.550443][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.561541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.574844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.599724][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.634675][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.644814][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.660007][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.671635][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.688425][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.696665][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.712840][ T4274] device veth0_vlan entered promiscuous mode [ 83.734845][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.756035][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.775465][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.783537][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.814701][ T4276] device veth0_vlan entered promiscuous mode [ 83.870122][ T4274] device veth1_vlan entered promiscuous mode [ 83.888467][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.907434][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.915363][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.924779][ T4276] device veth1_vlan entered promiscuous mode [ 83.959656][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.974474][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.984796][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.019640][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.058182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.075701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.093524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.102469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.124616][ T4274] device veth0_macvtap entered promiscuous mode [ 84.142989][ T4274] device veth1_macvtap entered promiscuous mode [ 84.173735][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.182942][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.191732][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.201648][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.212724][ T4276] device veth0_macvtap entered promiscuous mode [ 84.241443][ T4289] device veth0_vlan entered promiscuous mode [ 84.261165][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.271758][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.287510][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.296074][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.304555][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.319567][ T4276] device veth1_macvtap entered promiscuous mode [ 84.329408][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.344397][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.353447][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.378238][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.420504][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.432633][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.451593][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.464256][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.475249][ T4289] device veth1_vlan entered promiscuous mode [ 84.486279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.495366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.504180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.521427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.533515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.576866][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.584443][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.600962][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.612187][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.625763][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 84.631839][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 84.638431][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 84.644488][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 84.654489][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 84.662320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.671237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.680160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.689308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.698385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.710915][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.720731][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.731337][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.740515][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.766912][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.794094][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.803830][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.820275][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.830416][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.849985][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.861148][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.901625][ T4289] device veth0_macvtap entered promiscuous mode [ 84.940337][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.960770][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.972650][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.988866][ T4289] device veth1_macvtap entered promiscuous mode [ 85.049469][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.065544][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.093537][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.110117][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.122694][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.138795][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.162057][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.175956][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.195480][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.207321][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.229772][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.246697][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.254737][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.269208][ T4277] device veth0_vlan entered promiscuous mode [ 85.296652][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.327424][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.340272][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.351771][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.364737][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.412216][ T4277] device veth1_vlan entered promiscuous mode [ 85.427852][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.440240][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.449443][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.461846][ T4289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.474279][ T4289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.483397][ T4289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.492521][ T4289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.532674][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.556460][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.596017][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.603918][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.629434][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.639203][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.648076][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.695938][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.716360][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.725406][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.734194][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.744452][ T4277] device veth0_macvtap entered promiscuous mode [ 85.756767][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.764642][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.782281][ T4277] device veth1_macvtap entered promiscuous mode [ 85.791735][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.801367][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.810096][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.819404][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.828803][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.875889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.906007][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.914010][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.936429][ T4275] device veth0_vlan entered promiscuous mode [ 85.943325][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.955760][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.964320][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.976771][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.989629][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.001075][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.011599][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.021621][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.032459][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.044231][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.076307][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.091772][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.127921][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.140152][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.168314][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.187821][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.202667][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.214616][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.224870][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.236481][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.248433][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.261147][ T4275] device veth1_vlan entered promiscuous mode [ 86.318294][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.395176][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.633697][ T127] cfg80211: failed to load regulatory.db [ 86.705905][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 86.812819][ T4275] device veth0_macvtap entered promiscuous mode [ 86.967443][ T4275] device veth1_macvtap entered promiscuous mode [ 87.061322][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.119594][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.142148][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.158420][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.171203][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.358512][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.383766][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.409964][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.470680][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.518274][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.645154][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.696519][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.775161][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.815088][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.852174][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.877205][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.136553][ C0] sched: RT throttling activated [ 88.138043][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 88.149502][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 88.155682][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 88.161819][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 88.425000][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.506499][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.517647][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.595135][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.603918][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.725161][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.894981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 88.964999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 88.984998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 89.005015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 89.034998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.055000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 89.191619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.231669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.296447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.305007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 89.335019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 