last executing test programs: 24.142441674s ago: executing program 1 (id=659): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) read$msr(r0, 0x0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x20}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x73187bcd) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r8, 0xbb2, 0x1) socket$packet(0x11, 0x3, 0x300) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 20.470030679s ago: executing program 0 (id=666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1123102, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x80001, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x8, 0x2, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x8, 0x3, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x404, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 20.374109708s ago: executing program 1 (id=667): mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="c323567fea2eb55ab91640ea77eb5f6ae9f6564983ae5689da72d2e7a28657524e863f1102f9bbf99e3f973e4abe7a95eeb4e1e213c0bf915331001e04c028f2dbc32428bb43d87ac6364d93d936435e000aa9cc8dff68141f7e752a1a10d9ec3f0a87583236e7d32f3fa56ba46a6081ee30f26f6c71aca4c7c43bf653cb76", @ANYRES16=r5, @ANYBLOB="99061762e348c5774f5a7938c05120d53914d04aa1519eb03dece010d02e65f8ec0ebc6e66684ca7986bbc", @ANYRESOCT=r5, @ANYRES64=0x0], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a8", 0x15, 0x4044804, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0) 19.447858446s ago: executing program 2 (id=669): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000001f80), r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001a00010000000000000000001c1400000000fe08000000000c00090005100009", @ANYRES32, @ANYBLOB="45010206f49664fa293e154a"], 0x28}}, 0x0) 18.251279368s ago: executing program 0 (id=671): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 18.134501312s ago: executing program 1 (id=672): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000500)='\xc4\x85D\xf8U\x01\'>`\xfc\x8a5\xf8\xe8\xd5\x1b\x14TB\xd2\xe4\xa5zd', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 18.134135292s ago: executing program 3 (id=673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r1, 0x560e, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r3, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r7, r4, 0x4, r6}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d6664227266646e6f3de0c5ab43a5ed798766e8cf9b4cfa804c9ccc7363d46d85a6e866e7ceb3036b3db916d73230bcf5d5fd7e06a9187828d0564e8c0d5365a48db374e8dfdfad46d074a199a0f0f7e9000e37154a7a7b8f9fcf1ee572d8eb87bc4c79f2fc22c7c7f8dcaa99adab8b5d63fc0f21b48adf9ec71ae33ddbc154f28e3aa586dbc55d06dc8425558cbbd96145fd4d16f961c86b4168707fd62f34c1b8ffdd991ee947deec828406a807267819", @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r10], 0x15) write(r8, &(0x7f0000000140)='never', 0x5) r12 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) ioctl$COMEDI_DEVCONFIG(r12, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3c4, 0x6, 0x2, 0xba3, 0x46, 0x7, 0x9, 0x100, 0xffb, 0x7ffe, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x0, 0x66, 0x40034d, 0x5, 0xf4, 0xffffffff, 0x10001, 0xe2df, 0xffb, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) 17.036861035s ago: executing program 2 (id=674): setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x2) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0xee96, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000540)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, 'E r', 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, "8108f9", 0xfffb, 0x73, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback}}}}}}}, 0x0) 14.389104202s ago: executing program 4 (id=677): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) read$msr(r0, 0x0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x20}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x73187bcd) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r8, 0xbb2, 0x1) socket$packet(0x11, 0x3, 0x300) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 13.828221985s ago: executing program 3 (id=678): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) write(r4, &(0x7f0000002f40)='44100,48000,', 0xc) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000000000)) read$FUSE(r4, 0x0, 0x0) 12.199551096s ago: executing program 0 (id=679): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x55, 0x20, 0x70bd2b, 0x25dfdc01, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x803, {@ip4=@broadcast, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500202000902710002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d1524120004a317a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d00000904010102020d"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 12.017661522s ago: executing program 4 (id=680): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x42, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$packet(0x11, 0xa, 0x300) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 11.58749414s ago: executing program 3 (id=681): socket$inet_tcp(0x2, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) sendmsg$inet(r5, 0x0, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 11.518077434s ago: executing program 1 (id=682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1123102, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x80001, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x8, 0x2, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x8, 0x3, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x404, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 9.583671146s ago: executing program 3 (id=683): mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="c323567fea2eb55ab91640ea77eb5f6ae9f6564983ae5689da72d2e7a28657524e863f1102f9bbf99e3f973e4abe7a95eeb4e1e213c0bf915331001e04c028f2dbc32428bb43d87ac6364d93d936435e000aa9cc8dff68141f7e752a1a10d9ec3f0a87583236e7d32f3fa56ba46a6081ee30f26f6c71aca4c7c43bf653cb76", @ANYRES16=r5, @ANYBLOB="99061762e348c5774f5a7938c05120d53914d04aa1519eb03dece010d02e65f8ec0ebc6e66684ca7986bbc", @ANYRESOCT=r5, @ANYRES64=0x0], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a8", 0x15, 0x4044804, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0) 8.691731837s ago: executing program 1 (id=684): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000001f80), r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001a00010000000000000000001c1400000000fe08000000000c00090005100009", @ANYRES32, @ANYBLOB="45010206f49664fa293e154a"], 0x28}}, 0x0) 8.613972342s ago: executing program 0 (id=685): syz_emit_ethernet(0x36, &(0x7f00000003c0)={@remote, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000640000000000019078ac1e4001ac1414aa0b009078032c00004200000000000000008900000a010101ac1414aa862800000002060d5e000000ff000000f587"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="9ddb", 0x2}], 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=0x0, @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x8, 0x7ffffcb9}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) flock(r2, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(r1, 0x0, 0x44054) 8.562312493s ago: executing program 2 (id=686): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4d, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x9}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x16, 0x1b, 0x67, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}}, "861e2bbe82f3b2"}}}}}, 0x2d) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r6, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000600)={0x7, &(0x7f0000000500)=[{0x15, '\x00', @buffer={"382e5803df92f7e3a82382b3f29b773f0d37e2cd70a8a725cd14ccf5807ab2b2", 0x20}, 0xfffffff4}, {0x28, '\x00', @buffer={"ca0e0de0e3bfde98906058e2a46554208d5237cf85e96d768a2fdaa93f9cfff4", 0x20}, 0x2f79}, {0x2a, '\x00', @data=0x4, 0x6}]}) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={0x0, 0xde}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded6713302261b487e569f8fac402918be4ee374a4257d4bf67e86ff4beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b2081640008000000000000cd90d32ebcf5ea2c79482fb0e0cfb8bf19da10adffeafb4747c5853fdaca77fe20bbb66b8e86486c2ea7e519a50fb23e5202f7f02c633d4f56361cd848e6cec9abcbf97c60de6c9d205a4e26b68f", 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 8.543855067s ago: executing program 4 (id=687): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x101843) rt_sigqueueinfo(0x0, 0x21, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(r3, 0x0, 0x0, 0x8b, 0x800) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) 7.606250317s ago: executing program 2 (id=688): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x5, 0x0) pipe(&(0x7f00000045c0)) socket$inet(0x2, 0x3, 0x7f) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000240), &(0x7f0000000340)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r2, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5e}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[], 0x0) 6.730170304s ago: executing program 0 (id=689): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 5.976363008s ago: executing program 4 (id=690): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) read$msr(r0, 0x0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1c}}}}], 0x20}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x73187bcd) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r8, 0xbb2, 0x1) socket$packet(0x11, 0x3, 0x300) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 3.732013003s ago: executing program 2 (id=691): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) write(r4, &(0x7f0000002f40)='44100,48000,', 0xc) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000000000)) read$FUSE(r4, 0x0, 0x0) 3.727933544s ago: executing program 3 (id=692): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000500)='\xc4\x85D\xf8U\x01\'>`\xfc\x8a5\xf8\xe8\xd5\x1b\x14TB\xd2\xe4\xa5zd', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 3.574684845s ago: executing program 1 (id=693): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.494011227s ago: executing program 4 (id=694): socket$inet_tcp(0x2, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) sendmsg$inet(r5, 0x0, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 1.493747277s ago: executing program 0 (id=695): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x55, 0x20, 0x70bd2b, 0x25dfdc01, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x803, {@ip4=@broadcast, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500202000902710002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d1524120004a317a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d00000904010102020d"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.414074473s ago: executing program 2 (id=696): setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x2) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0xee96, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000540)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, 'E r', 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, "8108f9", 0xfffb, 0x73, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @loopback}}}}}}}, 0x0) 256.896548ms ago: executing program 4 (id=697): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x42, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$packet(0x11, 0xa, 0x300) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 0s ago: executing program 3 (id=698): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4d, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x9}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x16, 0x1b, 0x67, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}}, "861e2bbe82f3b2"}}}}}, 0x2d) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r6, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000600)={0x7, &(0x7f0000000500)=[{0x15, '\x00', @buffer={"382e5803df92f7e3a82382b3f29b773f0d37e2cd70a8a725cd14ccf5807ab2b2", 0x20}, 0xfffffff4}, {0x28, '\x00', @buffer={"ca0e0de0e3bfde98906058e2a46554208d5237cf85e96d768a2fdaa93f9cfff4", 0x20}, 0x2f79}, {0x2a, '\x00', @data=0x4, 0x6}]}) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={0x0, 0xde}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded6713302261b487e569f8fac402918be4ee374a4257d4bf67e86ff4beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b2081640008000000000000cd90d32ebcf5ea2c79482fb0e0cfb8bf19da10adffeafb4747c5853fdaca77fe20bbb66b8e86486c2ea7e519a50fb23e5202f7f02c633d4f56361cd848e6cec9abcbf97c60de6c9d205a4e26b68f", 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) kernel console output (not intermixed with test programs): T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.140052][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.147496][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.152708][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.162473][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.162973][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.169979][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.177855][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.184587][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.190702][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.198121][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.212475][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.220175][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.228976][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.257941][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.277809][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.649437][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 67.698423][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 67.754426][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 67.777044][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 67.789647][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 67.822824][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.832057][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.840721][ T4272] device bridge_slave_0 entered promiscuous mode [ 67.879751][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.889229][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.898083][ T4272] device bridge_slave_1 entered promiscuous mode [ 67.962344][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.969620][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.977809][ T4273] device bridge_slave_0 entered promiscuous mode [ 67.991429][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.999272][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.008983][ T4273] device bridge_slave_1 entered promiscuous mode [ 68.030141][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.042270][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.076576][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.085747][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.095523][ T4270] device bridge_slave_0 entered promiscuous mode [ 68.109757][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.117128][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.126501][ T4270] device bridge_slave_1 entered promiscuous mode [ 68.138902][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.146139][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.154096][ T4271] device bridge_slave_0 entered promiscuous mode [ 68.162847][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.189530][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.199209][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.207298][ T4271] device bridge_slave_1 entered promiscuous mode [ 68.216764][ T4272] team0: Port device team_slave_0 added [ 68.224191][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.241417][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.248714][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.257147][ T4285] device bridge_slave_0 entered promiscuous mode [ 68.266725][ T4272] team0: Port device team_slave_1 added [ 68.272684][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.279890][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.287639][ T4285] device bridge_slave_1 entered promiscuous mode [ 68.315496][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.355359][ T4273] team0: Port device team_slave_0 added [ 68.362662][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.372614][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.381886][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.408053][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.421202][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.432882][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.443564][ T4273] team0: Port device team_slave_1 added [ 68.450835][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.467936][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.474971][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.500994][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.520449][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.574997][ T4285] team0: Port device team_slave_0 added [ 68.587729][ T4270] team0: Port device team_slave_0 added [ 68.596377][ T4270] team0: Port device team_slave_1 added [ 68.608022][ T4271] team0: Port device team_slave_0 added [ 68.615325][ T4285] team0: Port device team_slave_1 added [ 68.622173][ T4271] team0: Port device team_slave_1 added [ 68.628827][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.636155][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.662193][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.680138][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.687191][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.713337][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.770211][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.780014][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.808853][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.826665][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.834016][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.862967][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.876900][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.884083][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.911039][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.932379][ T4272] device hsr_slave_0 entered promiscuous mode [ 68.939764][ T4272] device hsr_slave_1 entered promiscuous mode [ 68.946958][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.954227][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.980203][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.992037][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.999178][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.025205][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.070637][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.077819][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.103764][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.122494][ T4273] device hsr_slave_0 entered promiscuous mode [ 69.130614][ T4273] device hsr_slave_1 entered promiscuous mode [ 69.138087][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.147067][ T4273] Cannot create hsr debugfs directory [ 69.170728][ T4270] device hsr_slave_0 entered promiscuous mode [ 69.177862][ T4270] device hsr_slave_1 entered promiscuous mode [ 69.185134][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.192697][ T4270] Cannot create hsr debugfs directory [ 69.224052][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 69.250245][ T4285] device hsr_slave_0 entered promiscuous mode [ 69.258320][ T4285] device hsr_slave_1 entered promiscuous mode [ 69.266586][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.274240][ T4285] Cannot create hsr debugfs directory [ 69.304613][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 69.310855][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 69.313602][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 69.317118][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 69.353842][ T4271] device hsr_slave_0 entered promiscuous mode [ 69.361089][ T4271] device hsr_slave_1 entered promiscuous mode [ 69.368984][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.376650][ T4271] Cannot create hsr debugfs directory [ 69.641567][ T4273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.652494][ T4273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.662502][ T4273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.673141][ T4273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.726350][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.736967][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.756185][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.773871][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.818575][ T4285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.829053][ T4285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.856637][ T4285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.870936][ T4285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.917098][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.932920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.946466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.962722][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.985831][ T4270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.010774][ T4270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.022173][ T4270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.039017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.049432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.058664][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.065990][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.079093][ T4270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.108679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.116773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.129003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.137729][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.145443][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.156479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.165638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.175401][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.202378][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.211545][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.220455][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.230224][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.255545][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.273083][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.290325][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.303818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.312121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.321566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.330555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.346743][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.356283][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.366575][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.399509][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.410329][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.419703][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.426839][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.436858][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.464107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.476304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.485825][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.492930][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.501025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.510195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.524755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.545609][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.562428][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.591878][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.607287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.624317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.643752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.655168][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.680513][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.691279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.701734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.712322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.721974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.730573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.740941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.762348][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.773536][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.793394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.802303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.811814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.829631][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.836752][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.846759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.856072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.864898][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.871965][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.879994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.888859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.897526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.906598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.915653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.924590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.933162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.941950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.972894][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.990535][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.001032][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.008308][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.022827][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.032483][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.048091][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.059428][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.073369][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.081035][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.098466][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.107261][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.131963][ T4285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.154532][ T4285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.175325][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.187642][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.196426][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.206589][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.215783][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.224711][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.232885][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.272671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.282644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.297519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.309445][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.313327][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 71.316005][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.327172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.341802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.373687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.381318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.383576][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 71.389409][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 71.396436][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 71.401173][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 71.421823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.432315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.462966][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.502953][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.518251][ T4270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.530309][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.550543][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.587087][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.603638][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.613127][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.635923][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.652977][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.666961][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.677550][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.689595][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.699257][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.721125][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.750027][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.759465][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.782296][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.799244][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.810369][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.817536][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.830865][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.840186][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.854424][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.861627][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.880128][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.889195][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.904539][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.930634][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.940712][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.958687][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.974283][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.989965][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.999337][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.014351][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.025925][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.070222][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.090743][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.105386][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.129473][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.151631][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.168958][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.179370][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.195775][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.208662][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.218035][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.233991][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.257681][ T4272] device veth0_vlan entered promiscuous mode [ 72.290720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.303702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.318848][ T4285] device veth0_vlan entered promiscuous mode [ 72.338753][ T4272] device veth1_vlan entered promiscuous mode [ 72.354585][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.370862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.379164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.393389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.409015][ T4285] device veth1_vlan entered promiscuous mode [ 72.426797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.437056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.448203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.456240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.471812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.481198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.507757][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.519178][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.528465][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.566592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.582476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.592714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.609103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.631409][ T4285] device veth0_macvtap entered promiscuous mode [ 72.641559][ T4272] device veth0_macvtap entered promiscuous mode [ 72.652727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.662858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.678027][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.686792][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.702241][ T4272] device veth1_macvtap entered promiscuous mode [ 72.721943][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.732043][ T4273] device veth0_vlan entered promiscuous mode [ 72.740506][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.750767][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.760230][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.768436][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.777246][ T4285] device veth1_macvtap entered promiscuous mode [ 72.788251][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.796996][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.831209][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.844092][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.852777][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.861375][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.869645][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.879064][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.888370][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.897855][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.928750][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.939714][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.951812][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.961084][ T4270] device veth0_vlan entered promiscuous mode [ 72.971551][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.981061][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.992436][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.001592][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.016840][ T4273] device veth1_vlan entered promiscuous mode [ 73.029517][ T4285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.038793][ T4285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.047916][ T4285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.058025][ T4285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.077519][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.089155][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.098047][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.123022][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.140662][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.157686][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.170279][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.180127][ T4270] device veth1_vlan entered promiscuous mode [ 73.194437][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.202620][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.211218][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.219495][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.231768][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.245623][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.254976][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.264897][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.273874][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.291371][ T4271] device veth0_vlan entered promiscuous mode [ 73.330435][ T4270] device veth0_macvtap entered promiscuous mode [ 73.342378][ T4270] device veth1_macvtap entered promiscuous mode [ 73.354403][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.362591][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.372643][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.381726][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.389450][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 73.398768][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.426094][ T4271] device veth1_vlan entered promiscuous mode [ 73.441420][ T4273] device veth0_macvtap entered promiscuous mode [ 73.463761][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 73.473943][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 73.473977][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 73.480613][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 73.498649][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.507928][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.516642][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.526045][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.541348][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.556693][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.566927][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.578036][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.589280][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.608142][ T4273] device veth1_macvtap entered promiscuous mode [ 73.635137][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.645798][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.655453][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.666077][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.676224][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.688092][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.698718][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.710888][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.721341][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.731962][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.744229][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.760156][ T4270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.769263][ T4270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.778102][ T4270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.787020][ T4270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.802621][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.814385][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.822203][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.837452][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.852312][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.879852][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.898228][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.909483][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.922384][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.932683][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.944899][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.956346][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.965077][ T4271] device veth0_macvtap entered promiscuous mode [ 74.007036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.020189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.031316][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.042192][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.052525][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.064582][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.074761][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.086150][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.097456][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.127450][ T4271] device veth1_macvtap entered promiscuous mode [ 74.136645][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.147047][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.175286][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.181889][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.192850][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.192903][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.217161][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.235173][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.248865][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.258981][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.281001][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.291067][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.328097][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.344710][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.356385][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.367645][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.377696][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.388326][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.398815][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.409742][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.422028][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.444242][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.465284][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.474341][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.484650][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.494301][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.504377][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.516169][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.526510][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.540288][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.550707][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.561647][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.571758][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.582420][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.594475][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.647825][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.648227][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.664634][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.674218][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.682927][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.698951][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.724228][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.734938][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.747251][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.758726][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.767702][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.776471][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.464694][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 75.544727][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 75.544734][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 75.544764][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 75.550873][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 75.635288][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.643143][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.747286][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.813374][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.863773][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.871853][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.928172][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.968825][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.008858][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.084994][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.092861][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.155474][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.313283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 76.323278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 76.333259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.343260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.353248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.363250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.373250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.383245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.393249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 76.403257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.513635][ T4274] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.756383][ T4274] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 77.781329][ T4274] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 77.792284][ T4387] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.646399][ T4274] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 78.657665][ T4274] usb 2-1: config 220 has no interface number 2 [ 78.664066][ T4274] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 78.677511][ T4274] usb 2-1: config 220 interface 0 has no altsetting 0 [ 78.684388][ T4274] usb 2-1: config 220 interface 76 has no altsetting 0 [ 78.692193][ T4274] usb 2-1: config 220 interface 1 has no altsetting 0 [ 78.714662][ T4274] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 78.724536][ T4274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.732576][ T4274] usb 2-1: Product: syz [ 78.737547][ T4274] usb 2-1: Manufacturer: syz [ 78.742398][ T4274] usb 2-1: SerialNumber: syz [ 78.820094][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 78.982261][ T4274] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 79.010017][ T4274] usb 2-1: No valid video chain found. [ 79.034024][ T4274] usb 2-1: selecting invalid altsetting 0 [ 79.077845][ T4274] usb 2-1: selecting invalid altsetting 0 [ 79.112388][ T4274] usbtest: probe of 2-1:220.1 failed with error -22 [ 79.130428][ T4410] sctp: [Deprecated]: syz.0.14 (pid 4410) Use of int in max_burst socket option. [ 79.130428][ T4410] Use struct sctp_assoc_value instead [ 79.222830][ T4274] usb 2-1: USB disconnect, device number 2 [ 80.364413][ T4427] FAULT_INJECTION: forcing a failure. [ 80.364413][ T4427] name failslab, interval 1, probability 0, space 0, times 1 [ 80.381772][ T4427] CPU: 0 PID: 4427 Comm: syz.1.21 Not tainted syzkaller #0 [ 80.388988][ T4427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.399065][ T4427] Call Trace: [ 80.402404][ T4427] [ 80.405351][ T4427] dump_stack_lvl+0x188/0x24e [ 80.410094][ T4427] ? show_regs_print_info+0x12/0x12 [ 80.415586][ T4427] ? load_image+0x410/0x410 [ 80.420206][ T4427] ? __might_sleep+0xd0/0xd0 [ 80.424815][ T4427] ? __lock_acquire+0x7c40/0x7c40 [ 80.429855][ T4427] should_fail_ex+0x390/0x4c0 [ 80.434567][ T4427] should_failslab+0x5/0x20 [ 80.439063][ T4427] slab_pre_alloc_hook+0x59/0x300 [ 80.444183][ T4427] ? driver_register+0x32d/0x430 [ 80.449108][ T4427] ? usb_gadget_register_driver_owner+0xf5/0x260 [ 80.455443][ T4427] ? raw_ioctl+0x13a0/0x3cd0 [ 80.460020][ T4427] ? kobject_set_name_vargs+0x5d/0x110 [ 80.465469][ T4427] __kmem_cache_alloc_node+0x4f/0x270 [ 80.470854][ T4427] ? kobject_set_name_vargs+0x5d/0x110 [ 80.476316][ T4427] __kmalloc_node_track_caller+0xa0/0x240 [ 80.482116][ T4427] kstrdup_const+0x56/0x90 [ 80.486546][ T4427] kobject_set_name_vargs+0x5d/0x110 [ 80.491840][ T4427] kobject_init_and_add+0xeb/0x190 [ 80.496956][ T4427] ? kobject_add+0x230/0x230 [ 80.501555][ T4427] ? __raw_spin_lock_init+0x41/0x100 [ 80.506854][ T4427] bus_add_driver+0x1de/0x5d0 [ 80.511792][ T4427] driver_register+0x32d/0x430 [ 80.516657][ T4427] usb_gadget_register_driver_owner+0xf5/0x260 [ 80.522844][ T4427] raw_ioctl+0x13a0/0x3cd0 [ 80.527338][ T4427] ? __kmem_cache_free+0xb6/0x200 [ 80.532459][ T4427] ? tomoyo_path_number_perm+0x205/0x650 [ 80.538118][ T4427] ? tomoyo_path_number_perm+0x5a4/0x650 [ 80.543754][ T4427] ? tomoyo_path_number_perm+0x205/0x650 [ 80.549688][ T4427] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 80.555174][ T4427] ? make_qualifier+0x3b0/0x3b0 [ 80.560119][ T4427] ? __fget_files+0x28/0x460 [ 80.564766][ T4427] ? bpf_lsm_file_ioctl+0x5/0x10 [ 80.569820][ T4427] ? security_file_ioctl+0x7c/0xa0 [ 80.574933][ T4427] ? make_qualifier+0x3b0/0x3b0 [ 80.579800][ T4427] __se_sys_ioctl+0xfa/0x170 [ 80.584416][ T4427] do_syscall_64+0x4c/0xa0 [ 80.588937][ T4427] ? clear_bhb_loop+0x60/0xb0 [ 80.593603][ T4427] ? clear_bhb_loop+0x60/0xb0 [ 80.598278][ T4427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.604168][ T4427] RIP: 0033:0x7fc7e779ddeb [ 80.608581][ T4427] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 80.628179][ T4427] RSP: 002b:00007fc7e873ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.636587][ T4427] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fc7e779ddeb [ 80.644548][ T4427] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 80.652507][ T4427] RBP: 00007fc7e873ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 80.660469][ T4427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.668428][ T4427] R13: 0000200000000040 R14: 0000000000000002 R15: 0000000000000000 [ 80.676396][ T4427] [ 80.881521][ T4427] kobject: can not set name properly! [ 80.933897][ T4427] UDC core: USB Raw Gadget: driver registration failed: -12 [ 80.955826][ T4427] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 82.062957][ T4444] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.26'. [ 82.403302][ T4316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.615220][ T4316] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 82.629400][ T4316] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 82.653297][ T4316] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 82.653375][ T4316] usb 5-1: config 220 has no interface number 2 [ 82.653418][ T4316] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 82.653442][ T4316] usb 5-1: config 220 interface 0 has no altsetting 0 [ 82.653458][ T4316] usb 5-1: config 220 interface 76 has no altsetting 0 [ 82.653484][ T4316] usb 5-1: config 220 interface 1 has no altsetting 0 [ 82.666321][ T4316] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 82.666349][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.666367][ T4316] usb 5-1: Product: syz [ 82.666381][ T4316] usb 5-1: Manufacturer: syz [ 82.666394][ T4316] usb 5-1: SerialNumber: syz [ 82.877132][ T4316] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 82.877186][ T4316] usb 5-1: No valid video chain found. [ 82.877226][ T4316] usb 5-1: selecting invalid altsetting 0 [ 82.886797][ T4316] usb 5-1: selecting invalid altsetting 0 [ 82.886825][ T4316] usbtest: probe of 5-1:220.1 failed with error -22 [ 82.902615][ T4316] usb 5-1: USB disconnect, device number 2 [ 83.057704][ T4469] autofs4:pid:4469:autofs_fill_super: called with bogus options [ 84.179121][ T4483] No source specified [ 86.692302][ T26] cfg80211: failed to load regulatory.db [ 88.620514][ T27] audit: type=1800 audit(1790419627.812:2): pid=4509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.49" name="c_srate" dev="configfs" ino=35223 res=0 errno=0 [ 90.753227][ C0] sched: RT throttling activated [ 90.760680][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.892780][ T4544] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 91.003907][ T4546] netlink: 'syz.3.60': attribute type 2 has an invalid length. [ 91.349741][ T4317] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.573262][ T4317] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.610662][ T4317] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 91.631406][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 91.692992][ T4317] usb 5-1: Product: syz [ 91.709803][ T4317] usb 5-1: Manufacturer: syz [ 91.872565][ T4317] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 92.696897][ T4317] mos7840: probe of 5-1:1.0 failed with error -71 [ 92.789766][ T27] audit: type=1800 audit(1790419631.982:3): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.63" name="c_srate" dev="configfs" ino=34174 res=0 errno=0 [ 93.217880][ T4317] usb 5-1: USB disconnect, device number 3 [ 94.777804][ T4579] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.924656][ T4583] netlink: 'syz.0.72': attribute type 2 has an invalid length. [ 94.963486][ T4319] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 95.203415][ T4319] usb 5-1: device descriptor read/64, error -71 [ 95.493537][ T4319] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 95.723452][ T4319] usb 5-1: device descriptor read/64, error -71 [ 95.843472][ T4319] usb usb5-port1: attempt power cycle [ 96.773410][ T4319] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 96.799719][ T27] audit: type=1800 audit(1790419635.992:4): pid=4601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.76" name="c_srate" dev="configfs" ino=35353 res=0 errno=0 [ 97.302658][ T4319] usb 5-1: device descriptor read/8, error -71 [ 97.867547][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.884471][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.893082][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.665170][ T4610] netlink: 104 bytes leftover after parsing attributes in process `syz.1.78'. [ 98.679868][ T4319] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 98.843352][ T4320] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.925539][ T4319] usb 5-1: device not accepting address 7, error -71 [ 99.046400][ T4319] usb usb5-port1: unable to enumerate USB device [ 99.164998][ T4619] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 100.510752][ T4320] usb 3-1: device descriptor read/all, error -71 [ 100.671738][ T4632] netlink: 'syz.2.87': attribute type 2 has an invalid length. [ 100.947441][ T4639] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 102.097170][ T27] audit: type=1800 audit(1790419641.292:5): pid=4650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.90" name="c_srate" dev="configfs" ino=34289 res=0 errno=0 [ 103.251383][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.269694][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.278240][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.832139][ T4663] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.133417][ T4274] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 105.466141][ T4274] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.386917][ T4274] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.576583][ T4274] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 106.640835][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 106.654115][ T4274] usb 5-1: Product: syz [ 106.658320][ T4274] usb 5-1: Manufacturer: syz [ 106.717011][ T4274] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 106.825550][ T4687] netlink: 'syz.1.102': attribute type 2 has an invalid length. [ 107.726298][ T4274] mos7840: probe of ttyUSB0 failed with error -32 [ 108.764203][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.780615][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.789499][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.497873][ T4320] usb 5-1: USB disconnect, device number 8 [ 109.513271][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.546600][ T4320] mos7840 5-1:1.0: device disconnected [ 109.709177][ T27] audit: type=1800 audit(1790419648.902:6): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.106" name="c_srate" dev="configfs" ino=34454 res=0 errno=0 [ 109.893317][ T26] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 109.903674][ T26] usb 4-1: config 32 has 0 interfaces, different from the descriptor's value: 1 [ 109.912736][ T26] usb 4-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 109.933271][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.000651][ T4702] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.428912][ T4320] usb 4-1: USB disconnect, device number 2 [ 114.944743][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.963223][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.972038][ T4757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.073508][ T4276] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 120.328816][ T4276] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 120.411187][ T4276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.536911][ T4276] usb 5-1: Product: syz [ 120.594464][ T4276] usb 5-1: Manufacturer: syz [ 120.703396][ T4276] usb 5-1: SerialNumber: syz [ 120.856389][ T4320] kernel write not supported for file /input/mice (pid: 4320 comm: kworker/0:6) [ 121.661744][ T22] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 123.354404][ T4276] usb 5-1: USB disconnect, device number 9 [ 123.456847][ T4809] ip_tables: iptables: counters copy to user failed while replacing table [ 124.264351][ T22] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 124.271926][ T22] ath9k_htc: Failed to initialize the device [ 124.292751][ T4276] usb 5-1: ath9k_htc: USB layer deinitialized [ 124.389905][ T4822] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 124.403365][ T4316] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.417126][ T4822] scsi_nl_rcv_msg: discarding partial skb [ 124.643437][ T26] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 124.674656][ T4316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.647250][ T4829] sctp: [Deprecated]: syz.3.140 (pid 4829) Use of int in max_burst socket option. [ 125.647250][ T4829] Use struct sctp_assoc_value instead [ 125.687216][ T4316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.742428][ T4316] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 125.760907][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 125.773246][ T4316] usb 3-1: Product: syz [ 125.782623][ T4316] usb 3-1: Manufacturer: syz [ 125.824830][ T26] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 125.864540][ T4316] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 126.860335][ T26] usb 1-1: config 0 has no interface number 0 [ 126.867205][ T26] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 126.901745][ T26] usb 1-1: string descriptor 0 read error: -71 [ 126.911421][ T26] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 126.923308][ T4316] mos7840: probe of ttyUSB0 failed with error -32 [ 126.948930][ T26] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 126.965589][ T26] usb 1-1: config 0 descriptor?? [ 126.971997][ T26] usb 1-1: can't set config #0, error -71 [ 126.981535][ T26] usb 1-1: USB disconnect, device number 2 [ 127.575486][ T4856] mmap: syz.1.149 (4856) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.927141][ T4320] usb 3-1: USB disconnect, device number 4 [ 128.939138][ T4320] mos7840 3-1:1.0: device disconnected [ 131.383982][ T4318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.437066][ T27] audit: type=1800 audit(1790419670.632:7): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.156" name="c_srate" dev="configfs" ino=34682 res=0 errno=0 [ 131.766076][ T4318] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 131.803379][ T4318] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 131.834237][ T4318] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 131.870041][ T4318] usb 1-1: config 220 has no interface number 2 [ 131.881232][ T4318] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 131.886221][ T4899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.160'. [ 131.911781][ T4318] usb 1-1: config 220 interface 0 has no altsetting 0 [ 131.924004][ T4318] usb 1-1: config 220 interface 76 has no altsetting 0 [ 131.941274][ T4318] usb 1-1: config 220 interface 1 has no altsetting 0 [ 131.962195][ T4318] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 131.976254][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.983391][ T4899] block nbd0: Unsupported socket: should be TCP or UNIX. [ 132.010295][ T4318] usb 1-1: Product: syz [ 132.026369][ T4318] usb 1-1: Manufacturer: syz [ 132.031015][ T4318] usb 1-1: SerialNumber: syz [ 132.256675][ T4318] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 132.273336][ T4318] usb 1-1: No valid video chain found. [ 132.278892][ T4318] usb 1-1: selecting invalid altsetting 0 [ 132.341380][ T4318] usb 1-1: selecting invalid altsetting 0 [ 132.367978][ T4318] usbtest: probe of 1-1:220.1 failed with error -22 [ 132.448630][ T4318] usb 1-1: USB disconnect, device number 3 [ 132.794031][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.802859][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.388030][ T127] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 133.583331][ T127] usb 4-1: device descriptor read/64, error -71 [ 133.603290][ T4318] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.663765][ T4929] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 136.684589][ T4929] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 136.746964][ T4318] usb 3-1: device descriptor read/all, error -71 [ 136.766105][ T4929] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 136.779238][ T4929] Error parsing options; rc = [-22] [ 136.789072][ T4940] netlink: 'syz.0.168': attribute type 2 has an invalid length. [ 136.906307][ T4957] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 139.933425][ T4318] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 140.801549][ T4318] usb 3-1: device descriptor read/64, error -71 [ 140.876685][ T27] audit: type=1800 audit(1790419680.072:8): pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.171" name="c_srate" dev="configfs" ino=36902 res=0 errno=0 [ 141.113322][ T4318] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 141.273247][ T4318] usb 3-1: device descriptor read/64, error -71 [ 141.393778][ T4318] usb usb3-port1: attempt power cycle [ 141.650122][ T5005] gadgetfs: bound to dummy_udc driver [ 141.767775][ T5008] netlink: 'syz.1.185': attribute type 2 has an invalid length. [ 141.803359][ T4318] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 141.853789][ T4318] usb 3-1: device descriptor read/8, error -71 [ 141.953463][ T4316] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 141.967784][ C1] gadgetfs: connected [ 141.976197][ T4316] gadgetfs: disconnected [ 142.143363][ T4318] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 142.163549][ C1] gadgetfs: connected [ 142.169092][ T4316] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 142.174317][ T4318] usb 3-1: device descriptor read/8, error -71 [ 142.179560][ T4316] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 142.198841][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.209853][ C1] gadgetfs: configuration #1 [ 142.220772][ T4319] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 142.313647][ T4318] usb usb3-port1: unable to enumerate USB device [ 142.425367][ T4319] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.437913][ T4319] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.449942][ T4319] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 142.463110][ T5005] gadgetfs: suspended from state 3 [ 142.468915][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 142.478330][ T5005] gadgetfs: disconnected [ 142.489198][ T4319] usb 5-1: Product: syz [ 142.502055][ T4319] usb 5-1: Manufacturer: syz [ 142.539411][ T26] usb 1-1: USB disconnect, device number 4 [ 142.556173][ T4319] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 143.023374][ T4319] mos7840: probe of ttyUSB0 failed with error -5 [ 144.165721][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 144.453255][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 144.468445][ T22] usb 1-1: no configurations [ 144.557700][ T27] audit: type=1800 audit(1790419683.752:9): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.193" name="c_srate" dev="configfs" ino=36984 res=0 errno=0 [ 145.206897][ T22] usb 1-1: can't read configurations, error -22 [ 145.363295][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.549147][ T5082] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.198'. [ 145.563491][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 145.573671][ T22] usb 1-1: no configurations [ 145.578320][ T22] usb 1-1: can't read configurations, error -22 [ 145.603506][ T22] usb usb1-port1: attempt power cycle [ 145.703720][ T4317] usb 5-1: USB disconnect, device number 10 [ 145.722107][ T4317] mos7840 5-1:1.0: device disconnected [ 146.233375][ T26] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 146.754075][ T26] usb 3-1: device descriptor read/64, error -71 [ 147.073305][ T26] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 147.217274][ T27] audit: type=1800 audit(1790419686.412:10): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.206" name="c_srate" dev="configfs" ino=37053 res=0 errno=0 [ 147.922338][ T5130] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.209'. [ 148.057284][ T26] usb 3-1: device descriptor read/64, error -71 [ 148.274012][ T26] usb usb3-port1: attempt power cycle [ 148.727870][ T26] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 148.820335][ T26] usb 3-1: device descriptor read/8, error -71 [ 148.943390][ T4317] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.150189][ T4317] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.173463][ T4317] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.934587][ T4317] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 149.953258][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 149.961312][ T4317] usb 4-1: Product: syz [ 151.101304][ T4317] usb 4-1: Manufacturer: syz [ 151.139150][ T4317] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 151.183786][ T5162] sctp: [Deprecated]: syz.4.219 (pid 5162) Use of int in max_burst socket option. [ 151.183786][ T5162] Use struct sctp_assoc_value instead [ 151.404199][ T27] audit: type=1800 audit(1790419690.602:11): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.222" name="c_srate" dev="configfs" ino=37117 res=0 errno=0 [ 151.549282][ T4317] mos7840: probe of ttyUSB0 failed with error -5 [ 152.328855][ T5181] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.225'. [ 152.423279][ T4317] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.563273][ T4316] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 152.615725][ T4317] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 152.631502][ T4317] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 152.651104][ T4317] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 152.673317][ T4317] usb 5-1: config 220 has no interface number 2 [ 152.702368][ T4317] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 152.725928][ T4317] usb 5-1: config 220 interface 0 has no altsetting 0 [ 152.732788][ T4317] usb 5-1: config 220 interface 76 has no altsetting 0 [ 152.739691][ T4316] usb 2-1: device descriptor read/64, error -71 [ 152.793442][ T4317] usb 5-1: config 220 interface 1 has no altsetting 0 [ 152.824353][ T4317] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 152.845170][ T26] usb 4-1: USB disconnect, device number 5 [ 152.862818][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.878781][ T26] mos7840 4-1:1.0: device disconnected [ 152.895531][ T4317] usb 5-1: Product: syz [ 152.901711][ T4317] usb 5-1: Manufacturer: syz [ 152.923536][ T4317] usb 5-1: SerialNumber: syz [ 153.003671][ T4316] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 153.183408][ T4316] usb 2-1: device descriptor read/64, error -71 [ 153.315508][ T4316] usb usb2-port1: attempt power cycle [ 153.723598][ T4316] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 153.799969][ T4316] usb 2-1: device descriptor read/8, error -71 [ 153.965812][ T5199] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 154.023381][ T5210] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 154.160660][ T5199] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 155.080764][ T4316] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 155.083459][ T4317] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 155.097400][ T4317] usb 5-1: No valid video chain found. [ 155.102953][ T4317] usb 5-1: selecting invalid altsetting 0 [ 155.122558][ T5199] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 155.146446][ T4317] usb 5-1: selecting invalid altsetting 0 [ 155.152224][ T4317] usbtest: probe of 5-1:220.1 failed with error -22 [ 155.220203][ T4317] usb 5-1: USB disconnect, device number 11 [ 155.225880][ T4316] usb 2-1: device descriptor read/8, error -71 [ 155.343628][ T4316] usb usb2-port1: unable to enumerate USB device [ 156.358086][ T5199] Error parsing options; rc = [-22] [ 158.133793][ T5246] sctp: [Deprecated]: syz.3.234 (pid 5246) Use of int in max_burst socket option. [ 158.133793][ T5246] Use struct sctp_assoc_value instead [ 159.223430][ T127] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 160.035755][ T5262] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 160.134261][ T5262] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 160.163003][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 160.213452][ T127] usb 5-1: device descriptor read/64, error -71 [ 161.734003][ T5262] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 161.755539][ T5262] Error parsing options; rc = [-22] [ 164.554565][ T5268] team0: Port device team_slave_0 removed [ 165.424136][ T4276] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 165.633486][ T4276] usb 5-1: Using ep0 maxpacket: 32 [ 165.640880][ T4276] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.660303][ T4276] usb 5-1: config 0 has no interfaces? [ 165.678028][ T4276] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 165.693507][ T4276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.743431][ T4276] usb 5-1: config 0 descriptor?? [ 166.116300][ T27] audit: type=1800 audit(1790419705.312:12): pid=5310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.263" name="c_srate" dev="configfs" ino=37353 res=0 errno=0 [ 166.263490][ T4317] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 166.453728][ T4317] usb 4-1: device descriptor read/64, error -71 [ 166.723320][ T4317] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 166.891096][ T4317] usb 4-1: device descriptor read/64, error -71 [ 167.038466][ T4317] usb usb4-port1: attempt power cycle [ 167.463342][ T4317] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 168.053946][ T4317] usb 4-1: device descriptor read/8, error -71 [ 168.085966][ T4276] usb 5-1: USB disconnect, device number 14 [ 168.323538][ T4317] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 168.373958][ T4317] usb 4-1: device descriptor read/8, error -71 [ 168.607558][ T4317] usb usb4-port1: unable to enumerate USB device [ 169.626811][ T27] audit: type=1800 audit(1790419708.822:13): pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.275" name="c_srate" dev="configfs" ino=37401 res=0 errno=0 [ 170.643355][ T22] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 170.845007][ T22] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.911340][ T22] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.064161][ T22] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 172.083262][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 172.091489][ T22] usb 4-1: Product: syz [ 172.096174][ T22] usb 4-1: Manufacturer: syz [ 172.105457][ T22] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 172.857166][ T27] audit: type=1800 audit(1790419712.052:14): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.285" name="c_srate" dev="configfs" ino=37511 res=0 errno=0 [ 173.685085][ T22] mos7840: probe of ttyUSB0 failed with error -71 [ 173.707291][ T22] usb 4-1: USB disconnect, device number 10 [ 173.715149][ T22] mos7840 4-1:1.0: device disconnected [ 174.113285][ T26] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 174.140118][ T27] audit: type=1800 audit(1790419713.332:15): pid=5396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.288" name="c_srate" dev="configfs" ino=37526 res=0 errno=0 [ 174.883241][ T26] usb 5-1: device descriptor read/64, error -71 [ 174.902937][ T5401] ip_tables: iptables: counters copy to user failed while replacing table [ 175.157114][ T26] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 176.103308][ T26] usb 5-1: device descriptor read/64, error -71 [ 176.223397][ T26] usb usb5-port1: attempt power cycle [ 176.998991][ T27] audit: type=1800 audit(1790419716.192:16): pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.297" name="c_srate" dev="configfs" ino=36690 res=0 errno=0 [ 178.896408][ T5454] sctp: [Deprecated]: syz.3.307 (pid 5454) Use of int in max_burst socket option. [ 178.896408][ T5454] Use struct sctp_assoc_value instead [ 179.640963][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.658613][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.667337][ T5462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.420252][ T27] audit: type=1800 audit(1790419719.612:17): pid=5467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.313" name="c_srate" dev="configfs" ino=36757 res=0 errno=0 [ 180.624505][ T4276] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 180.813500][ T4276] usb 5-1: device descriptor read/64, error -71 [ 181.543390][ T4276] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 181.749782][ T4276] usb 5-1: device descriptor read/64, error -71 [ 181.914121][ T4276] usb usb5-port1: attempt power cycle [ 183.791248][ T5500] sctp: [Deprecated]: syz.1.322 (pid 5500) Use of int in max_burst socket option. [ 183.791248][ T5500] Use struct sctp_assoc_value instead [ 184.360709][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 185.051019][ T5513] overlayfs: missing 'lowerdir' [ 185.632995][ T5512] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.326'. [ 186.183890][ T26] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 186.393491][ T26] usb 4-1: device descriptor read/64, error -71 [ 186.683457][ T26] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 186.863379][ T26] usb 4-1: device descriptor read/64, error -71 [ 186.987347][ T26] usb usb4-port1: attempt power cycle [ 187.425769][ T26] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 187.474445][ T26] usb 4-1: device descriptor read/8, error -71 [ 187.804979][ T5531] Could not find key with description: [syz] [ 187.845645][ T5531] process_request_key_err: No key [ 187.973757][ T5531] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 188.152932][ T5531] One or more global auth toks could not properly register; rc = [-2] [ 188.273415][ T5531] Error parsing options; rc = [-2] [ 188.333269][ T26] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 188.413968][ T26] usb 4-1: device descriptor read/8, error -71 [ 188.562021][ T26] usb usb4-port1: unable to enumerate USB device [ 189.160696][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'. [ 190.314274][ T5561] MPTCP: kernel_bind error, err=-98 [ 191.494891][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 191.506201][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 191.512230][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 191.667202][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.703402][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 191.709456][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 191.874429][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.899207][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.929640][ T26] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 191.968544][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 191.998669][ T26] usb 1-1: Product: syz [ 192.008287][ T26] usb 1-1: Manufacturer: syz [ 192.071407][ T26] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 193.784610][ T26] mos7840: probe of ttyUSB0 failed with error -71 [ 194.192206][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.199432][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.633403][ T26] usb 1-1: USB disconnect, device number 8 [ 194.641247][ T26] mos7840 1-1:1.0: device disconnected [ 195.530688][ T5593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.351'. [ 195.786392][ T5600] MPTCP: kernel_bind error, err=-98 [ 195.903235][ T26] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 196.073803][ T26] usb 1-1: device descriptor read/64, error -71 [ 196.383349][ T26] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 196.563343][ T26] usb 1-1: device descriptor read/64, error -71 [ 196.683393][ T26] usb usb1-port1: attempt power cycle [ 196.851839][ T5614] ip_tables: iptables: counters copy to user failed while replacing table [ 197.103360][ T26] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 197.173897][ T5616] sctp: [Deprecated]: syz.3.355 (pid 5616) Use of int in max_burst socket option. [ 197.173897][ T5616] Use struct sctp_assoc_value instead [ 197.194150][ T26] usb 1-1: device descriptor read/8, error -71 [ 197.473379][ T26] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 197.513758][ T26] usb 1-1: device descriptor read/8, error -71 [ 197.564332][ T4274] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 197.803481][ T26] usb usb1-port1: unable to enumerate USB device [ 198.785284][ T4274] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.034243][ T4274] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.059316][ T4274] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 199.107658][ T4274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 199.123980][ T4274] usb 4-1: Product: syz [ 199.138413][ T4274] usb 4-1: Manufacturer: syz [ 199.172214][ T4274] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 200.546181][ T5648] MPTCP: kernel_bind error, err=-98 [ 201.315876][ T5653] sctp: [Deprecated]: syz.0.368 (pid 5653) Use of int in max_burst socket option. [ 201.315876][ T5653] Use struct sctp_assoc_value instead [ 203.558336][ T4274] mos7840: probe of ttyUSB0 failed with error -71 [ 203.575862][ T4274] usb 4-1: USB disconnect, device number 15 [ 203.592068][ T4274] mos7840 4-1:1.0: device disconnected [ 205.460805][ T5697] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.381'. [ 211.092654][ T5742] MPTCP: kernel_bind error, err=-98 [ 211.161637][ T5746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.396'. [ 211.286761][ T5749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 211.679603][ T5751] lo speed is unknown, defaulting to 1000 [ 211.719757][ T5751] lo speed is unknown, defaulting to 1000 [ 211.778118][ T5751] lo speed is unknown, defaulting to 1000 [ 213.809278][ T5751] infiniband sz1: set active [ 213.816033][ T4320] lo speed is unknown, defaulting to 1000 [ 213.913311][ T5751] infiniband sz1: added lo [ 213.938214][ T5751] rdma_rxe: unable to create cq [ 213.984447][ T5751] infiniband sz1: Couldn't create ib_mad CQ [ 213.990914][ T5751] infiniband sz1: Couldn't open port 1 [ 216.267005][ T5751] RDS/IB: sz1: added [ 216.418611][ T5751] smc: adding ib device sz1 with port count 1 [ 216.470496][ T5751] smc: ib device sz1 port 1 has pnetid [ 216.550401][ T7] lo speed is unknown, defaulting to 1000 [ 216.611219][ T5751] lo speed is unknown, defaulting to 1000 [ 217.545216][ T5785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.409'. [ 217.811240][ T5751] lo speed is unknown, defaulting to 1000 [ 219.392247][ T4319] kernel write not supported for file /input/mice (pid: 4319 comm: kworker/1:5) [ 220.351923][ T5751] lo speed is unknown, defaulting to 1000 [ 221.459862][ T5804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.415'. [ 