89.336834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.462043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.485944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.494333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.548421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.577354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.624697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.647861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.734519][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.744262][ T4388] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.772022][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.791628][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.802730][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.127988][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.175030][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.285230][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.293794][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.426498][ T4385] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 90.468890][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.840301][ T4385] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 90.975182][ T4385] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 91.012011][ T4385] Error parsing options; rc = [-22] [ 91.121105][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.129607][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.177988][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.218641][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.247358][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.284560][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.353044][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.315018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 92.335000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 99.797108][ T27] audit: type=1800 audit(1790613282.398:2): pid=4445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.21" name="c_srate" dev="configfs" ino=34002 res=0 errno=0 [ 101.309336][ T4452] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.334422][ T27] audit: type=1800 audit(1790613285.928:3): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.24" name="c_srate" dev="configfs" ino=35161 res=0 errno=0 [ 111.603832][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.622924][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.631719][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.500504][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.519762][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.528407][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.315077][ T3600] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.004668][ T4515] netlink: 'syz.3.37': attribute type 2 has an invalid length. [ 116.424821][ T27] audit: type=1800 audit(1790613304.013:4): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.40" name="c_srate" dev="configfs" ino=35221 res=0 errno=0 [ 116.616565][ T4520] netlink: 'syz.3.41': attribute type 2 has an invalid length. [ 118.126046][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.145128][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.153755][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.076143][ T4528] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 119.505527][ T4537] netlink: 'syz.1.45': attribute type 2 has an invalid length. [ 121.915849][ T4550] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.075958][ T4568] netlink: 'syz.1.51': attribute type 2 has an invalid length. [ 125.397856][ T27] audit: type=1800 audit(1790613312.993:5): pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.54" name="c_srate" dev="configfs" ino=35302 res=0 errno=0 [ 134.166923][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.173624][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.923807][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.942121][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.950851][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.111247][ T27] audit: type=1800 audit(1790613333.708:6): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.65" name="c_srate" dev="configfs" ino=35358 res=0 errno=0 [ 141.396604][ T27] audit: type=1800 audit(1790613348.996:7): pid=4656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.62" name="c_srate" dev="configfs" ino=35388 res=0 errno=0 [ 144.816205][ T4663] MPTCP: kernel_bind error, err=-98 [ 144.893326][ T4666] Zero length message leads to an empty skb [ 145.979947][ T27] audit: type=1800 audit(1790613353.576:8): pid=4672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.75" name="c_srate" dev="configfs" ino=34340 res=0 errno=0 [ 148.698952][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.722327][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.731681][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.746618][ T27] audit: type=1800 audit(1790613357.256:9): pid=4686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.78" name="c_srate" dev="configfs" ino=34398 res=0 errno=0 [ 151.651684][ T27] audit: type=1800 audit(1790613359.246:10): pid=4699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.82" name="c_srate" dev="configfs" ino=35437 res=0 errno=0 [ 155.527080][ T27] audit: type=1800 audit(1790613363.126:11): pid=4710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.85" name="c_srate" dev="configfs" ino=35446 res=0 errno=0 [ 159.754674][ T27] audit: type=1800 audit(1790613367.346:12): pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.83" name="c_srate" dev="configfs" ino=35470 res=0 errno=0 [ 163.498439][ T27] audit: type=1800 audit(1790613371.096:13): pid=4749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.94" name="c_srate" dev="configfs" ino=35481 res=0 errno=0 [ 165.552415][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.570804][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.579360][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.803767][ T4777] netlink: 'syz.2.92': attribute type 2 has an invalid length. [ 170.095423][ T1200] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 170.362815][ T1200] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 170.465703][ T1200] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 170.617138][ T1200] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 170.824390][ T1200] usb 5-1: config 220 has no interface number 2 [ 170.839402][ T4787] sctp: [Deprecated]: syz.3.104 (pid 4787) Use of int in max_burst socket option. [ 170.839402][ T4787] Use struct sctp_assoc_value instead [ 170.896444][ T1200] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 170.929299][ T1200] usb 5-1: config 220 interface 0 has no altsetting 0 [ 170.956805][ T1200] usb 5-1: config 220 interface 76 has no altsetting 0 [ 170.980306][ T1200] usb 5-1: config 220 interface 1 has no altsetting 0 [ 171.044212][ T1200] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 171.101487][ T1200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.125202][ T1200] usb 5-1: Product: syz [ 171.129438][ T1200] usb 5-1: Manufacturer: syz [ 171.150857][ T1200] usb 5-1: SerialNumber: syz [ 171.223670][ T4791] FAULT_INJECTION: forcing a failure. [ 171.223670][ T4791] name failslab, interval 1, probability 0, space 0, times 1 [ 171.244907][ T4791] CPU: 0 PID: 4791 Comm: syz.1.105 Not tainted syzkaller #0 [ 171.252269][ T4791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.262381][ T4791] Call Trace: [ 171.265697][ T4791] [ 171.268661][ T4791] dump_stack_lvl+0x188/0x24e [ 171.273408][ T4791] ? show_regs_print_info+0x12/0x12 [ 171.278658][ T4791] ? load_image+0x410/0x410 [ 171.283226][ T4791] ? __might_sleep+0xd0/0xd0 [ 171.287870][ T4791] ? __lock_acquire+0x7c40/0x7c40 [ 171.292989][ T4791] should_fail_ex+0x390/0x4c0 [ 171.297737][ T4791] should_failslab+0x5/0x20 [ 171.302282][ T4791] slab_pre_alloc_hook+0x59/0x300 [ 171.307393][ T4791] kmem_cache_alloc_node+0x5a/0x310 [ 171.312635][ T4791] ? if_nlmsg_size+0x659/0x960 [ 171.317467][ T4791] ? __alloc_skb+0xf9/0x7d0 [ 171.322021][ T4791] __alloc_skb+0xf9/0x7d0 [ 171.326402][ T4791] rtmsg_ifinfo_build_skb+0x80/0x190 [ 171.331770][ T4791] rtnetlink_event+0xd1/0x1a0 [ 171.336507][ T4791] raw_notifier_call_chain+0xcb/0x160 [ 171.341969][ T4791] dev_set_mtu_ext+0x45f/0x680 [ 171.346798][ T4791] ? dev_validate_mtu+0x170/0x170 [ 171.351875][ T4791] ? nlmsg_notify+0x140/0x1a0 [ 171.356597][ T4791] ? netdev_state_change+0xfa/0x170 [ 171.361857][ T4791] ? validate_linkmsg+0x3db/0x4c0 [ 171.366915][ T4791] do_setlink+0x896/0x29c0 [ 171.371370][ T4791] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 171.377555][ T4791] ? __nla_validate_parse+0x1f67/0x2970 [ 171.383144][ T4791] ? __nla_validate+0x50/0x50 [ 171.387872][ T4791] ? validate_linkmsg+0x3db/0x4c0 [ 171.392945][ T4791] rtnl_newlink+0x10bc/0x1f90 [ 171.397656][ T4791] ? rtnl_newlink+0xb71/0x1f90 [ 171.402451][ T4791] ? rtnl_setlink+0x510/0x510 [ 171.407137][ T4791] ? __rwlock_init+0x140/0x140 [ 171.411929][ T4791] ? do_raw_spin_unlock+0x11d/0x230 [ 171.417141][ T4791] ? __mutex_lock+0x7f6/0xae0 [ 171.421831][ T4791] ? __mutex_lock+0x3ba/0xae0 [ 171.426539][ T4791] ? rtnl_setlink+0x510/0x510 [ 171.431260][ T4791] rtnetlink_rcv_msg+0x863/0xfb0 [ 171.436308][ T4791] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 171.441454][ T4791] ? rtnetlink_bind+0x80/0x80 [ 171.446150][ T4791] ? __local_bh_enable_ip+0x136/0x1c0 [ 171.451535][ T4791] ? lockdep_hardirqs_on+0x94/0x140 [ 171.456770][ T4791] ? __local_bh_enable_ip+0x136/0x1c0 [ 171.462181][ T4791] ? _local_bh_enable+0xa0/0xa0 [ 171.467071][ T4791] ? __dev_queue_xmit+0x281/0x3810 [ 171.472215][ T4791] ? __dev_queue_xmit+0x281/0x3810 [ 171.477342][ T4791] ? __dev_queue_xmit+0x1d84/0x3810 [ 171.482598][ T4791] ? __dev_queue_xmit+0x281/0x3810 [ 171.487752][ T4791] ? ref_tracker_free+0x682/0x830 [ 171.492816][ T4791] ? refcount_inc+0x70/0x70 [ 171.497333][ T4791] ? memcpy+0x3c/0x60 [ 171.501345][ T4791] ? __copy_skb_header+0x3ba/0x4f0 [ 171.506469][ T4791] ? __skb_clone+0x446/0x6c0 [ 171.511072][ T4791] netlink_rcv_skb+0x1ef/0x440 [ 171.515849][ T4791] ? rtnetlink_bind+0x80/0x80 [ 171.520551][ T4791] ? netlink_ack+0x1160/0x1160 [ 171.525333][ T4791] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.530547][ T4791] netlink_unicast+0x7ad/0x920 [ 171.535345][ T4791] netlink_sendmsg+0x8ad/0xbd0 [ 171.540137][ T4791] ? netlink_getsockopt+0x550/0x550 [ 171.545388][ T4791] ? apparmor_socket_sendmsg+0x8a/0x330 [ 171.550954][ T4791] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 171.556260][ T4791] ? security_socket_sendmsg+0x7c/0xa0 [ 171.561732][ T4791] ? netlink_getsockopt+0x550/0x550 [ 171.566942][ T4791] ____sys_sendmsg+0x5ed/0x9a0 [ 171.571721][ T4791] ? __sys_sendmsg_sock+0x30/0x30 [ 171.576768][ T4791] ? __import_iovec+0x306/0x510 [ 171.581660][ T4791] ? import_iovec+0x6f/0xa0 [ 171.586224][ T4791] ___sys_sendmsg+0x2a2/0x360 [ 171.590940][ T4791] ? __sys_sendmsg+0x2a0/0x2a0 [ 171.595764][ T4791] __se_sys_sendmsg+0x1c3/0x2b0 [ 171.600629][ T4791] ? __x64_sys_sendmsg+0x80/0x80 [ 171.605623][ T4791] ? lockdep_hardirqs_on+0x94/0x140 [ 171.610865][ T4791] do_syscall_64+0x4c/0xa0 [ 171.615294][ T4791] ? clear_bhb_loop+0x60/0xb0 [ 171.619980][ T4791] ? clear_bhb_loop+0x60/0xb0 [ 171.624754][ T4791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.630683][ T4791] RIP: 0033:0x7f4f7039e159 [ 171.635125][ T4791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.654776][ T4791] RSP: 002b:00007f4f711c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.663212][ T4791] RAX: ffffffffffffffda RBX: 00007f4f70625fa0 RCX: 00007f4f7039e159 [ 171.671233][ T4791] RDX: 0000000000040080 RSI: 0000200000000280 RDI: 0000000000000004 [ 171.679212][ T4791] RBP: 00007f4f7043506b R08: 0000000000000000 R09: 0000000000000000 [ 171.687189][ T4791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.695170][ T4791] R13: 00007f4f70626038 R14: 00007f4f70625fa0 R15: 00007ffcc65e2c28 [ 171.703171][ T4791] [ 171.741458][ T1200] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 171.750221][ T1200] usb 5-1: No valid video chain found. [ 171.758545][ T1200] usb 5-1: selecting invalid altsetting 0 [ 171.809010][ T1200] usb 5-1: selecting invalid altsetting 0 [ 171.824802][ T1200] usbtest: probe of 5-1:220.1 failed with error -22 [ 171.889134][ T1200] usb 5-1: USB disconnect, device number 2 [ 172.796016][ T27] audit: type=1800 audit(1790613380.396:14): pid=4795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.106" name="c_srate" dev="configfs" ino=35597 res=0 errno=0 [ 175.423460][ T4811] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 175.450744][ T4811] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 176.194437][ T4811] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 176.230893][ T4811] Error parsing options; rc = [-22] [ 181.739314][ T4870] sctp: [Deprecated]: syz.2.112 (pid 4870) Use of int in max_burst socket option. [ 181.739314][ T4870] Use struct sctp_assoc_value instead [ 189.075476][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 189.094352][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.103007][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.122724][ T27] audit: type=1326 audit(1790613406.099:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7039e159 code=0x7ffc0000 [ 191.398039][ T27] audit: type=1326 audit(1790613408.719:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f7039e159 code=0x7ffc0000 [ 191.615385][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 192.323795][ T27] audit: type=1326 audit(1790613408.719:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7039e159 code=0x7ffc0000 [ 192.415090][ T27] audit: type=1326 audit(1790613408.839:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f7035e98e code=0x7ffc0000 [ 192.439059][ T27] audit: type=1326 audit(1790613408.839:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f7039ddeb code=0x7ffc0000 [ 192.462903][ T27] audit: type=1326 audit(1790613408.839:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f7039ddeb code=0x7ffc0000 [ 192.615090][ T27] audit: type=1326 audit(1790613408.949:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f7039ddeb code=0x7ffc0000 [ 193.584543][ T27] audit: type=1326 audit(1790613408.949:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4935 comm="syz.1.137" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f7039ddeb code=0x7ffc0000 [ 193.993906][ T4960] sctp: [Deprecated]: syz.2.143 (pid 4960) Use of int in max_burst socket option. [ 193.993906][ T4960] Use struct sctp_assoc_value instead [ 194.149244][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.156175][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.982109][ T4949] 9pnet: Could not find request transport: fd"rfdno=ūCyfϛLLscmfγk=20~x(VNSet߭Ft [ 198.329081][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 199.355960][ T4983] MPTCP: kernel_bind error, err=-98 [ 199.386606][ T4981] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 200.464313][ T4988] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 200.582126][ T27] audit: type=1800 audit(1790613418.179:23): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.149" name="c_srate" dev="configfs" ino=35979 res=0 errno=0 [ 201.345002][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 201.345033][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 201.351324][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 201.357109][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 210.674756][ T27] audit: type=1800 audit(1790613428.269:24): pid=5041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.156" name="c_srate" dev="configfs" ino=36981 res=0 errno=0 [ 218.965054][ T955] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 219.565003][ T955] usb 2-1: Using ep0 maxpacket: 8 [ 219.572653][ T955] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 219.618331][ T955] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 219.648605][ T955] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 219.659116][ T5095] netlink: 'syz.2.175': attribute type 2 has an invalid length. [ 219.674972][ T955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.700395][ T955] kobil_sct 2-1:1.0: KOBIL USB smart card terminal converter detected [ 219.732520][ T955] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 219.953962][ T5086] jffs2: notice: (5086) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 223.281495][ T7] usb 2-1: USB disconnect, device number 4 [ 223.340367][ T7] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 223.570487][ T7] kobil_sct 2-1:1.0: device disconnected [ 231.525360][ T4323] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 231.745346][ T4323] usb 2-1: Using ep0 maxpacket: 32 [ 231.762942][ T4323] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.868363][ T4323] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 231.987530][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.169534][ T4323] usb 2-1: config 0 descriptor?? [ 235.141931][ T4711] usb 2-1: USB disconnect, device number 5 [ 236.494979][ T4711] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 236.534505][ T5207] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 236.695026][ T4711] usb 4-1: Using ep0 maxpacket: 8 [ 237.545506][ T5214] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 237.555797][ T4711] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 237.574971][ T4711] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.584800][ T4711] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 237.614984][ T4711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.649479][ T4711] kobil_sct 4-1:1.0: KOBIL USB smart card terminal converter detected [ 237.660568][ T4711] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 237.716180][ T5214] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 237.726214][ T5214] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 237.785353][ T5214] Error parsing options; rc = [-22] [ 237.909806][ T5197] jffs2: notice: (5197) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.908990][ T5240] netlink: 'syz.4.211': attribute type 2 has an invalid length. [ 242.303379][ T7] usb 4-1: USB disconnect, device number 2 [ 242.347706][ T7] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 242.406604][ T7] kobil_sct 4-1:1.0: device disconnected [ 250.551205][ T27] audit: type=1326 audit(1790613483.141:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.3.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b319e159 code=0x7ffc0000 [ 250.598047][ T27] audit: type=1326 audit(1790613483.181:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.3.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f96b319e159 code=0x7ffc0000 [ 250.622403][ T27] audit: type=1326 audit(1790613483.181:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.3.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b319e159 code=0x7ffc0000 [ 250.647549][ T27] audit: type=1326 audit(1790613483.181:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.3.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96b315e98e code=0x7ffc0000 [ 250.671722][ T27] audit: type=1326 audit(1790613483.181:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.3.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96b319ddeb code=0x7ffc0000 [ 250.695832][ T27] audit: type=1326 audit(1790613483.181:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.3.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96b319ddeb code=0x7ffc0000 [ 250.734862][ T27] audit: type=1326 audit(1790613483.191:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.3.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96b319ddeb code=0x7ffc0000 [ 250.832715][ T27] audit: type=1326 audit(1790613483.191:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.3.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96b319ddeb code=0x7ffc0000 [ 250.880655][ T4342] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 250.925126][ T27] audit: type=1326 audit(1790613483.491:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.3.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96b319ddeb code=0x7ffc0000 [ 251.503979][ T27] audit: type=1326 audit(1790613483.491:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5296 comm="syz.3.224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96b319ddeb code=0x7ffc0000 [ 252.061162][ T4342] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 252.079539][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.105889][ T4342] usb 4-1: Product: syz [ 252.115298][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 252.174792][ T4342] usb 4-1: Manufacturer: syz [ 252.192867][ T4342] usb 4-1: SerialNumber: syz [ 252.422867][ T4342] usb 4-1: USB2VGA dongle found at address 3 [ 252.618661][ T4342] usb 4-1: Allocated 8 output buffers [ 255.653559][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.660645][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.873607][ T4342] usb 4-1: Failed to early initialize device [ 260.900486][ T4342] usb 4-1: USB disconnect, device number 3 [ 262.861275][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 262.879964][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.888702][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.871086][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 266.040784][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 266.040838][ T27] audit: type=1800 audit(1790613508.632:72): pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.248" name="c_srate" dev="configfs" ino=37467 res=0 errno=0 [ 271.427764][ T5390] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 271.435539][ T5394] tty tty1: ldisc open failed (-12), clearing slot 0 [ 284.296258][ T27] audit: type=1800 audit(1790613531.895:73): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.267" name="c_srate" dev="configfs" ino=37915 res=0 errno=0 [ 286.295967][ T5466] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 286.586907][ T5473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 286.757384][ T27] audit: type=1800 audit(1790613534.355:74): pid=5473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.262" name="c_srate" dev="configfs" ino=37642 res=0 errno=0 [ 290.339302][ T27] audit: type=1800 audit(1790613542.938:75): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.273" name="c_srate" dev="configfs" ino=37979 res=0 errno=0 [ 294.912963][ T5509] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 301.376491][ T5543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 301.395238][ T5543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.403844][ T5543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.562305][ T27] audit: type=1800 audit(1790613563.152:76): pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.291" name="c_srate" dev="configfs" ino=37750 res=0 errno=0 [ 308.307769][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.328076][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.337564][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.354096][ T27] audit: type=1800 audit(1790613569.942:77): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.299" name="c_srate" dev="configfs" ino=37805 res=0 errno=0 [ 315.227030][ T27] audit: type=1800 audit(1790613572.822:78): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.305" name="c_srate" dev="configfs" ino=38098 res=0 errno=0 [ 316.599826][ T27] audit: type=1800 audit(1790613574.192:79): pid=5627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.307" name="c_srate" dev="configfs" ino=37845 res=0 errno=0 [ 317.029148][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.036084][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.951593][ T5662] netlink: 'syz.2.317': attribute type 2 has an invalid length. [ 327.699881][ T5687] MPTCP: kernel_bind error, err=-98 [ 336.742096][ T5733] sctp: [Deprecated]: syz.1.334 (pid 5733) Use of int in max_burst socket option. [ 336.742096][ T5733] Use struct sctp_assoc_value instead [ 337.211736][ T27] audit: type=1800 audit(1790613599.802:80): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.331" name="c_srate" dev="configfs" ino=38325 res=0 errno=0 [ 337.934092][ T5740] netlink: 'syz.4.333': attribute type 2 has an invalid length. [ 339.455859][ T27] audit: type=1800 audit(1790613602.052:81): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.338" name="c_srate" dev="configfs" ino=39095 res=0 errno=0 [ 343.539834][ T5775] netlink: 'syz.3.344': attribute type 2 has an invalid length. [ 346.354136][ T27] audit: type=1800 audit(1790613608.942:82): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.350" name="c_srate" dev="configfs" ino=38445 res=0 errno=0 [ 350.263110][ T27] audit: type=1800 audit(1790613612.852:83): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.354" name="c_srate" dev="configfs" ino=38466 res=0 errno=0 [ 356.572995][ T27] audit: type=1800 audit(1790613624.166:84): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.361" name="c_srate" dev="configfs" ino=39191 res=0 errno=0 [ 360.017971][ T27] audit: type=1800 audit(1790613627.616:85): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.364" name="c_srate" dev="configfs" ino=39200 res=0 errno=0 [ 368.039343][ T27] audit: type=1800 