222.390265][ T5751] lo speed is unknown, defaulting to 1000 [ 223.403799][ T5751] lo speed is unknown, defaulting to 1000 [ 223.785330][ T5824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.421'. [ 228.336778][ T5859] MPTCP: kernel_bind error, err=-98 [ 228.445202][ T5861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.428'. [ 230.944204][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'. [ 236.354840][ T5919] MPTCP: kernel_bind error, err=-98 [ 242.822066][ T5982] MPTCP: kernel_bind error, err=-98 [ 246.289996][ T6012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.460'. [ 248.099746][ T6021] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 249.329696][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'. [ 250.944500][ T27] audit: type=1800 audit(1790419790.142:18): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.480" name="c_srate" dev="configfs" ino=41197 res=0 errno=0 [ 255.405309][ T6095] lo speed is unknown, defaulting to 1000 [ 255.625827][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.632217][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.014210][ T27] audit: type=1800 audit(1790419796.212:19): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="c_srate" dev="configfs" ino=41433 res=0 errno=0 [ 257.686285][ T6114] scsi_nl_rcv_msg: discarding partial skb [ 261.876593][ T6149] netlink: 'syz.0.508': attribute type 2 has an invalid length. [ 262.043288][ T4316] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 262.174019][ T6153] scsi_nl_rcv_msg: discarding partial skb [ 262.249249][ T4316] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 262.271693][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.309880][ T4316] usb 4-1: Product: syz [ 262.326641][ T4316] usb 4-1: Manufacturer: syz [ 262.351285][ T4316] usb 4-1: SerialNumber: syz [ 262.379760][ T4316] usb 4-1: config 0 descriptor?? [ 262.436069][ T4316] hub 4-1:0.0: bad descriptor, ignoring hub [ 262.462483][ T4316] hub: probe of 4-1:0.0 failed with error -5 [ 262.649327][ T4316] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 262.724348][ T4316] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.787759][ T27] audit: type=1800 audit(1790419801.982:20): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.510" name="c_srate" dev="configfs" ino=41556 res=0 errno=0 [ 262.866806][ T4316] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 262.994254][ T4316] usb 4-1: media controller created [ 263.395125][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.655588][ T6188] Mass Storage Function, version: 2009/09/11 [ 264.662178][ T6188] LUN: removable file: (no medium) [ 265.227102][ T4316] DVB: Unable to find symbol dib7000p_attach() [ 265.237011][ T4316] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 265.428227][ T4316] rc_core: IR keymap rc-dib0700-rc5 not found [ 265.443167][ T4316] Registered IR keymap rc-empty [ 265.448554][ T4316] dvb-usb: could not initialize remote control. [ 265.468494][ T4316] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 265.508505][ T4316] usb 4-1: USB disconnect, device number 16 [ 265.547007][ T4316] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 268.271380][ T6228] scsi_nl_rcv_msg: discarding partial skb [ 268.495247][ T6233] netlink: 'syz.0.523': attribute type 2 has an invalid length. [ 268.619694][ T27] audit: type=1800 audit(1790419807.812:21): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.522" name="c_srate" dev="configfs" ino=41797 res=0 errno=0 [ 273.817028][ T6286] scsi_nl_rcv_msg: discarding partial skb [ 275.231925][ T27] audit: type=1800 audit(1790419814.422:22): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.535" name="c_srate" dev="configfs" ino=41974 res=0 errno=0 [ 275.559903][ T6304] sctp: [Deprecated]: syz.3.539 (pid 6304) Use of int in max_burst socket option. [ 275.559903][ T6304] Use struct sctp_assoc_value instead [ 276.933259][ T4274] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 277.199964][ T4274] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.215269][ T4274] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 278.338774][ T4274] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 278.348790][ T4274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.357173][ T4274] usb 2-1: Product: syz [ 278.361364][ T4274] usb 2-1: Manufacturer: syz [ 278.366677][ T4274] usb 2-1: SerialNumber: syz [ 279.351120][ C0] usb 2-1: received EP1 urb->status = -71 [ 279.358407][ T4274] snd-usb-caiaq 2-1:1.0: unable to initialize device, too many streams. [ 279.370351][ T4274] snd-usb-caiaq 2-1:1.0: Unable to set up audio system (ret=-22) [ 279.379312][ T4274] usb 2-1: unable to init card! (ret=-22) [ 279.386474][ T4274] snd-usb-caiaq: probe of 2-1:1.0 failed with error -22 [ 279.395305][ T4274] usb 2-1: USB disconnect, device number 7 [ 279.446599][ T6339] scsi_nl_rcv_msg: discarding partial skb [ 281.349727][ T6355] sctp: [Deprecated]: syz.1.553 (pid 6355) Use of int in max_burst socket option. [ 281.349727][ T6355] Use struct sctp_assoc_value instead [ 284.741851][ T6385] scsi_nl_rcv_msg: discarding partial skb [ 284.832914][ T6388] FAULT_INJECTION: forcing a failure. [ 284.832914][ T6388] name failslab, interval 1, probability 0, space 0, times 0 [ 285.983669][ T6388] CPU: 1 PID: 6388 Comm: syz.2.561 Not tainted syzkaller #0 [ 285.991025][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.001110][ T6388] Call Trace: [ 286.004402][ T6388] [ 286.007341][ T6388] dump_stack_lvl+0x188/0x24e [ 286.012052][ T6388] ? show_regs_print_info+0x12/0x12 [ 286.017268][ T6388] ? load_image+0x410/0x410 [ 286.021802][ T6388] ? __lock_acquire+0x7c40/0x7c40 [ 286.026884][ T6388] should_fail_ex+0x390/0x4c0 [ 286.031593][ T6388] should_failslab+0x5/0x20 [ 286.036113][ T6388] slab_pre_alloc_hook+0x59/0x300 [ 286.041185][ T6388] kmem_cache_alloc_lru+0x49/0x2e0 [ 286.046318][ T6388] ? sock_alloc_inode+0x24/0xc0 [ 286.051200][ T6388] sock_alloc_inode+0x24/0xc0 [ 286.055920][ T6388] ? sockfs_init_fs_context+0xa0/0xa0 [ 286.061313][ T6388] new_inode_pseudo+0x5f/0x1c0 [ 286.066108][ T6388] __sock_create+0x129/0x940 [ 286.070724][ T6388] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 286.076736][ T6388] __sys_socket+0xc4/0x190 [ 286.081188][ T6388] __x64_sys_socket+0x76/0x80 [ 286.085887][ T6388] do_syscall_64+0x4c/0xa0 [ 286.090389][ T6388] ? clear_bhb_loop+0x60/0xb0 [ 286.095061][ T6388] ? clear_bhb_loop+0x60/0xb0 [ 286.099733][ T6388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.105640][ T6388] RIP: 0033:0x7f8290d9e159 [ 286.110055][ T6388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.129665][ T6388] RSP: 002b:00007f8291c29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 286.138088][ T6388] RAX: ffffffffffffffda RBX: 00007f8291025fa0 RCX: 00007f8290d9e159 [ 286.146064][ T6388] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 286.154056][ T6388] RBP: 00007f8290e3506b R08: 0000000000000000 R09: 0000000000000000 [ 286.162563][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.170538][ T6388] R13: 00007f8291026038 R14: 00007f8291025fa0 R15: 00007fff5d7bfaf8 [ 286.178523][ T6388] [ 286.237511][ T6397] lo speed is unknown, defaulting to 1000 [ 286.268198][ T6388] socket: no more sockets [ 286.457380][ T27] audit: type=1800 audit(1790419825.652:23): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.551" name="c_srate" dev="configfs" ino=40633 res=0 errno=0 [ 287.399943][ T6408] sctp: [Deprecated]: syz.2.567 (pid 6408) Use of int in max_burst socket option. [ 287.399943][ T6408] Use struct sctp_assoc_value instead [ 288.879154][ T6410] block device autoloading is deprecated and will be removed. [ 288.892290][ T6410] syz.4.568: attempt to access beyond end of device [ 288.892290][ T6410] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 289.819067][ T6428] scsi_nl_rcv_msg: discarding partial skb [ 289.933236][ T4320] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 290.123543][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 290.168844][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.368303][ T4320] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 290.547638][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.696851][ T6433] FAULT_INJECTION: forcing a failure. [ 290.696851][ T6433] name failslab, interval 1, probability 0, space 0, times 0 [ 290.759074][ T6433] CPU: 1 PID: 6433 Comm: syz.4.575 Not tainted syzkaller #0 [ 290.766507][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.776698][ T6433] Call Trace: [ 290.779996][ T6433] [ 290.782960][ T6433] dump_stack_lvl+0x188/0x24e [ 290.787907][ T6433] ? show_regs_print_info+0x12/0x12 [ 290.793139][ T6433] ? load_image+0x410/0x410 [ 290.797681][ T6433] ? __lock_acquire+0x7c40/0x7c40 [ 290.802755][ T6433] should_fail_ex+0x390/0x4c0 [ 290.807477][ T6433] should_failslab+0x5/0x20 [ 290.812097][ T6433] slab_pre_alloc_hook+0x59/0x300 [ 290.817155][ T6433] kmem_cache_alloc_lru+0x49/0x2e0 [ 290.822283][ T6433] ? sock_alloc_inode+0x24/0xc0 [ 290.827199][ T6433] sock_alloc_inode+0x24/0xc0 [ 290.831898][ T6433] ? sockfs_init_fs_context+0xa0/0xa0 [ 290.837811][ T6433] new_inode_pseudo+0x5f/0x1c0 [ 290.842682][ T6433] __sock_create+0x129/0x940 [ 290.847393][ T6433] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 290.853648][ T6433] __sys_socket+0xc4/0x190 [ 290.858073][ T6433] __x64_sys_socket+0x76/0x80 [ 290.862774][ T6433] do_syscall_64+0x4c/0xa0 [ 290.867232][ T6433] ? clear_bhb_loop+0x60/0xb0 [ 290.871936][ T6433] ? clear_bhb_loop+0x60/0xb0 [ 290.876796][ T6433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.882699][ T6433] RIP: 0033:0x7fbb3d79e159 [ 290.887204][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.906898][ T6433] RSP: 002b:00007fbb3b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 290.915402][ T6433] RAX: ffffffffffffffda RBX: 00007fbb3da25fa0 RCX: 00007fbb3d79e159 [ 290.923397][ T6433] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 290.931370][ T6433] RBP: 00007fbb3d83506b R08: 0000000000000000 R09: 0000000000000000 [ 290.939345][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.947575][ T6433] R13: 00007fbb3da26038 R14: 00007fbb3da25fa0 R15: 00007ffdb23082d8 [ 290.955909][ T6433] [ 290.978175][ T4320] usb 2-1: config 0 descriptor?? [ 290.990809][ T4320] hub 2-1:0.0: USB hub found [ 290.994457][ T6433] socket: no more sockets [ 292.070116][ T4320] hub 2-1:0.0: 1 port detected [ 293.797451][ T127] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 294.118890][ T127] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 294.136861][ T7] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 294.180137][ T127] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 294.334234][ T127] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 294.461261][ T127] usb 4-1: config 220 has no interface number 2 [ 294.558484][ T127] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 294.732332][ T127] usb 4-1: config 220 interface 0 has no altsetting 0 [ 294.810702][ T127] usb 4-1: config 220 interface 76 has no altsetting 0 [ 294.914180][ T127] usb 4-1: config 220 interface 1 has no altsetting 0 [ 295.021680][ T4317] usb 2-1: Failed to suspend device, error -71 [ 295.029472][ T127] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 295.198332][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.335773][ T127] usb 4-1: Product: syz [ 295.389309][ T127] usb 4-1: Manufacturer: syz [ 295.447741][ T127] usb 4-1: SerialNumber: syz [ 295.589425][ T7] usb 2-1: USB disconnect, device number 8 [ 296.184379][ T127] usb 4-1: can't set config #220, error -71 [ 296.221110][ T127] usb 4-1: USB disconnect, device number 17 [ 299.191157][ T6471] xt_connbytes: Forcing CT accounting to be enabled [ 299.283519][ T6471] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 300.608621][ T27] audit: type=1800 audit(1790419844.807:24): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.578" name="c_srate" dev="configfs" ino=40737 res=0 errno=0 [ 300.969162][ T6491] FAULT_INJECTION: forcing a failure. [ 300.969162][ T6491] name failslab, interval 1, probability 0, space 0, times 0 [ 301.051910][ T6492] ecryptfs_mount: kern_path() failed [ 301.066462][ T6492] Reading sb failed; rc = [-2] [ 301.133410][ T4319] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 301.247471][ T6491] CPU: 1 PID: 6491 Comm: syz.4.589 Not tainted syzkaller #0 [ 301.254814][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.264904][ T6491] Call Trace: [ 301.268234][ T6491] [ 301.271545][ T6491] dump_stack_lvl+0x188/0x24e [ 301.276256][ T6491] ? show_regs_print_info+0x12/0x12 [ 301.281492][ T6491] ? load_image+0x410/0x410 [ 301.286046][ T6491] ? __might_sleep+0xd0/0xd0 [ 301.290646][ T6491] ? __lock_acquire+0x7c40/0x7c40 [ 301.295688][ T6491] ? lock_chain_count+0x20/0x20 [ 301.300555][ T6491] should_fail_ex+0x390/0x4c0 [ 301.305264][ T6491] should_failslab+0x5/0x20 [ 301.309786][ T6491] slab_pre_alloc_hook+0x59/0x300 [ 301.314829][ T6491] kmem_cache_alloc+0x56/0x2f0 [ 301.319603][ T6491] ? security_inode_alloc+0x30/0x110 [ 301.324907][ T6491] security_inode_alloc+0x30/0x110 [ 301.330038][ T6491] inode_init_always+0x910/0xc90 [ 301.334995][ T6491] new_inode_pseudo+0x91/0x1c0 [ 301.339779][ T6491] __sock_create+0x129/0x940 [ 301.344427][ T6491] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 301.350437][ T6491] __sys_socket+0xc4/0x190 [ 301.354890][ T6491] __x64_sys_socket+0x76/0x80 [ 301.359606][ T6491] do_syscall_64+0x4c/0xa0 [ 301.364133][ T6491] ? clear_bhb_loop+0x60/0xb0 [ 301.368835][ T6491] ? clear_bhb_loop+0x60/0xb0 [ 301.373567][ T6491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.379489][ T6491] RIP: 0033:0x7fbb3d79e159 [ 301.383920][ T6491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.403548][ T6491] RSP: 002b:00007fbb3b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 301.411977][ T6491] RAX: ffffffffffffffda RBX: 00007fbb3da25fa0 RCX: 00007fbb3d79e159 [ 301.419973][ T6491] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 301.427973][ T6491] RBP: 00007fbb3d83506b R08: 0000000000000000 R09: 0000000000000000 [ 301.436004][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.443995][ T6491] R13: 00007fbb3da26038 R14: 00007fbb3da25fa0 R15: 00007ffdb23082d8 [ 301.452000][ T6491] [ 301.507550][ T4319] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 301.552099][ T4319] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 301.702040][ T4319] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 301.842975][ T4319] usb 1-1: config 220 has no interface number 2 [ 301.891834][ T4319] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 302.001535][ T4319] usb 1-1: config 220 interface 0 has no altsetting 0 [ 302.079093][ T4319] usb 1-1: config 220 interface 76 has no altsetting 0 [ 302.144877][ T4319] usb 1-1: config 220 interface 1 has no altsetting 0 [ 302.225452][ T4319] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 302.306520][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.365295][ T4319] usb 1-1: Product: syz [ 302.398989][ T4319] usb 1-1: Manufacturer: syz [ 302.431866][ T4319] usb 1-1: SerialNumber: syz [ 302.583268][ T6491] socket: no more sockets [ 302.746095][ T4319] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 302.752943][ T4319] usb 1-1: No valid video chain found. [ 302.772394][ T4319] usb 1-1: selecting invalid altsetting 0 [ 302.845091][ T4319] usb 1-1: selecting invalid altsetting 0 [ 302.850890][ T4319] usbtest: probe of 1-1:220.1 failed with error -22 [ 302.941623][ T4319] usb 1-1: USB disconnect, device number 13 [ 306.439619][ T6521] zero sized request [ 307.647073][ T6524] 9pnet: Could not find request transport: fd"rfdno=ūCyfϛLLscmfγk=20~x(VNSet߭Ft [ 308.100424][ T27] audit: type=1800 audit(1790419852.297:25): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.600" name="c_srate" dev="configfs" ino=42547 res=0 errno=0 [ 310.636712][ T6551] FAULT_INJECTION: forcing a failure. [ 310.636712][ T6551] name failslab, interval 1, probability 0, space 0, times 0 [ 310.663271][ T6551] CPU: 0 PID: 6551 Comm: syz.0.604 Not tainted syzkaller #0 [ 310.670612][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.680697][ T6551] Call Trace: [ 310.683992][ T6551] [ 310.686935][ T6551] dump_stack_lvl+0x188/0x24e [ 310.691645][ T6551] ? show_regs_print_info+0x12/0x12 [ 310.696872][ T6551] ? load_image+0x410/0x410 [ 310.701410][ T6551] ? __lock_acquire+0x7c40/0x7c40 [ 310.706465][ T6551] should_fail_ex+0x390/0x4c0 [ 310.711186][ T6551] should_failslab+0x5/0x20 [ 310.715794][ T6551] slab_pre_alloc_hook+0x59/0x300 [ 310.720834][ T6551] kmem_cache_alloc_lru+0x49/0x2e0 [ 310.725945][ T6551] ? sock_alloc_inode+0x24/0xc0 [ 310.730794][ T6551] sock_alloc_inode+0x24/0xc0 [ 310.735465][ T6551] ? sockfs_init_fs_context+0xa0/0xa0 [ 310.740832][ T6551] new_inode_pseudo+0x5f/0x1c0 [ 310.745596][ T6551] __sock_create+0x129/0x940 [ 310.750180][ T6551] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 310.756161][ T6551] __sys_socket+0xc4/0x190 [ 310.760578][ T6551] __x64_sys_socket+0x76/0x80 [ 310.765272][ T6551] do_syscall_64+0x4c/0xa0 [ 310.769685][ T6551] ? clear_bhb_loop+0x60/0xb0 [ 310.774361][ T6551] ? clear_bhb_loop+0x60/0xb0 [ 310.779036][ T6551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.784935][ T6551] RIP: 0033:0x7f559cb9e159 [ 310.789348][ T6551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.808951][ T6551] RSP: 002b:00007f559dacc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 310.817385][ T6551] RAX: ffffffffffffffda RBX: 00007f559ce25fa0 RCX: 00007f559cb9e159 [ 310.825355][ T6551] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 310.833321][ T6551] RBP: 00007f559cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 310.841322][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.849284][ T6551] R13: 00007f559ce26038 R14: 00007f559ce25fa0 R15: 00007fff6e9ddc68 [ 310.857299][ T6551] [ 310.868875][ T6551] socket: no more sockets [ 311.250536][ T6572] zero sized request [ 311.973681][ T4274] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 312.997714][ T4274] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 313.034676][ T27] audit: type=1800 audit(1790419862.241:26): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.613" name="c_srate" dev="configfs" ino=40958 res=0 errno=0 [ 313.268354][ T4274] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 313.277643][ T4274] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 313.288092][ T4274] usb 3-1: config 220 has no interface number 2 [ 313.295155][ T4274] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 313.311701][ T4274] usb 3-1: config 220 interface 0 has no altsetting 0 [ 313.319159][ T4274] usb 3-1: config 220 interface 76 has no altsetting 0 [ 313.326173][ T4274] usb 3-1: config 220 interface 1 has no altsetting 0 [ 313.344221][ T4274] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 313.357680][ T4274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.373201][ T4274] usb 3-1: Product: syz [ 313.377413][ T4274] usb 3-1: Manufacturer: syz [ 313.382104][ T4274] usb 3-1: SerialNumber: syz [ 313.991540][ T4274] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 314.013289][ T4274] usb 3-1: No valid video chain found. [ 314.031147][ T4274] usb 3-1: selecting invalid altsetting 0 [ 314.038420][ T6593] 9pnet: Could not find request transport: fd"rfdno=ūCyfϛLLscmfγk=20~x(VNSet߭Ft [ 314.066706][ T6598] FAULT_INJECTION: forcing a failure. [ 314.066706][ T6598] name failslab, interval 1, probability 0, space 0, times 0 [ 314.081220][ T4274] usb 3-1: selecting invalid altsetting 0 [ 314.812405][ T6598] CPU: 0 PID: 6598 Comm: syz.1.618 Not tainted syzkaller #0 [ 314.819751][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.829826][ T6598] Call Trace: [ 314.833111][ T6598] [ 314.836062][ T6598] dump_stack_lvl+0x188/0x24e [ 314.841011][ T6598] ? show_regs_print_info+0x12/0x12 [ 314.847061][ T6598] ? load_image+0x410/0x410 [ 314.851808][ T6598] ? __might_sleep+0xd0/0xd0 [ 314.856467][ T6598] ? __lock_acquire+0x7c40/0x7c40 [ 314.861501][ T6598] should_fail_ex+0x390/0x4c0 [ 314.866190][ T6598] should_failslab+0x5/0x20 [ 314.870712][ T6598] slab_pre_alloc_hook+0x59/0x300 [ 314.875754][ T6598] kmem_cache_alloc+0x56/0x2f0 [ 314.880599][ T6598] ? security_inode_alloc+0x30/0x110 [ 314.885883][ T6598] security_inode_alloc+0x30/0x110 [ 314.891039][ T6598] inode_init_always+0x910/0xc90 [ 314.895977][ T6598] new_inode_pseudo+0x91/0x1c0 [ 314.900742][ T6598] __sock_create+0x129/0x940 [ 314.905862][ T6598] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 314.911850][ T6598] __sys_socket+0xc4/0x190 [ 314.916458][ T6598] __x64_sys_socket+0x76/0x80 [ 314.922267][ T6598] do_syscall_64+0x4c/0xa0 [ 314.926686][ T6598] ? clear_bhb_loop+0x60/0xb0 [ 314.931445][ T6598] ? clear_bhb_loop+0x60/0xb0 [ 314.936204][ T6598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.942208][ T6598] RIP: 0033:0x7fc7e779e159 [ 314.946619][ T6598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.966317][ T6598] RSP: 002b:00007fc7e8741028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 314.974776][ T6598] RAX: ffffffffffffffda RBX: 00007fc7e7a25fa0 RCX: 00007fc7e779e159 [ 314.982743][ T6598] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 314.990726][ T6598] RBP: 00007fc7e783506b R08: 0000000000000000 R09: 0000000000000000 [ 314.998792][ T6598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.006805][ T6598] R13: 00007fc7e7a26038 R14: 00007fc7e7a25fa0 R15: 00007ffe896b2238 [ 315.014892][ T6598] [ 315.033358][ T4274] usbtest: probe of 3-1:220.1 failed with error -22 [ 315.049230][ T4274] usb 3-1: USB disconnect, device number 15 [ 315.163253][ T6598] socket: no more sockets [ 315.493352][ T6606] zero sized request [ 315.695443][ T6611] ecryptfs_mount: kern_path() failed [ 317.066887][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.073872][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.171822][ T6611] Reading sb failed; rc = [-2] [ 317.222294][ T6616] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.623'. [ 317.555199][ T27] audit: type=1800 audit(1790419866.761:27): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.626" name="c_srate" dev="configfs" ino=42691 res=0 errno=0 [ 320.662204][ T6646] FAULT_INJECTION: forcing a failure. [ 320.662204][ T6646] name failslab, interval 1, probability 0, space 0, times 0 [ 320.675590][ T6646] CPU: 0 PID: 6646 Comm: syz.2.632 Not tainted syzkaller #0 [ 320.683205][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.693293][ T6646] Call Trace: [ 320.696589][ T6646] [ 320.700560][ T6646] dump_stack_lvl+0x188/0x24e [ 320.705448][ T6646] ? show_regs_print_info+0x12/0x12 [ 320.710674][ T6646] ? load_image+0x410/0x410 [ 320.715205][ T6646] ? __might_sleep+0xd0/0xd0 [ 320.719819][ T6646] ? __lock_acquire+0x7c40/0x7c40 [ 320.725050][ T6646] should_fail_ex+0x390/0x4c0 [ 320.729762][ T6646] should_failslab+0x5/0x20 [ 320.734286][ T6646] slab_pre_alloc_hook+0x59/0x300 [ 320.739335][ T6646] kmem_cache_alloc+0x56/0x2f0 [ 320.744235][ T6646] ? security_inode_alloc+0x30/0x110 [ 320.749552][ T6646] security_inode_alloc+0x30/0x110 [ 320.754688][ T6646] inode_init_always+0x910/0xc90 [ 320.759653][ T6646] new_inode_pseudo+0x91/0x1c0 [ 320.764445][ T6646] __sock_create+0x129/0x940 [ 320.769059][ T6646] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.775073][ T6646] __sys_socket+0xc4/0x190 [ 320.779522][ T6646] __x64_sys_socket+0x76/0x80 [ 320.784228][ T6646] do_syscall_64+0x4c/0xa0 [ 320.788674][ T6646] ? clear_bhb_loop+0x60/0xb0 [ 320.793370][ T6646] ? clear_bhb_loop+0x60/0xb0 [ 320.798067][ T6646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.803985][ T6646] RIP: 0033:0x7f8290d9e159 [ 320.808419][ T6646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.828055][ T6646] RSP: 002b:00007f8291c29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 320.836496][ T6646] RAX: ffffffffffffffda RBX: 00007f8291025fa0 RCX: 00007f8290d9e159 [ 320.844524][ T6646] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 320.852516][ T6646] RBP: 00007f8290e3506b R08: 0000000000000000 R09: 0000000000000000 [ 320.860507][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.868530][ T6646] R13: 00007f8291026038 R14: 00007f8291025fa0 R15: 00007fff5d7bfaf8 [ 320.876537][ T6646] [ 320.882126][ T6646] socket: no more sockets [ 321.989392][ T6661] netlink: 'syz.2.634': attribute type 2 has an invalid length. [ 322.021364][ T6648] 9pnet: Could not find request transport: fd"rfdno=ūCyfϛLLscmfγk=20~x(VNSet߭Ft [ 322.456034][ T6671] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.638'. [ 323.859186][ T6682] infiniband sz1: set active [ 323.882489][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 323.900807][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.909604][ T6682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.453381][ T4320] lo speed is unknown, defaulting to 1000 [ 324.702337][ T27] audit: type=1800 audit(1790419878.898:28): pid=6685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.641" name="c_srate" dev="configfs" ino=43129 res=0 errno=0 [ 326.031428][ T27] audit: type=1326 audit(1790419885.224:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8290d9e159 code=0x7ffc0000 [ 326.112179][ T4318] kernel write not supported for file /input/mice (pid: 4318 comm: kworker/0:5) [ 326.883634][ T27] audit: type=1326 audit(1790419886.084:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8290d9e159 code=0x7ffc0000 [ 326.942036][ T27] audit: type=1326 audit(1790419886.084:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8290d9e159 code=0x7ffc0000 [ 326.973255][ T4320] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 327.173842][ T27] audit: type=1326 audit(1790419886.084:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8290d5e98e code=0x7ffc0000 [ 327.204514][ T27] audit: type=1326 audit(1790419886.084:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8290d9ddeb code=0x7ffc0000 [ 327.259085][ T27] audit: type=1326 audit(1790419886.084:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8290d9ddeb code=0x7ffc0000 [ 327.283859][ T27] audit: type=1326 audit(1790419886.084:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8290d9ddeb code=0x7ffc0000 [ 327.311032][ T27] audit: type=1326 audit(1790419886.084:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8290d9ddeb code=0x7ffc0000 [ 327.335136][ T4318] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 327.353875][ T27] audit: type=1326 audit(1790419886.544:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.645" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8290d9ddeb code=0x7ffc0000 [ 327.384955][ T4320] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 327.402636][ T4320] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 327.434599][ T4320] usb 2-1: config 220 has no interface number 2 [ 327.440931][ T4320] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 327.473852][ T4320] usb 2-1: config 220 interface 0 has no altsetting 0 [ 327.480678][ T4320] usb 2-1: config 220 interface 76 has no altsetting 0 [ 327.532180][ T4320] usb 2-1: config 220 interface 1 has no altsetting 0 [ 327.568983][ T4320] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 327.584184][ T4318] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 327.636221][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.646253][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.693547][ T4318] usb 3-1: Product: syz [ 327.697894][ T4320] usb 2-1: Product: syz [ 327.702151][ T4320] usb 2-1: Manufacturer: syz [ 327.708035][ T4318] usb 3-1: Manufacturer: syz [ 327.733214][ T4318] usb 3-1: SerialNumber: syz [ 327.738444][ T4320] usb 2-1: SerialNumber: syz [ 327.857698][ T4318] usb 3-1: USB2VGA dongle found at address 16 [ 328.059607][ T4320] usb 2-1: selecting invalid altsetting 0 [ 328.190784][ T4320] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 328.304097][ T4320] usb 2-1: No valid video chain found. [ 328.399408][ T4318] usb 3-1: Allocated 8 output buffers [ 328.685126][ T4320] usb 2-1: selecting invalid altsetting 0 [ 328.690978][ T4320] usbtest: probe of 2-1:220.1 failed with error -22 [ 328.844244][ T4320] usb 2-1: USB disconnect, device number 9 [ 330.524675][ T6740] infiniband sz1: set active [ 330.546635][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 330.563981][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.572741][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.122991][ T4320] lo speed is unknown, defaulting to 1000 [ 332.715803][ T4318] usb 3-1: Failed to early initialize device [ 332.802974][ T4318] usb 3-1: USB disconnect, device number 16 [ 333.887348][ T6762] FAULT_INJECTION: forcing a failure. [ 333.887348][ T6762] name failslab, interval 1, probability 0, space 0, times 0 [ 333.944302][ T6762] CPU: 1 PID: 6762 Comm: syz.4.654 Not tainted syzkaller #0 [ 333.951648][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.961728][ T6762] Call Trace: [ 333.965048][ T6762] [ 333.968004][ T6762] dump_stack_lvl+0x188/0x24e [ 333.972720][ T6762] ? show_regs_print_info+0x12/0x12 [ 333.978059][ T6762] ? load_image+0x410/0x410 [ 333.982591][ T6762] ? __lock_acquire+0x7c40/0x7c40 [ 333.987646][ T6762] should_fail_ex+0x390/0x4c0 [ 333.992345][ T6762] should_failslab+0x5/0x20 [ 333.996895][ T6762] slab_pre_alloc_hook+0x59/0x300 [ 334.001940][ T6762] kmem_cache_alloc_lru+0x49/0x2e0 [ 334.007060][ T6762] ? sock_alloc_inode+0x24/0xc0 [ 334.011919][ T6762] sock_alloc_inode+0x24/0xc0 [ 334.016601][ T6762] ? sockfs_init_fs_context+0xa0/0xa0 [ 334.021975][ T6762] new_inode_pseudo+0x5f/0x1c0 [ 334.026759][ T6762] __sock_create+0x129/0x940 [ 334.031358][ T6762] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 334.037349][ T6762] __sys_socket+0xc4/0x190 [ 334.041771][ T6762] __x64_sys_socket+0x76/0x80 [ 334.046450][ T6762] do_syscall_64+0x4c/0xa0 [ 334.050890][ T6762] ? clear_bhb_loop+0x60/0xb0 [ 334.055586][ T6762] ? clear_bhb_loop+0x60/0xb0 [ 334.060369][ T6762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.066288][ T6762] RIP: 0033:0x7fbb3d79e159 [ 334.070715][ T6762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.090433][ T6762] RSP: 002b:00007fbb3b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 334.098849][ T6762] RAX: ffffffffffffffda RBX: 00007fbb3da25fa0 RCX: 00007fbb3d79e159 [ 334.107891][ T6762] RDX: 0000000000000300 RSI: 000000000000000a RDI: 0000000000000011 [ 334.115867][ T6762] RBP: 00007fbb3d83506b R08: 0000000000000000 R09: 0000000000000000 [ 334.123839][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.131807][ T6762] R13: 00007fbb3da26038 R14: 00007fbb3da25fa0 R15: 00007ffdb23082d8 [ 334.139826][ T6762] [ 334.343483][ T6762] socket: no more sockets [ 334.463342][ T4318] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 334.515311][ T6754] 9pnet: Could not find request transport: fd"rfdno=ūCyfϛLLscmfγk=20~x(VNSet߭Ft [ 334.753755][ T4318] usb 5-1: device descriptor read/64, error -71 [ 334.850677][ T4316] kernel write not supported for file /input/mice (pid: 4316 comm: kworker/1:4) [ 334.883494][ T4319] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 335.645951][ T4318] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 335.665121][ T4319] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 335.804187][ T4319] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 335.823222][ T4318] usb 5-1: device descriptor read/64, error -71 [ 335.879393][ T4319] usb 3-1: config 220 has no interface number 2 [ 335.904416][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 335.904429][ T27] audit: type=1800 audit(1790419900.107:72): pid=6785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.663" name="c_srate" dev="configfs" ino=42866 res=0 errno=0 [ 335.925802][ T4319] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 