audit(1790613635.636:86): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.373" name="c_srate" dev="configfs" ino=38563 res=0 errno=0 [ 369.022305][ T27] audit: type=1800 audit(1790613636.616:87): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.371" name="c_srate" dev="configfs" ino=38564 res=0 errno=0 [ 378.484284][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.491280][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.599462][ T27] audit: type=1800 audit(1790613652.190:88): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.386" name="c_srate" dev="configfs" ino=38619 res=0 errno=0 [ 380.845640][ T5962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 380.868755][ T5962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 380.877405][ T5962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.844207][ T5984] MPTCP: kernel_bind error, err=-98 [ 388.090625][ T27] audit: type=1800 audit(1790613665.688:89): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.390" name="c_srate" dev="configfs" ino=38689 res=0 errno=0 [ 390.734957][ T4421] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 391.735031][ T4421] usb 3-1: device descriptor read/64, error -71 [ 393.385372][ T4421] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 394.706026][ T6037] FAULT_INJECTION: forcing a failure. [ 394.706026][ T6037] name failslab, interval 1, probability 0, space 0, times 0 [ 394.776818][ T27] audit: type=1800 audit(1790613677.372:90): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.406" name="c_srate" dev="configfs" ino=38750 res=0 errno=0 [ 395.056147][ T6037] CPU: 1 PID: 6037 Comm: syz.3.407 Not tainted syzkaller #0 [ 395.063524][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.073660][ T6037] Call Trace: [ 395.077047][ T6037] [ 395.080082][ T6037] dump_stack_lvl+0x188/0x24e [ 395.084911][ T6037] ? show_regs_print_info+0x12/0x12 [ 395.090196][ T6037] ? load_image+0x410/0x410 [ 395.094767][ T6037] ? __might_sleep+0xd0/0xd0 [ 395.099485][ T6037] ? __lock_acquire+0x7c40/0x7c40 [ 395.104666][ T6037] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 395.110722][ T6037] should_fail_ex+0x390/0x4c0 [ 395.115554][ T6037] should_failslab+0x5/0x20 [ 395.120165][ T6037] slab_pre_alloc_hook+0x59/0x300 [ 395.125290][ T6037] ? lockdep_hardirqs_on+0x94/0x140 [ 395.130545][ T6037] ? kobject_uevent_env+0x278/0x890 [ 395.135864][ T6037] __kmem_cache_alloc_node+0x4f/0x270 [ 395.141311][ T6037] ? kobject_uevent_env+0x278/0x890 [ 395.146571][ T6037] kmalloc_trace+0x26/0xe0 [ 395.151034][ T6037] ? dev_uevent_filter+0xb0/0xb0 [ 395.156083][ T6037] kobject_uevent_env+0x278/0x890 [ 395.161165][ T6037] ? dummy_pullup+0x120/0x120 [ 395.165946][ T6037] ? dummy_udc_set_speed+0xd0/0xd0 [ 395.171106][ T6037] gadget_bind_driver+0x5cf/0x760 [ 395.176247][ T6037] ? gadget_match_driver+0x130/0x130 [ 395.181583][ T6037] really_probe+0x24a/0xb40 [ 395.186139][ T6037] ? pm_runtime_barrier+0x147/0x1c0 [ 395.191451][ T6037] __driver_probe_device+0x1f5/0x390 [ 395.196795][ T6037] driver_probe_device+0x4f/0x420 [ 395.201900][ T6037] __driver_attach+0x43d/0x6c0 [ 395.206705][ T6037] ? driver_attach+0x40/0x40 [ 395.211358][ T6037] bus_for_each_dev+0x182/0x1f0 [ 395.216248][ T6037] ? kobject_add+0x230/0x230 [ 395.220909][ T6037] ? bus_remove_file+0xd0/0xd0 [ 395.225716][ T6037] ? do_raw_spin_unlock+0x11d/0x230 [ 395.230964][ T6037] bus_add_driver+0x324/0x5d0 [ 395.235726][ T6037] driver_register+0x32d/0x430 [ 395.240540][ T6037] usb_gadget_register_driver_owner+0xf5/0x260 [ 395.246749][ T6037] raw_ioctl+0x13a0/0x3cd0 [ 395.251285][ T6037] ? make_qualifier+0x3b0/0x3b0 [ 395.256185][ T6037] ? release_firmware_map_entry+0x187/0x187 [ 395.262198][ T6037] ? lock_chain_count+0x20/0x20 [ 395.267105][ T6037] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 395.273134][ T6037] ? lock_chain_count+0x20/0x20 [ 395.278039][ T6037] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 395.283758][ T6037] ? lockdep_hardirqs_on+0x94/0x140 [ 395.289029][ T6037] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 395.294725][ T6037] ? security_file_ioctl+0x7c/0xa0 [ 395.299954][ T6037] ? __sanitizer_cov_trace_pc+0x58/0x60 [ 395.305596][ T6037] ? bpf_lsm_file_ioctl+0x5/0x10 [ 395.310634][ T6037] ? security_file_ioctl+0x7c/0xa0 [ 395.315789][ T6037] ? make_qualifier+0x3b0/0x3b0 [ 395.320679][ T6037] __se_sys_ioctl+0xfa/0x170 [ 395.325343][ T6037] do_syscall_64+0x4c/0xa0 [ 395.329811][ T6037] ? clear_bhb_loop+0x60/0xb0 [ 395.334529][ T6037] ? clear_bhb_loop+0x60/0xb0 [ 395.339251][ T6037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.345207][ T6037] RIP: 0033:0x7f96b319ddeb [ 395.349761][ T6037] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 395.369460][ T6037] RSP: 002b:00007f96b3ff4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.377954][ T6037] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f96b319ddeb [ 395.385956][ T6037] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 395.393953][ T6037] RBP: 00007f96b3ff5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 395.401955][ T6037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.409986][ T6037] R13: 0000200000000040 R14: 0000000000000002 R15: 0000000000000000 [ 395.418019][ T6037] [ 395.458795][ T4323] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 395.584947][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 395.745035][ T4323] usb 4-1: device descriptor read/64, error -32 [ 396.745130][ T4323] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 396.945027][ T4323] usb 4-1: device descriptor read/64, error -71 [ 397.105202][ T4323] usb usb4-port1: attempt power cycle [ 397.232418][ T27] audit: type=1800 audit(1790613684.825:91): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.411" name="c_srate" dev="configfs" ino=38762 res=0 errno=0 [ 397.796386][ T4323] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 397.882843][ T4323] usb 4-1: device descriptor read/8, error -71 [ 400.326118][ T27] audit: type=1800 audit(1790613692.924:92): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.414" name="c_srate" dev="configfs" ino=39457 res=0 errno=0 [ 401.147919][ T6073] FAULT_INJECTION: forcing a failure. [ 401.147919][ T6073] name failslab, interval 1, probability 0, space 0, times 0 [ 401.162056][ T6073] CPU: 1 PID: 6073 Comm: syz.1.416 Not tainted syzkaller #0 [ 401.169379][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.179447][ T6073] Call Trace: [ 401.182738][ T6073] [ 401.185698][ T6073] dump_stack_lvl+0x188/0x24e [ 401.190385][ T6073] ? show_regs_print_info+0x12/0x12 [ 401.195593][ T6073] ? load_image+0x410/0x410 [ 401.200114][ T6073] ? __might_sleep+0xd0/0xd0 [ 401.204712][ T6073] ? __lock_acquire+0x7c40/0x7c40 [ 401.209753][ T6073] ? __se_sys_ioctl+0x48/0x170 [ 401.214564][ T6073] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.220663][ T6073] should_fail_ex+0x390/0x4c0 [ 401.225385][ T6073] should_failslab+0x5/0x20 [ 401.229934][ T6073] slab_pre_alloc_hook+0x59/0x300 [ 401.235039][ T6073] ? kset_find_obj+0xdf/0x100 [ 401.239859][ T6073] ? bus_add_driver+0xdc/0x5d0 [ 401.244667][ T6073] __kmem_cache_alloc_node+0x4f/0x270 [ 401.250090][ T6073] ? bus_add_driver+0xdc/0x5d0 [ 401.254897][ T6073] kmalloc_trace+0x26/0xe0 [ 401.259352][ T6073] bus_add_driver+0xdc/0x5d0 [ 401.263983][ T6073] ? _raw_spin_unlock+0x24/0x40 [ 401.268883][ T6073] ? kset_find_obj+0xdf/0x100 [ 401.273609][ T6073] driver_register+0x32d/0x430 [ 401.278418][ T6073] usb_gadget_register_driver_owner+0xf5/0x260 [ 401.284634][ T6073] raw_ioctl+0x13a0/0x3cd0 [ 401.289094][ T6073] ? __kmem_cache_free+0xb6/0x200 [ 401.294191][ T6073] ? tomoyo_path_number_perm+0x205/0x650 [ 401.299939][ T6073] ? tomoyo_path_number_perm+0x5a4/0x650 [ 401.305621][ T6073] ? tomoyo_path_number_perm+0x205/0x650 [ 401.311333][ T6073] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 401.316836][ T6073] ? make_qualifier+0x3b0/0x3b0 [ 401.321763][ T6073] ? __fget_files+0x28/0x460 [ 401.326439][ T6073] ? bpf_lsm_file_ioctl+0x5/0x10 [ 401.331429][ T6073] ? security_file_ioctl+0x7c/0xa0 [ 401.336604][ T6073] ? make_qualifier+0x3b0/0x3b0 [ 401.341494][ T6073] __se_sys_ioctl+0xfa/0x170 [ 401.346180][ T6073] do_syscall_64+0x4c/0xa0 [ 401.350641][ T6073] ? clear_bhb_loop+0x60/0xb0 [ 401.355376][ T6073] ? clear_bhb_loop+0x60/0xb0 [ 401.360099][ T6073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.366042][ T6073] RIP: 0033:0x7f4f7039ddeb [ 401.370496][ T6073] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 401.390141][ T6073] RSP: 002b:00007f4f711c1f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.398598][ T6073] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4f7039ddeb [ 401.406607][ T6073] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 401.414615][ T6073] RBP: 00007f4f711c2fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 401.422624][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.430632][ T6073] R13: 0000200000000040 R14: 0000000000000002 R15: 0000000000000000 [ 401.438665][ T6073] [ 401.545032][ T6073] UDC core: USB Raw Gadget: driver registration failed: -12 [ 401.552395][ T6073] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 401.694983][ T4283] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 403.366646][ T4283] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 403.407468][ T4283] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 403.425098][ T4283] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 403.436022][ T4283] usb 5-1: config 220 has no interface number 2 [ 403.442720][ T4283] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 403.456764][ T4283] usb 5-1: config 220 interface 0 has no altsetting 0 [ 403.463688][ T4283] usb 5-1: config 220 interface 76 has no altsetting 0 [ 403.471018][ T4283] usb 5-1: config 220 interface 1 has no altsetting 0 [ 403.494140][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.507394][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.515622][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.579966][ T4283] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 403.589639][ T4283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.598844][ T4283] usb 5-1: Product: syz [ 403.603154][ T4283] usb 5-1: Manufacturer: syz [ 403.608125][ T4283] usb 5-1: SerialNumber: syz [ 403.940417][ T4283] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 403.947449][ T4283] usb 5-1: No valid video chain found. [ 403.953590][ T4283] usb 5-1: selecting invalid altsetting 0 [ 404.020015][ T4283] usb 5-1: selecting invalid altsetting 0 [ 404.026223][ T4283] usbtest: probe of 5-1:220.1 failed with error -22 [ 404.073463][ T4283] usb 5-1: USB disconnect, device number 3 [ 407.428618][ T27] audit: type=1800 audit(1790613705.023:93): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.424" name="c_srate" dev="configfs" ino=39492 res=0 errno=0 [ 408.834650][ T27] audit: type=1800 audit(1790613706.423:94): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.426" name="c_srate" dev="configfs" ino=39504 res=0 errno=0 [ 410.260230][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 410.278921][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 410.287381][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 414.585998][ T6133] MPTCP: kernel_bind error, err=-98 [ 416.347149][ T27] audit: type=1800 audit(1790613713.943:95): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.427" name="c_srate" dev="configfs" ino=38892 res=0 errno=0 [ 418.243588][ T27] audit: type=1800 audit(1790613715.833:96): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.429" name="c_srate" dev="configfs" ino=39549 res=0 errno=0 [ 418.789620][ T27] audit: type=1800 audit(1790613716.383:97): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.438" name="c_srate" dev="configfs" ino=39942 res=0 errno=0 [ 419.913525][ T27] audit: type=1800 audit(1790613717.503:98): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.442" name="c_srate" dev="configfs" ino=39566 res=0 errno=0 [ 420.923612][ T27] audit: type=1800 audit(1790613718.513:99): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.444" name="c_srate" dev="configfs" ino=39581 res=0 errno=0 [ 422.047712][ T6185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.065644][ T6185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.074074][ T6185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.465084][ T4742] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 425.065004][ T4742] usb 1-1: Using ep0 maxpacket: 32 [ 425.142326][ T4742] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.406880][ T4742] usb 1-1: config 0 has no interfaces? [ 425.522270][ T27] audit: type=1800 audit(1790613723.113:100): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.448" name="c_srate" dev="configfs" ino=39984 res=0 errno=0 [ 425.562820][ T4742] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 425.656175][ T4742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.805852][ T4742] usb 1-1: config 0 descriptor?? [ 425.958605][ T6195] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 426.026327][ T6195] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 426.091074][ T6195] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 426.104016][ T6195] Error parsing options; rc = [-22] [ 426.165004][ T4704] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 426.552333][ T1200] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 426.565207][ T4704] usb 2-1: device not accepting address 6, error -71 [ 426.752481][ T1200] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.854088][ T1200] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 426.999933][ T1200] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 427.156863][ T1200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 427.312808][ T1200] usb 3-1: Product: syz [ 427.358358][ T6218] MPTCP: kernel_bind error, err=-98 [ 427.384641][ T1200] usb 3-1: Manufacturer: syz [ 427.742169][ T1200] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 428.095180][ T6216] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 428.113898][ T4742] usb 1-1: USB disconnect, device number 2 [ 428.922199][ T6216] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 428.984060][ T6216] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 429.021163][ T6216] Error parsing options; rc = [-22] [ 429.292565][ T1200] mos7840: probe of ttyUSB0 failed with error -71 [ 429.471229][ T1200] usb 3-1: USB disconnect, device number 4 [ 429.790126][ T1200] mos7840 3-1:1.0: device disconnected [ 431.896787][ T27] audit: type=1800 audit(1790613729.493:101): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.458" name="c_srate" dev="configfs" ino=40078 res=0 errno=0 [ 432.181848][ T6235] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 432.266703][ T6235] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 432.839454][ T6235] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 433.776651][ T6235] Error parsing options; rc = [-22] [ 435.185670][ T1200] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 435.400417][ T1200] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 435.896558][ T1200] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 436.211983][ T1200] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 436.222672][ T1200] usb 1-1: config 220 has no interface number 2 [ 436.230036][ T1200] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 436.243634][ T1200] usb 1-1: config 220 interface 0 has no altsetting 0 [ 436.250814][ T1200] usb 1-1: config 220 interface 76 has no altsetting 0 [ 436.260958][ T1200] usb 1-1: config 220 interface 1 has no altsetting 0 [ 436.282739][ T1200] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 436.303034][ T1200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.316322][ T1200] usb 1-1: Product: syz [ 436.320543][ T1200] usb 1-1: Manufacturer: syz [ 436.325506][ T1200] usb 1-1: SerialNumber: syz [ 436.561915][ T1200] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 436.578936][ T1200] usb 1-1: No valid video chain found. [ 436.786267][ T1200] usb 1-1: selecting invalid altsetting 0 [ 436.868782][ T1200] usb 1-1: selecting invalid altsetting 0 [ 436.875036][ T1200] usbtest: probe of 1-1:220.1 failed with error -22 [ 436.894213][ T1200] usb 1-1: USB disconnect, device number 3 [ 437.551586][ T27] audit: type=1800 audit(1790613735.143:102): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.470" name="c_srate" dev="configfs" ino=40135 res=0 errno=0 [ 439.729045][ T27] audit: type=1800 audit(1790613737.323:103): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.474" name="c_srate" dev="configfs" ino=39837 res=0 errno=0 [ 440.189503][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.196122][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.104099][ T6314] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 442.112801][ T6314] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 442.207218][ T27] audit: type=1800 audit(1790613739.803:104): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.475" name="c_srate" dev="configfs" ino=40198 res=0 errno=0 [ 442.257822][ T6314] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 442.302700][ T6314] Error parsing options; rc = [-22] [ 447.015500][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 447.032873][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 447.043642][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 447.668534][ T6351] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 447.705434][ T6351] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 447.742239][ T6351] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 447.804981][ T6351] Error parsing options; rc = [-22] [ 450.956615][ T27] audit: type=1800 audit(1790613753.554:105): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.490" name="c_srate" dev="configfs" ino=40255 res=0 errno=0 [ 455.518777][ T6406] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 455.760954][ T6406] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 455.821826][ T6406] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 455.896146][ T6406] Error parsing options; rc = [-22] [ 465.444717][ T6457] ecryptfs_mount: kern_path() failed [ 465.530717][ T6457] Reading sb failed; rc = [-2] [ 467.305680][ T6463] ecryptfs_mount: kern_path() failed [ 467.334415][ T6463] Reading sb failed; rc = [-2] [ 467.515008][ T4283] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 467.529814][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 467.706573][ T4283] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 467.827418][ T4283] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 468.729981][ T4283] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 468.874292][ T4283] usb 1-1: config 220 has no interface number 2 [ 468.881316][ T4283] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 468.904973][ T4283] usb 1-1: config 220 interface 0 has no altsetting 0 [ 470.731516][ T4283] usb 1-1: config 220 interface 76 has no altsetting 0 [ 470.759166][ T4283] usb 1-1: config 220 interface 1 has no altsetting 0 [ 470.802229][ T4283] usb 1-1: string descriptor 0 read error: -71 [ 470.902597][ T4283] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 470.912690][ T4283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.936564][ T4283] usb 1-1: can't set config #220, error -71 [ 470.955123][ T4283] usb 1-1: USB disconnect, device number 4 [ 471.176234][ T6498] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 471.330339][ T27] audit: type=1800 audit(1790613778.927:106): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.516" name="c_srate" dev="configfs" ino=41038 res=0 errno=0 [ 474.204957][ T955] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 474.415349][ T27] audit: type=1800 audit(1790613782.017:107): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.514" name="c_srate" dev="configfs" ino=40552 res=0 errno=0 [ 474.435819][ T955] usb 4-1: device descriptor read/64, error -71 [ 475.514935][ T955] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 475.674946][ T955] usb 4-1: device descriptor read/64, error -71 [ 475.795129][ T955] usb usb4-port1: attempt power cycle [ 477.015394][ T955] kernel write not supported for file /input/mice (pid: 955 comm: kworker/0:2) [ 479.094567][ T6536] netlink: 'syz.1.527': attribute type 2 has an invalid length. [ 483.530440][ T6561] MPTCP: kernel_bind error, err=-98 [ 483.615018][ T955] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 483.771197][ T4323] kernel write not supported for file /input/mice (pid: 4323 comm: kworker/1:5) [ 483.815073][ T955] usb 5-1: device descriptor read/64, error -71 [ 484.085064][ T955] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 484.534986][ T955] usb 5-1: device descriptor read/64, error -71 [ 484.715769][ T955] usb usb5-port1: attempt power cycle [ 485.125318][ T955] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 485.513532][ T955] usb 5-1: device descriptor read/8, error -71 [ 485.865000][ T955] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 485.932516][ T955] usb 5-1: device descriptor read/8, error -71 [ 486.065257][ T955] usb usb5-port1: unable to enumerate USB device [ 486.385619][ T6574] ecryptfs_mount: kern_path() failed [ 487.798447][ T6574] Reading sb failed; rc = [-2] [ 488.100030][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 491.365872][ T6604] netlink: 'syz.4.548': attribute type 2 has an invalid length. [ 493.445043][ T4742] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 493.655078][ T4742] usb 3-1: device descriptor read/64, error -71 [ 493.965000][ T4742] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 494.165019][ T4742] usb 3-1: device descriptor read/64, error -71 [ 495.678180][ T4742] usb usb3-port1: attempt power cycle [ 497.907182][ T27] audit: type=1800 audit(1790613805.507:108): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.561" name="c_srate" dev="configfs" ino=41229 res=0 errno=0 [ 499.303872][ T27] audit: type=1800 audit(1790613806.897:109): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.563" name="c_srate" dev="configfs" ino=41243 res=0 errno=0 [ 501.978612][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.985009][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.197696][ T6678] netlink: 'syz.2.569': attribute type 2 has an invalid length. [ 505.895408][ T1200] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 506.065397][ T1200] usb 4-1: device descriptor read/64, error -71 [ 506.334894][ T1200] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 506.495033][ T1200] usb 4-1: device descriptor read/64, error -71 [ 506.666737][ T1200] usb usb4-port1: attempt power cycle [ 506.678417][ T27] audit: type=1800 audit(1790613814.277:110): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.567" name="c_srate" dev="configfs" ino=41269 res=0 errno=0 [ 507.245087][ T1200] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 507.476309][ T1200] usb 4-1: device descriptor read/8, error -71 [ 510.146300][ T6748] MPTCP: kernel_bind error, err=-98 [ 513.881999][ T6774] ecryptfs_mount: kern_path() failed [ 515.242262][ T6774] Reading sb failed; rc = [-2] [ 518.855024][ T4283] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 519.014968][ T4283] usb 3-1: device descriptor read/64, error -71 [ 519.294853][ T4283] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 519.474920][ T4283] usb 3-1: device descriptor read/64, error -71 [ 519.595939][ T4283] usb usb3-port1: attempt power cycle [ 520.014999][ T4283] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 520.055683][ T4283] usb 3-1: device descriptor read/8, error -71 [ 521.351266][ T6801] ecryptfs_mount: kern_path() failed [ 521.372718][ T6801] Reading sb failed; rc = [-2] [ 524.827067][ T27] audit: type=1800 audit(1790613837.426:111): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.598" name="c_srate" dev="configfs" ino=41440 res=0 errno=0 [ 532.622470][ T6841] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 532.733242][ T6844] MPTCP: kernel_bind error, err=-98 [ 532.847783][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 533.207623][ T6851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 533.224655][ T6851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 533.234938][ T6851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 533.243332][ T6851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 533.251901][ T6851] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 533.259334][ T6851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 535.118010][ T6850] chnl_net:caif_netlink_parms(): no params data found [ 535.345125][ T6851] Bluetooth: hci5: command 0x0409 tx timeout [ 537.619423][ T6851] Bluetooth: hci5: command 0x041b tx timeout [ 537.805823][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.812984][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.897485][ T6850] device bridge_slave_0 entered promiscuous mode [ 537.952956][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.980874][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.996135][ T6850] device bridge_slave_1 entered promiscuous mode [ 538.129757][ T27] audit: type=1800 audit(1790613855.722:112): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.614" name="c_srate" dev="configfs" ino=41570 res=0 errno=0 [ 539.635842][ T6850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.675246][ T6851] Bluetooth: hci5: command 0x040f tx timeout [ 