336.078009][ T4319] usb 3-1: config 220 interface 0 has no altsetting 0 [ 336.130491][ T4319] usb 3-1: config 220 interface 76 has no altsetting 0 [ 336.211963][ T4319] usb 3-1: config 220 interface 1 has no altsetting 0 [ 336.396243][ T4319] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 336.451015][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.463268][ T4319] usb 3-1: Product: syz [ 336.468536][ T4319] usb 3-1: Manufacturer: syz [ 336.483189][ T4319] usb 3-1: SerialNumber: syz [ 336.553451][ T4318] usb usb5-port1: attempt power cycle [ 336.983279][ T4319] usb 3-1: selecting invalid altsetting 0 [ 336.993223][ T4318] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 337.511921][ T4319] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 337.520773][ T4319] usb 3-1: No valid video chain found. [ 337.555809][ T4318] usb 5-1: device descriptor read/8, error -71 [ 338.078199][ T6798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.098849][ T6798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.107446][ T6798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 338.664564][ T4319] usb 3-1: selecting invalid altsetting 0 [ 338.694068][ T4319] usbtest: probe of 3-1:220.1 failed with error -22 [ 338.743489][ T4319] usb 3-1: USB disconnect, device number 17 [ 341.751862][ T6821] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 342.717107][ T4319] kernel write not supported for file /input/mice (pid: 4319 comm: kworker/1:5) [ 345.036518][ T27] audit: type=1800 audit(1790419909.227:73): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.678" name="c_srate" dev="configfs" ino=42942 res=0 errno=0 [ 345.122466][ T6837] FAULT_INJECTION: forcing a failure. [ 345.122466][ T6837] name failslab, interval 1, probability 0, space 0, times 0 [ 345.140564][ T6837] CPU: 0 PID: 6837 Comm: syz.4.680 Not tainted syzkaller #0 [ 345.147896][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.157971][ T6837] Call Trace: [ 345.161274][ T6837] [ 345.164213][ T6837] dump_stack_lvl+0x188/0x24e [ 345.168911][ T6837] ? show_regs_print_info+0x12/0x12 [ 345.174170][ T6837] ? load_image+0x410/0x410 [ 345.178693][ T6837] ? __might_sleep+0xd0/0xd0 [ 345.183291][ T6837] ? __lock_acquire+0x7c40/0x7c40 [ 345.188419][ T6837] should_fail_ex+0x390/0x4c0 [ 345.193217][ T6837] should_failslab+0x5/0x20 [ 345.197760][ T6837] slab_pre_alloc_hook+0x59/0x300 [ 345.202794][ T6837] kmem_cache_alloc+0x56/0x2f0 [ 345.207577][ T6837] ? security_inode_alloc+0x30/0x110 [ 345.212883][ T6837] security_inode_alloc+0x30/0x110 [ 345.218087][ T6837] inode_init_always+0x910/0xc90 [ 345.223691][ T6837] new_inode_pseudo+0x91/0x1c0 [ 345.228657][ T6837] __sock_create+0x129/0x940 [ 345.233263][ T6837] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 345.239251][ T6837] __sys_socket+0xc4/0x190 [ 345.243670][ T6837] __x64_sys_socket+0x76/0x80 [ 345.248359][ T6837] do_syscall_64+0x4c/0xa0 [ 345.252795][ T6837] ? clear_bhb_loop+0x60/0xb0 [ 345.257499][ T6837] ? clear_bhb_loop+0x60/0xb0 [ 345.262181][ T6837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.268108][ T6837] RIP: 0033:0x7fbb3d79e159 [ 345.272517][ T6837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.292729][ T6837] RSP: 002b:00007fbb3b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 345.301160][ T6837] RAX: ffffffffffffffda RBX: 00007fbb3da25fa0 RCX: 00007fbb3d79e159 [ 345.309140][ T6837] RDX: 0000000000000300 RSI: 000000000000000a RDI: 0000000000000011 [ 345.317124][ T6837] RBP: 00007fbb3d83506b R08: 0000000000000000 R09: 0000000000000000 [ 345.325089][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.333054][ T6837] R13: 00007fbb3da26038 R14: 00007fbb3da25fa0 R15: 00007ffdb23082d8 [ 345.341039][ T6837] [ 345.345486][ T4318] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 345.363215][ T6837] socket: no more sockets [ 345.538039][ T4318] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 345.653296][ T7] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 347.399757][ T4318] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 347.463928][ T4318] usb 1-1: config 220 has no interface number 2 [ 347.478395][ T4318] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 347.495625][ T4318] usb 1-1: config 220 interface 0 has no altsetting 0 [ 347.514440][ T4318] usb 1-1: config 220 interface 76 has no altsetting 0 [ 347.609305][ T7] usb 5-1: device descriptor read/64, error -71 [ 347.620728][ T4318] usb 1-1: config 220 interface 1 has no altsetting 0 [ 347.649049][ T4318] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 347.663258][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.671279][ T4318] usb 1-1: Product: syz [ 347.757864][ T4318] usb 1-1: Manufacturer: syz [ 347.762595][ T4318] usb 1-1: SerialNumber: syz [ 347.913612][ T7] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 348.114196][ T7] usb 5-1: device descriptor read/64, error -71 [ 348.290865][ T4318] usb 1-1: can't set config #220, error -71 [ 348.298643][ T7] usb usb5-port1: attempt power cycle [ 348.320298][ T4318] usb 1-1: USB disconnect, device number 14 [ 349.274551][ T6861] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 351.501828][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 351.519352][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.528238][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.400481][ T6883] 9pnet_fd: Insufficient options for proto=fd [ 355.213037][ T27] audit: type=1800 audit(1790419919.407:74): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.691" name="c_srate" dev="configfs" ino=43405 res=0 errno=0 [ 356.863210][ T127] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 357.139122][ T127] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 357.421730][ T6904] ================================================================== [ 357.429833][ T6904] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 357.437045][ T6904] Read of size 8 at addr ffff888029dd0a18 by task syz.3.698/6904 [ 357.444765][ T6904] [ 357.447097][ T6904] CPU: 0 PID: 6904 Comm: syz.3.698 Not tainted syzkaller #0 [ 357.454381][ T6904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.464436][ T6904] Call Trace: [ 357.467716][ T6904] [ 357.470660][ T6904] dump_stack_lvl+0x188/0x24e [ 357.475349][ T6904] ? read_lock_is_recursive+0x10/0x10 [ 357.480731][ T6904] ? show_regs_print_info+0x12/0x12 [ 357.485943][ T6904] ? load_image+0x410/0x410 [ 357.490471][ T6904] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 357.495938][ T6904] ? __virt_addr_valid+0x188/0x540 [ 357.501055][ T6904] ? __virt_addr_valid+0x467/0x540 [ 357.506174][ T6904] ? dvb_device_open+0xc5/0x360 [ 357.511026][ T6904] print_report+0xa8/0x210 [ 357.515456][ T6904] kasan_report+0x10b/0x140 [ 357.519970][ T6904] ? dvb_device_open+0xc5/0x360 [ 357.524836][ T6904] dvb_device_open+0xc5/0x360 [ 357.529517][ T6904] chrdev_open+0x585/0x5f0 [ 357.533950][ T6904] ? cd_forget+0x160/0x160 [ 357.538373][ T6904] ? fsnotify_perm+0x39b/0x550 [ 357.543144][ T6904] ? cd_forget+0x160/0x160 [ 357.547577][ T6904] do_dentry_open+0x7dd/0x10b0 [ 357.552358][ T6904] path_openat+0x2674/0x2f10 [ 357.556960][ T6904] ? verify_lock_unused+0x140/0x140 [ 357.562168][ T6904] ? do_sys_openat2+0xdd/0x4f0 [ 357.566953][ T6904] ? do_filp_open+0x420/0x420 [ 357.571640][ T6904] do_filp_open+0x1ee/0x420 [ 357.576330][ T6904] ? vfs_tmpfile+0x470/0x470 [ 357.580932][ T6904] ? _raw_spin_unlock+0x24/0x40 [ 357.585793][ T6904] ? alloc_fd+0x590/0x640 [ 357.590132][ T6904] do_sys_openat2+0x14b/0x4f0 [ 357.594820][ T6904] ? do_sys_open+0xe0/0xe0 [ 357.599241][ T6904] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 357.605232][ T6904] ? lock_chain_count+0x20/0x20 [ 357.610094][ T6904] __x64_sys_openat+0x135/0x160 [ 357.614966][ T6904] do_syscall_64+0x4c/0xa0 [ 357.619581][ T6904] ? clear_bhb_loop+0x60/0xb0 [ 357.624276][ T6904] ? clear_bhb_loop+0x60/0xb0 [ 357.628971][ T6904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.634889][ T6904] RIP: 0033:0x7f79d8f5e98e [ 357.639309][ T6904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 357.658939][ T6904] RSP: 002b:00007f79d9dfeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 357.667383][ T6904] RAX: ffffffffffffffda RBX: 00007f79d9dff6c0 RCX: 00007f79d8f5e98e [ 357.675373][ T6904] RDX: 0000000000040002 RSI: 00007f79d9dfec00 RDI: ffffffffffffff9c [ 357.683456][ T6904] RBP: 00007f79d9dfec00 R08: 0000000000000000 R09: 0000000000000000 [ 357.691434][ T6904] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 357.699419][ T6904] R13: 00007f79d9226218 R14: 00007f79d9226180 R15: 00007ffdf3f0a3f8 [ 357.707514][ T6904] [ 357.710537][ T6904] [ 357.712863][ T6904] Allocated by task 1: [ 357.716923][ T6904] kasan_set_track+0x4b/0x70 [ 357.721523][ T6904] __kasan_kmalloc+0x8e/0xa0 [ 357.726122][ T6904] dvb_register_device+0x305/0x1dc0 [ 357.731424][ T6904] dvb_register_frontend+0x629/0x900 [ 357.736717][ T6904] vidtv_bridge_probe+0x9cf/0xf50 [ 357.741746][ T6904] platform_probe+0x137/0x1c0 [ 357.746430][ T6904] really_probe+0x24a/0xb40 [ 357.750953][ T6904] __driver_probe_device+0x1f5/0x390 [ 357.756272][ T6904] driver_probe_device+0x4f/0x420 [ 357.761442][ T6904] __driver_attach+0x43d/0x6c0 [ 357.766218][ T6904] bus_for_each_dev+0x182/0x1f0 [ 357.771072][ T6904] bus_add_driver+0x324/0x5d0 [ 357.775759][ T6904] driver_register+0x32d/0x430 [ 357.780535][ T6904] vidtv_bridge_init+0x45/0x73 [ 357.785305][ T6904] do_one_initcall+0x257/0x800 [ 357.790071][ T6904] do_initcall_level+0x13d/0x1ed [ 357.795019][ T6904] do_initcalls+0x4b/0x8a [ 357.799349][ T6904] kernel_init_freeable+0x401/0x5ab [ 357.804712][ T6904] kernel_init+0x19/0x1b0 [ 357.809495][ T6904] ret_from_fork+0x1f/0x30 [ 357.813930][ T6904] [ 357.816254][ T6904] Freed by task 6861: [ 357.820231][ T6904] kasan_set_track+0x4b/0x70 [ 357.824833][ T6904] kasan_save_free_info+0x27/0x40 [ 357.829863][ T6904] ____kasan_slab_free+0x126/0x1f0 [ 357.834988][ T6904] slab_free_freelist_hook+0x133/0x1b0 [ 357.840459][ T6904] __kmem_cache_free+0xb6/0x200 [ 357.845325][ T6904] dvb_device_open+0x2d2/0x360 [ 357.850096][ T6904] chrdev_open+0x585/0x5f0 [ 357.854523][ T6904] do_dentry_open+0x7dd/0x10b0 [ 357.859305][ T6904] path_openat+0x2674/0x2f10 [ 357.863899][ T6904] do_filp_open+0x1ee/0x420 [ 357.868401][ T6904] do_sys_openat2+0x14b/0x4f0 [ 357.873519][ T6904] __x64_sys_openat+0x135/0x160 [ 357.878387][ T6904] do_syscall_64+0x4c/0xa0 [ 357.882799][ T6904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.888863][ T6904] [ 357.891175][ T6904] The buggy address belongs to the object at ffff888029dd0a00 [ 357.891175][ T6904] which belongs to the cache kmalloc-256 of size 256 [ 357.905217][ T6904] The buggy address is located 24 bytes inside of [ 357.905217][ T6904] 256-byte region [ffff888029dd0a00, ffff888029dd0b00) [ 357.918390][ T6904] [ 357.920698][ T6904] The buggy address belongs to the physical page: [ 357.927103][ T6904] page:ffffea0000a77400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29dd0 [ 357.937241][ T6904] head:ffffea0000a77400 order:1 compound_mapcount:0 compound_pincount:0 [ 357.945555][ T6904] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 357.953529][ T6904] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 357.962720][ T6904] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 357.971289][ T6904] page dumped because: kasan: bad access detected [ 357.977719][ T6904] page_owner tracks the page as allocated [ 357.983420][ T6904] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15915663584, free_ts 0 [ 358.003138][ T6904] post_alloc_hook+0x173/0x1a0 [ 358.007902][ T6904] get_page_from_freelist+0x206b/0x2180 [ 358.013441][ T6904] __alloc_pages+0x1ec/0x4f0 [ 358.018024][ T6904] alloc_page_interleave+0x24/0x1e0 [ 358.023227][ T6904] alloc_slab_page+0x5d/0x180 [ 358.027891][ T6904] new_slab+0x87/0x2d0 [ 358.031953][ T6904] ___slab_alloc+0xbc5/0x1240 [ 358.036620][ T6904] __kmem_cache_alloc_node+0x126/0x270 [ 358.042072][ T6904] kmalloc_trace+0x26/0xe0 [ 358.046474][ T6904] bus_add_driver+0xdc/0x5d0 [ 358.051051][ T6904] driver_register+0x32d/0x430 [ 358.055805][ T6904] usb_register_driver+0x1a6/0x350 [ 358.060924][ T6904] do_one_initcall+0x257/0x800 [ 358.065864][ T6904] do_initcall_level+0x13d/0x1ed [ 358.071310][ T6904] do_initcalls+0x4b/0x8a [ 358.075627][ T6904] kernel_init_freeable+0x401/0x5ab [ 358.080811][ T6904] page_owner free stack trace missing [ 358.086164][ T6904] [ 358.088473][ T6904] Memory state around the buggy address: [ 358.094086][ T6904] ffff888029dd0900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 358.102219][ T6904] ffff888029dd0980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 358.110266][ T6904] >ffff888029dd0a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 358.118399][ T6904] ^ [ 358.123234][ T6904] ffff888029dd0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 358.131281][ T6904] ffff888029dd0b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 358.139328][ T6904] ================================================================== [ 358.147553][ T6904] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 358.154764][ T6904] CPU: 0 PID: 6904 Comm: syz.3.698 Not tainted syzkaller #0 [ 358.162070][ T6904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.172134][ T6904] Call Trace: [ 358.175422][ T6904] [ 358.178365][ T6904] dump_stack_lvl+0x188/0x24e [ 358.183062][ T6904] ? memcpy+0x3c/0x60 [ 358.187067][ T6904] ? show_regs_print_info+0x12/0x12 [ 358.192313][ T6904] ? load_image+0x410/0x410 [ 358.196851][ T6904] panic+0x2d3/0x710 [ 358.200772][ T6904] ? bpf_jit_dump+0xd0/0xd0 [ 358.205331][ T6904] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 358.211340][ T6904] ? _raw_spin_unlock+0x40/0x40 [ 358.216219][ T6904] check_panic_on_warn+0x80/0xa0 [ 358.221180][ T6904] ? dvb_device_open+0xc5/0x360 [ 358.226044][ T6904] end_report+0x66/0x110 [ 358.230306][ T6904] kasan_report+0x118/0x140 [ 358.234838][ T6904] ? dvb_device_open+0xc5/0x360 [ 358.239703][ T6904] dvb_device_open+0xc5/0x360 [ 358.244396][ T6904] chrdev_open+0x585/0x5f0 [ 358.248839][ T6904] ? cd_forget+0x160/0x160 [ 358.253597][ T6904] ? fsnotify_perm+0x39b/0x550 [ 358.258383][ T6904] ? cd_forget+0x160/0x160 [ 358.262837][ T6904] do_dentry_open+0x7dd/0x10b0 [ 358.267634][ T6904] path_openat+0x2674/0x2f10 [ 358.272248][ T6904] ? verify_lock_unused+0x140/0x140 [ 358.277469][ T6904] ? do_sys_openat2+0xdd/0x4f0 [ 358.282251][ T6904] ? do_filp_open+0x420/0x420 [ 358.286948][ T6904] do_filp_open+0x1ee/0x420 [ 358.291468][ T6904] ? vfs_tmpfile+0x470/0x470 [ 358.296082][ T6904] ? _raw_spin_unlock+0x24/0x40 [ 358.300955][ T6904] ? alloc_fd+0x590/0x640 [ 358.305302][ T6904] do_sys_openat2+0x14b/0x4f0 [ 358.310413][ T6904] ? do_sys_open+0xe0/0xe0 [ 358.314852][ T6904] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 358.320887][ T6904] ? lock_chain_count+0x20/0x20 [ 358.325769][ T6904] __x64_sys_openat+0x135/0x160 [ 358.330676][ T6904] do_syscall_64+0x4c/0xa0 [ 358.335109][ T6904] ? clear_bhb_loop+0x60/0xb0 [ 358.339808][ T6904] ? clear_bhb_loop+0x60/0xb0 [ 358.344524][ T6904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.350436][ T6904] RIP: 0033:0x7f79d8f5e98e [ 358.354866][ T6904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 358.374483][ T6904] RSP: 002b:00007f79d9dfeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 358.382894][ T6904] RAX: ffffffffffffffda RBX: 00007f79d9dff6c0 RCX: 00007f79d8f5e98e [ 358.390894][ T6904] RDX: 0000000000040002 RSI: 00007f79d9dfec00 RDI: ffffffffffffff9c [ 358.398867][ T6904] RBP: 00007f79d9dfec00 R08: 0000000000000000 R09: 0000000000000000 [ 358.406832][ T6904] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 358.414798][ T6904] R13: 00007f79d9226218 R14: 00007f79d9226180 R15: 00007ffdf3f0a3f8 [ 358.422846][ T6904] [ 358.426156][ T6904] Kernel Offset: disabled [ 358.430474][ T6904] Rebooting in 86400 seconds..