539.713651][ T6850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.890986][ T6850] team0: Port device team_slave_0 added [ 539.948182][ T6850] team0: Port device team_slave_1 added [ 540.148007][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.201036][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.431313][ T6850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.507417][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.553337][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.775555][ T6850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.056003][ T6850] device hsr_slave_0 entered promiscuous mode [ 542.504839][ T6851] Bluetooth: hci5: command 0x0419 tx timeout [ 542.667673][ T6850] device hsr_slave_1 entered promiscuous mode [ 542.781760][ T6850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.834966][ T6850] Cannot create hsr debugfs directory [ 544.337616][ T6850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 544.358988][ T6850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 545.882291][ T6850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 547.418394][ T6850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 547.705293][ T6850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.820209][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.846792][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.888902][ T6850] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.932865][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 547.959294][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 547.993308][ T4495] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.000538][ T4495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.189859][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 548.322801][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 548.495007][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 548.611833][ T4495] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.619076][ T4495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.857627][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 548.888514][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 548.916469][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 548.932295][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 548.943375][ T4295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 548.955043][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 548.963013][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 548.971271][ T4295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 548.995146][ T4295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 549.049166][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 549.155869][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 549.191514][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 549.226141][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 549.285556][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 549.312025][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 549.374330][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 549.405742][ T4675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 549.438926][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 551.024948][ T4295] Bluetooth: hci0: command 0x0409 tx timeout [ 551.389298][ T27] audit: type=1800 audit(1790613878.987:113): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.625" name="c_srate" dev="configfs" ino=41924 res=0 errno=0 [ 551.557313][ T6932] chnl_net:caif_netlink_parms(): no params data found [ 551.661994][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.671211][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.834423][ T6850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.106439][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.164710][ T27] audit: type=1800 audit(1790613879.757:114): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.626" name="c_srate" dev="configfs" ino=41956 res=0 errno=0 [ 552.197635][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.310037][ T6932] device bridge_slave_0 entered promiscuous mode [ 552.485090][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.584353][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.714457][ T6932] device bridge_slave_1 entered promiscuous mode [ 552.854027][ T6960] netlink: 'syz.2.631': attribute type 2 has an invalid length. [ 553.065888][ T6932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.101537][ T6932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.144889][ T4295] Bluetooth: hci0: command 0x041b tx timeout [ 553.605241][ T6932] team0: Port device team_slave_0 added [ 553.748538][ T6932] team0: Port device team_slave_1 added [ 553.966800][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.984290][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.276219][ T4295] Bluetooth: hci0: command 0x040f tx timeout [ 555.325383][ T6932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.454235][ T6932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.471853][ T6932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.541035][ T6932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.545564][ T6932] device hsr_slave_0 entered promiscuous mode [ 556.567379][ T6932] device hsr_slave_1 entered promiscuous mode [ 556.605498][ T6932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 556.613465][ T6932] Cannot create hsr debugfs directory [ 556.828975][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 556.851099][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 557.115717][ T6996] ecryptfs_mount: kern_path() failed [ 557.155587][ T6996] Reading sb failed; rc = [-2] [ 557.345408][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 557.395945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 557.473482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 557.746237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 557.794513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 557.991248][ T6850] device veth0_vlan entered promiscuous mode [ 559.666645][ T6850] device veth1_vlan entered promiscuous mode [ 559.860766][ T6932] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 559.902905][ T6932] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 559.914404][ T6932] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 559.941085][ T6850] device veth0_macvtap entered promiscuous mode [ 559.988418][ T6932] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 560.185329][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 560.242308][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 560.275882][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 560.339501][ T6850] device veth1_macvtap entered promiscuous mode [ 560.439951][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.475636][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.500356][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.524742][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.991851][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.035392][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.064920][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.094955][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.134883][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.169639][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.203334][ T6850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.259803][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 562.285830][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 562.313163][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 562.396979][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.432513][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.443798][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.467189][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.482744][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.495839][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.512667][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.541450][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.794892][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.806214][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.812596][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.824878][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.000117][ T6850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.052540][ T6850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.185507][ T6850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.685302][ T6850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.694086][ T6850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.720590][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 563.740616][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 563.790236][ T6932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.844956][ T6932] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.900845][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 563.947148][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 564.042790][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 564.087197][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.125389][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.132575][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.161004][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 564.186927][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 564.196088][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.203222][ T4417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.235309][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 564.257159][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 564.333404][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.548725][ T6932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 565.678260][ T6932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 565.906547][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 565.936750][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 566.060151][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 566.069793][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 566.079322][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 566.094286][ T7052] sctp: [Deprecated]: syz.2.647 (pid 7052) Use of int in max_burst socket option. [ 566.094286][ T7052] Use struct sctp_assoc_value instead [ 566.113849][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 566.172206][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 567.805938][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 567.987320][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.016205][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.107612][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 568.129679][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 568.168537][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 568.268878][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.297353][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.334118][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 570.156025][ T27] audit: type=1800 audit(1790613897.757:115): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.654" name="c_srate" dev="configfs" ino=43382 res=0 errno=0 [ 570.895110][ T955] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 571.074916][ T955] usb 6-1: device descriptor read/64, error -71 [ 571.286131][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 571.293675][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 571.324028][ T6932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.354982][ T955] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 572.956464][ T955] usb 6-1: device descriptor read/64, error -71 [ 573.105223][ T955] usb usb6-port1: attempt power cycle [ 573.545322][ T955] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 573.933262][ T955] usb 6-1: device descriptor read/8, error -71 [ 574.953548][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 574.972927][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 574.981647][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 576.431513][ T7112] netlink: 'syz.1.659': attribute type 2 has an invalid length. [ 576.716739][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 576.729441][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 576.827924][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 576.858956][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 576.906706][ T6932] device veth0_vlan entered promiscuous mode [ 576.925646][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 576.934366][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 576.970179][ T6932] device veth1_vlan entered promiscuous mode [ 578.020418][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 578.035926][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 578.098894][ T7129] netlink: 'syz.4.655': attribute type 2 has an invalid length. [ 578.170448][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 578.206765][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 578.269319][ T6932] device veth0_macvtap entered promiscuous mode [ 578.302983][ T6932] device veth1_macvtap entered promiscuous mode [ 579.857141][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 579.889523][ T4342] kernel write not supported for file /input/mice (pid: 4342 comm: kworker/0:6) [ 579.917783][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 580.278190][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.444077][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.590078][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.731874][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.852876][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.023619][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.158165][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.322611][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.487925][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.692041][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.831188][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.946293][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.114924][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.126605][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.168403][ T7148] FAULT_INJECTION: forcing a failure. [ 583.168403][ T7148] name failslab, interval 1, probability 0, space 0, times 0 [ 583.174899][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.194908][ T7148] CPU: 0 PID: 7148 Comm: syz.4.667 Not tainted syzkaller #0 [ 583.202263][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.212368][ T7148] Call Trace: [ 583.215687][ T7148] [ 583.218655][ T7148] dump_stack_lvl+0x188/0x24e [ 583.223383][ T7148] ? show_regs_print_info+0x12/0x12 [ 583.228612][ T7148] ? load_image+0x410/0x410 [ 583.233156][ T7148] ? __lock_acquire+0x7c40/0x7c40 [ 583.238230][ T7148] should_fail_ex+0x390/0x4c0 [ 583.242952][ T7148] should_failslab+0x5/0x20 [ 583.247485][ T7148] slab_pre_alloc_hook+0x59/0x300 [ 583.252548][ T7148] kmem_cache_alloc_lru+0x49/0x2e0 [ 583.257693][ T7148] ? sock_alloc_inode+0x24/0xc0 [ 583.262649][ T7148] sock_alloc_inode+0x24/0xc0 [ 583.267358][ T7148] ? sockfs_init_fs_context+0xa0/0xa0 [ 583.272757][ T7148] new_inode_pseudo+0x5f/0x1c0 [ 583.277556][ T7148] __sock_create+0x129/0x940 [ 583.282234][ T7148] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 583.288256][ T7148] __sys_socket+0xc4/0x190 [ 583.292707][ T7148] __x64_sys_socket+0x76/0x80 [ 583.297426][ T7148] do_syscall_64+0x4c/0xa0 [ 583.301880][ T7148] ? clear_bhb_loop+0x60/0xb0 [ 583.306601][ T7148] ? clear_bhb_loop+0x60/0xb0 [ 583.311306][ T7148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.317237][ T7148] RIP: 0033:0x7f103259e159 [ 583.321695][ T7148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.341341][ T7148] RSP: 002b:00007f10334f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 583.349792][ T7148] RAX: ffffffffffffffda RBX: 00007f1032825fa0 RCX: 00007f103259e159 [ 583.357793][ T7148] RDX: 0000000000000300 RSI: 000000000000000a RDI: 0000000000000011 [ 583.365791][ T7148] RBP: 00007f103263506b R08: 0000000000000000 R09: 0000000000000000 [ 583.373836][ T7148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.381832][ T7148] R13: 00007f1032826038 R14: 00007f1032825fa0 R15: 00007ffe95ca4db8 [ 583.389843][ T7148] [ 583.479572][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.593272][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.759857][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.924035][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.085965][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.253766][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.374101][ T7148] socket: no more sockets [ 584.399970][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.410716][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.421106][ T6932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.494878][ T6932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.556594][ T6932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.616579][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 584.630956][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 584.654958][ T4323] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 584.675835][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 584.723149][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 584.790716][ T6932] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.844445][ T6932] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.884854][ T4323] usb 5-1: device descriptor read/64, error -71 [ 585.014539][ T6932] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.114028][ T7164] ecryptfs_mount: kern_path() failed [ 585.162288][ T6932] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.327648][ T7164] Reading sb failed; rc = [-2] [ 586.115472][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.123373][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.171107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 586.374448][ T4406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.397834][ T4406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.440507][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 588.194834][ T7] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 588.354897][ T7] usb 3-1: device descriptor read/64, error -71 [ 588.636019][ T7] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 589.004903][ T7] usb 3-1: device descriptor read/64, error -71 [ 589.146070][ T7] usb usb3-port1: attempt power cycle [ 590.875039][ T7] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 591.115198][ T7] usb 3-1: device not accepting address 14, error -71 [ 592.608539][ T27] audit: type=1800 audit(1790613925.201:116): pid=7213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.679" name="c_srate" dev="configfs" ino=43691 res=0 errno=0 [ 598.381384][ T27] audit: type=1800 audit(1790613930.971:117): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.684" name="c_srate" dev="configfs" ino=43707 res=0 errno=0 [ 601.322845][ T27] audit: type=1800 audit(1790613938.917:118): pid=7252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.681" name="c_srate" dev="configfs" ino=43715 res=0 errno=0 [ 601.364873][ T4323] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 601.874912][ T4323] usb 6-1: device descriptor read/64, error -71 [ 603.616114][ T4323] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 607.643069][ T27] audit: type=1800 audit(1790613945.237:119): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.697" name="c_srate" dev="configfs" ino=43753 res=0 errno=0 [ 609.622114][ T27] audit: type=1800 audit(1790613947.217:120): pid=7294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.693" name="c_srate" dev="configfs" ino=43767 res=0 errno=0 [ 609.827269][ T6851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 609.842696][ T6851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 609.854472][ T6851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 609.886948][ T6851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 609.904883][ T6851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 609.925382][ T6851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 610.750182][ T7297] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 612.776051][ T4295] Bluetooth: hci4: command 0x0409 tx timeout [ 612.837356][ T7291] chnl_net:caif_netlink_parms(): no params data found [ 613.235459][ T4742] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 613.281633][ T27] audit: type=1800 audit(1790613950.877:121): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.692" name="c_srate" dev="configfs" ino=44670 res=0 errno=0 [ 613.327079][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.394931][ T4742] usb 6-1: device descriptor read/64, error -71 [ 613.395695][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.432635][ T7291] device bridge_slave_0 entered promiscuous mode [ 613.501928][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.528138][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.552876][ T7291] device bridge_slave_1 entered promiscuous mode [ 613.664489][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.675080][ T4742] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 613.706092][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.814548][ T7291] team0: Port device team_slave_0 added [ 613.845213][ T4742] usb 6-1: device descriptor read/64, error -71 [ 613.853488][ T7291] team0: Port device team_slave_1 added [ 614.788678][ T4295] Bluetooth: hci4: command 0x041b tx timeout [ 614.809127][ T4742] usb usb6-port1: attempt power cycle [ 615.039857][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.074796][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.161420][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.194965][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.214842][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.284839][ T4742] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 615.299164][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.365152][ T4742] usb 6-1: device descriptor read/8, error -71 [ 615.491579][ T7291] device hsr_slave_0 entered promiscuous mode [ 615.556733][ T7291] device hsr_slave_1 entered promiscuous mode [ 615.586675][ T7291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.604853][ T7291] Cannot create hsr debugfs directory [ 615.655001][ T4742] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 615.696310][ T4742] usb 6-1: device descriptor read/8, error -71 [ 615.825613][ T4742] usb usb6-port1: unable to enumerate USB device [ 616.609646][ T7339] ecryptfs_mount: kern_path() failed [ 616.791752][ T7339] Reading sb failed; rc = [-2] [ 616.864922][ T4295] Bluetooth: hci4: command 0x040f tx timeout [ 618.814900][ T4283] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 618.880073][ T27] audit: type=1800 audit(1790613956.477:122): pid=7352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.707" name="c_srate" dev="configfs" ino=44819 res=0 errno=0 [ 618.945097][ T4295] Bluetooth: hci4: command 0x0419 tx timeout [ 619.034877][ T4283] usb 6-1: Using ep0 maxpacket: 8 [ 619.053633][ T4283] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 619.246749][ T4283] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 619.432279][ T4283] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 619.603951][ T7291] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 619.624820][ T4283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.637818][ T7291] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 619.733046][ T4283] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected [ 619.768164][ T7291] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 619.811767][ T4283] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 619.863895][ T7291] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 619.962320][ T7345] jffs2: notice: (7345) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 620.144305][ T7356] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 621.929000][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.458416][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.537996][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.772875][ T7291] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.419724][ T7] usb 6-1: USB disconnect, device number 12 [ 623.709197][ T7] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 623.728027][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 623.752559][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.802199][ T7] kobil_sct 6-1:1.0: device disconnected [ 623.858409][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.865609][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.895360][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.942051][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.973284][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.980500][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.055957][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 624.083077][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.152473][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.186604][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 624.220836][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 624.231555][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.237964][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.278993][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 624.355836][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 624.375709][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 624.434926][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 624.452198][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 624.482604][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 624.525422][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 624.535961][ T7291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.596305][ T7370] 9pnet: Could not find request transport: fd"rfdno=ūCyfϛLLscmfγk=20~x(VNSet߭Ft [ 625.974954][ T4342] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 627.034940][ T4342] usb 2-1: device descriptor read/64, error -71 [ 627.157800][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 627.175642][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 627.200591][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.305137][ T4342] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 627.464893][ T4342] usb 2-1: device descriptor read/64, error -71 [ 627.587343][ T4342] usb usb2-port1: attempt power cycle [ 628.015007][ T4342] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 628.056672][ T4342] usb 2-1: device descriptor read/8, error -71 [ 628.271008][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 628.294640][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 628.325174][ T4342] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 628.365983][ T4342] usb 2-1: device descriptor read/8, error -71 [ 628.520405][ T4342] usb usb2-port1: unable to enumerate USB device [ 630.706316][ T27] audit: type=1800 audit(1790613973.303:123): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.721" name="c_srate" dev="configfs" ino=44944 res=0 errno=0 [ 631.036609][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 631.048991][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 631.145786][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 631.165070][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 631.222038][ T7291] device veth0_vlan entered promiscuous mode [ 631.255261][ T7291] device veth1_vlan entered promiscuous mode [ 631.621545][ T7419] ecryptfs_mount: kern_path() failed [ 633.363773][ T7419] Reading sb failed; rc = [-2] [ 633.425422][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 633.575669][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 633.606357][ T7291] device veth0_macvtap entered promiscuous mode [ 633.643856][ T7291] device veth1_macvtap entered promiscuous mode [ 634.670810][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.764024][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.807712][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.892874][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.951535][ T7432] ================================================================== [ 634.959739][ T7432] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4f/0xf0 [ 634.967300][ T7432] Write of size 4 at addr ffff8880296e89a0 by task syz.2.729/7432 [ 634.975188][ T7432] [ 634.977600][ T7432] CPU: 1 PID: 7432 Comm: syz.2.729 Not tainted syzkaller #0 [ 634.984953][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.995059][ T7432] Call Trace: [ 634.998370][ T7432] [ 635.001334][ T7432] dump_stack_lvl+0x188/0x24e [ 635.006059][ T7432] ? __lock_acquire+0x7c40/0x7c40 [ 635.011134][ T7432] ? show_regs_print_info+0x12/0x12 [ 635.016368][ T7432] ? load_image+0x410/0x410 [ 635.020917][ T7432] ? __virt_addr_valid+0x467/0x540 [ 635.026184][ T7432] ? try_module_get+0x4f/0xf0 [ 635.030899][ T7432] print_report+0xa8/0x210 [ 635.035364][ T7432] kasan_report+0x10b/0x140 [ 635.039909][ T7432] ? try_module_get+0x4f/0xf0 [ 635.044616][ T7432] kasan_check_range+0x235/0x290 [ 635.049616][ T7432] try_module_get+0x4f/0xf0 [ 635.054159][ T7432] dvb_device_open+0xf0/0x360 [ 635.058934][ T7432] chrdev_open+0x585/0x5f0 [ 635.063484][ T7432] ? cd_forget+0x160/0x160 [ 635.067977][ T7432] ? fsnotify_perm+0x39b/0x550 [ 635.072785][ T7432] ? cd_forget+0x160/0x160 [ 635.077243][ T7432] do_dentry_open+0x7dd/0x10b0 [ 635.082120][ T7432] path_openat+0x2674/0x2f10 [ 635.086766][ T7432] ? verify_lock_unused+0x140/0x140 [ 635.092035][ T7432] ? do_sys_openat2+0xdd/0x4f0 [ 635.096847][ T7432] ? do_filp_open+0x420/0x420 [ 635.101573][ T7432] do_filp_open+0x1ee/0x420 [ 635.106133][ T7432] ? vfs_tmpfile+0x470/0x470 [ 635.110796][ T7432] ? _raw_spin_unlock+0x24/0x40 [ 635.115707][ T7432] ? alloc_fd+0x590/0x640 [ 635.120097][ T7432] do_sys_openat2+0x14b/0x4f0 [ 635.124827][ T7432] ? do_sys_open+0xe0/0xe0 [ 635.129290][ T7432] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 635.135315][ T7432] ? lock_chain_count+0x20/0x20 [ 635.140222][ T7432] __x64_sys_openat+0x135/0x160 [ 635.145147][ T7432] do_syscall_64+0x4c/0xa0 [ 635.149614][ T7432] ? clear_bhb_loop+0x60/0xb0 [ 635.154333][ T7432] ? clear_bhb_loop+0x60/0xb0 [ 635.159054][ T7432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.165002][ T7432] RIP: 0033:0x7fbda355e98e [ 635.169463][ T7432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 635.189123][ T7432] RSP: 002b:00007fbda4396b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 635.197575][ T7432] RAX: ffffffffffffffda RBX: 00007fbda43976c0 RCX: 00007fbda355e98e [ 635.205584][ T7432] RDX: 0000000000040002 RSI: 00007fbda4396c00 RDI: ffffffffffffff9c [ 635.213593][ T7432] RBP: 00007fbda4396c00 R08: 0000000000000000 R09: 0000000000000000 [ 635.221592][ T7432] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 635.229617][ T7432] R13: 00007fbda3826218 R14: 00007fbda3826180 R15: 00007ffe0c5c1c08 [ 635.237636][ T7432] [ 635.240687][ T7432] [ 635.243038][ T7432] Allocated by task 1: [ 635.247309][ T7432] kasan_set_track+0x4b/0x70 [ 635.251973][ T7432] __kasan_kmalloc+0x8e/0xa0 [ 635.256604][ T7432] dvb_register_device+0x305/0x1dc0 [ 635.261896][ T7432] dvb_dmxdev_init+0x2bf/0x410 [ 635.266692][ T7432] vidtv_bridge_probe+0xb6b/0xf50 [ 635.271838][ T7432] platform_probe+0x137/0x1c0 [ 635.276574][ T7432] really_probe+0x24a/0xb40 [ 635.281163][ T7432] __driver_probe_device+0x1f5/0x390 [ 635.286489][ T7432] driver_probe_device+0x4f/0x420 [ 635.291559][ T7432] __driver_attach+0x43d/0x6c0 [ 635.296362][ T7432] bus_for_each_dev+0x182/0x1f0 [ 635.301250][ T7432] bus_add_driver+0x324/0x5d0 [ 635.305961][ T7432] driver_register+0x32d/0x430 [ 635.310758][ T7432] vidtv_bridge_init+0x45/0x73 [ 635.315781][ T7432] do_one_initcall+0x257/0x800 [ 635.320641][ T7432] do_initcall_level+0x13d/0x1ed [ 635.325642][ T7432] do_initcalls+0x4b/0x8a [ 635.330005][ T7432] kernel_init_freeable+0x401/0x5ab [ 635.335236][ T7432] kernel_init+0x19/0x1b0 [ 635.339649][ T7432] ret_from_fork+0x1f/0x30 [ 635.344103][ T7432] [ 635.346451][ T7432] The buggy address belongs to the object at ffff8880296e8800 [ 635.346451][ T7432] which belongs to the cache kmalloc-256 of size 256 [ 635.360624][ T7432] The buggy address is located 160 bytes to the right of [ 635.360624][ T7432] 256-byte region [ffff8880296e8800, ffff8880296e8900) [ 635.374453][ T7432] [ 635.376809][ T7432] The buggy address belongs to the physical page: [ 635.383318][ T7432] page:ffffea0000a5ba00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x296e8 [ 635.393500][ T7432] head:ffffea0000a5ba00 order:1 compound_mapcount:0 compound_pincount:0 [ 635.401860][ T7432] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 635.409899][ T7432] raw: 00fff00000010200 ffffea0001952b00 dead000000000003 ffff888017441b40 [ 635.418523][ T7432] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 635.427133][ T7432] page dumped because: kasan: bad access detected [ 635.433568][ T7432] page_owner tracks the page as allocated [ 635.439302][ T7432] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18534796778, free_ts 0 [ 635.459055][ T7432] post_alloc_hook+0x173/0x1a0 [ 635.463947][ T7432] get_page_from_freelist+0x206b/0x2180 [ 635.469546][ T7432] __alloc_pages+0x1ec/0x4f0 [ 635.474192][ T7432] alloc_page_interleave+0x24/0x1e0 [ 635.479436][ T7432] alloc_slab_page+0x5d/0x180 [ 635.484158][ T7432] new_slab+0x87/0x2d0 [ 635.488267][ T7432] ___slab_alloc+0xbc5/0x1240 [ 635.493009][ T7432] __kmem_cache_alloc_node+0x126/0x270 [ 635.498519][ T7432] kmalloc_trace+0x26/0xe0 [ 635.502967][ T7432] bus_add_driver+0xdc/0x5d0 [ 635.507598][ T7432] driver_register+0x32d/0x430 [ 635.512400][ T7432] i2c_register_driver+0xb6/0x160 [ 635.517565][ T7432] do_one_initcall+0x257/0x800 [ 635.522365][ T7432] do_initcall_level+0x13d/0x1ed [ 635.527332][ T7432] do_initcalls+0x4b/0x8a [ 635.531686][ T7432] kernel_init_freeable+0x401/0x5ab [ 635.536919][ T7432] page_owner free stack trace missing [ 635.542305][ T7432] [ 635.544653][ T7432] Memory state around the buggy address: [ 635.550366][ T7432] ffff8880296e8880: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 635.558452][ T7432] ffff8880296e8900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 635.566553][ T7432] >ffff8880296e8980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 635.574641][ T7432] ^ [ 635.579773][ T7432] ffff8880296e8a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 635.587864][ T7432] ffff8880296e8a80: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 635.595949][ T7432] ================================================================== [ 635.605506][ T7432] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 635.612740][ T7432] CPU: 1 PID: 7432 Comm: syz.2.729 Not tainted syzkaller #0 [ 635.620066][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.630146][ T7432] Call Trace: [ 635.633447][ T7432] [ 635.636408][ T7432] dump_stack_lvl+0x188/0x24e [ 635.641125][ T7432] ? memcpy+0x3c/0x60 [ 635.645138][ T7432] ? show_regs_print_info+0x12/0x12 [ 635.650366][ T7432] ? load_image+0x410/0x410 [ 635.654913][ T7432] panic+0x2d3/0x710 [ 635.658854][ T7432] ? bpf_jit_dump+0xd0/0xd0 [ 635.663418][ T7432] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 635.669357][ T7432] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 635.675290][ T7432] ? _raw_spin_unlock+0x40/0x40 [ 635.680177][ T7432] ? print_memory_metadata+0x314/0x400 [ 635.685687][ T7432] check_panic_on_warn+0x80/0xa0 [ 635.690692][ T7432] ? try_module_get+0x4f/0xf0 [ 635.695398][ T7432] end_report+0x66/0x110 [ 635.699677][ T7432] kasan_report+0x118/0x140 [ 635.704227][ T7432] ? try_module_get+0x4f/0xf0 [ 635.708934][ T7432] kasan_check_range+0x235/0x290 [ 635.713918][ T7432] try_module_get+0x4f/0xf0 [ 635.718455][ T7432] dvb_device_open+0xf0/0x360 [ 635.723181][ T7432] chrdev_open+0x585/0x5f0 [ 635.727637][ T7432] ? cd_forget+0x160/0x160 [ 635.732178][ T7432] ? fsnotify_perm+0x39b/0x550 [ 635.736972][ T7432] ? cd_forget+0x160/0x160 [ 635.741421][ T7432] do_dentry_open+0x7dd/0x10b0 [ 635.746240][ T7432] path_openat+0x2674/0x2f10 [ 635.750879][ T7432] ? verify_lock_unused+0x140/0x140 [ 635.756203][ T7432] ? do_sys_openat2+0xdd/0x4f0 [ 635.761005][ T7432] ? do_filp_open+0x420/0x420 [ 635.765721][ T7432] do_filp_open+0x1ee/0x420 [ 635.770260][ T7432] ? vfs_tmpfile+0x470/0x470 [ 635.774898][ T7432] ? _raw_spin_unlock+0x24/0x40 [ 635.779785][ T7432] ? alloc_fd+0x590/0x640 [ 635.784158][ T7432] do_sys_openat2+0x14b/0x4f0 [ 635.788877][ T7432] ? do_sys_open+0xe0/0xe0 [ 635.793345][ T7432] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 635.799363][ T7432] ? lock_chain_count+0x20/0x20 [ 635.804254][ T7432] __x64_sys_openat+0x135/0x160 [ 635.809153][ T7432] do_syscall_64+0x4c/0xa0 [ 635.813603][ T7432] ? clear_bhb_loop+0x60/0xb0 [ 635.818308][ T7432] ? clear_bhb_loop+0x60/0xb0 [ 635.823040][ T7432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.828978][ T7432] RIP: 0033:0x7fbda355e98e [ 635.833423][ T7432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 635.853072][ T7432] RSP: 002b:00007fbda4396b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 635.861522][ T7432] RAX: ffffffffffffffda RBX: 00007fbda43976c0 RCX: 00007fbda355e98e [ 635.869560][ T7432] RDX: 0000000000040002 RSI: 00007fbda4396c00 RDI: ffffffffffffff9c [ 635.877570][ T7432] RBP: 00007fbda4396c00 R08: 0000000000000000 R09: 0000000000000000 [ 635.885578][ T7432] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 635.893586][ T7432] R13: 00007fbda3826218 R14: 00007fbda3826180 R15: 00007ffe0c5c1c08 [ 635.901602][ T7432] [ 635.905239][ T7432] Kernel Offset: disabled [ 635.909595][ T7432] Rebooting in 86400 seconds..